ISAE 3402 Experts in Germany
in minutes from over 15,000 CVs with vetted specialists and the power of AI.Hire experts who understand ISAE 3402 control reports, service organisation boundaries, and evidence for auditor reviews. Bring in specialists for readiness work, reporting support, and coordination with finance, risk, and compliance teams. FRATCH matches you fast and precisely with vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used ISAE 3402
Dominik Piecuch
Last position:
Head of IT at Aarsleff Spezialtiefbau GmbH
- Disciplinary and professional leadership of the IT and service team
- Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
- Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
- Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
- Introduction and establishment of Jira as the central tool for project and service management
- Introduction and rollout of the HR software MindKey to digitize HR processes
- Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
- Introduction of the production and planning software OptiControl to digitize operational processes
- Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
- Build-up of Power BI dashboards for machine park monitoring and financial reporting
- Planning and execution of the IT consolidation of two locations for 170 users
- Introduction of automated penetration testing with Pentera
- Coaching and mentoring the team in agile methods & project management
- Operational support in day-to-day business: administration, incident & change management
- Management of external service providers and assurance of the quality of outsourced IT services
- Responsibility for the IT budget incl. planning and controlling
- Direct reporting line to management with regular management reports on IT KPIs, budget and project status
Serdar Colak
Last position:
Consultant at Freelance
- ISO 27001 implementation & audit readiness
- NIS2 & DORA compliance support
- Interim / fractional CISO services
- IT risk & controls (ITGC, SOX, COBIT, BAIT)
- M&A and IT due diligence for startups/ventures
- Business continuity management (BCM, ISO 22301)
- Cybersecurity framework development (NIST, ISO, BSI)
- GRC tool advisory (Archer, ServiceNow)
Ulrich Bach
Last position:
Director/Division Head at International consulting firms
- Steering strategic SAP S/4HANA transformation projects in global corporate structures
- Developing and implementing change management strategies and process optimizations
- Trusted advisor to C-level executives for carve-outs and post-merger integrations
- Information security management system (ISMS), ISO/IEC 27001, protection needs assessment, risk management & compliance
- Contract management focusing on legal, business and regulatory compliance
Maxim Ribakowski
Last position:
Information Security Officer at Horváth AG
- Managing the Information Security program according to ISO27001:2022, BAIT, BSI 200-1/4
- Creating and updating IT policies and procedures
- Communicating with C-level and the board (weekly, monthly, quarterly reports on incidents, risks, measures, audits, strategic and personnel planning)
- Coordinating external and internal audits (JAP, BAIT, BaFin)
- Risk management (monitoring improvement measures, assessing new risks, planning and reporting countermeasures)
- Incident management (analyzing security-related incidents, monitoring and planning countermeasures and improvements)
- Training employees on incidents, internal policies, and emergency procedures
- Business continuity management (reviewing and updating BIA, emergency plans, recovery concepts, test results)
- Managing communication between departments as a mediator
- Managing and auditing external service providers (IT, cloud services; SOC 1/2, ISAE 3402 Type 1/2, C5 reports, on-site audits)
Hauke Wollentin
Last position:
Process Automation Engineer at German Edge Cloud / WIIT AG
- Re-designing and implementing the incident management process into Jira
- Implementing the business impact analysis in Jira
- Developing Slack and StatusPage integration in ScriptRunner for Jira
- Mapping of business processes into Jira
- Implementing the service catalogue in Jira, based on Assets as "database" and Jira tickets + SR behaviours as UI for users
- Helping teams with automations, workflows and screens to save time and nerves while using Jira
- Helping teams to perform agile transformations
- Creating a Jira and Confluence based foundation for compliance frameworks and HauckeretifiBcrautinoonsWlikeolIlSeAnEti3n402 and BSI C5
- Atlassian Stack administration
Klaus-Dieter Krause
Last position:
Executive Partner at iAP-Independent Audit Professionals GmbH
Thomas Mitterwachauer-Grigo
Last position:
Interim Head of Data Protection, Compliance and Internal Audit at BIG direkt gesund
- Functional realignment according to IIR standards
- Managing a team of 10 employees
- Serving on the KRITIS steering committee
Alexander Sonntag
Last position:
Senior Contract Manager in the Cyber Security Field at Water IT Security GmbH
- Senior Contract Manager in the Cyber Security Field
- Responsible for the SIEM/SOC of the Water IT Security group
- Data Protection Officer for the Water IT Security group (officially registered with authorities)
- Artificial Intelligence Officer for the Water IT Security group
- Member of the compliance team of the Water IT Security group
Discover over 15,000 top freelancers
Statistics of experts using ISAE 3402
Aggregated from the professional profiles of matched freelancers.
Experience
28 years
Position duration
4.8 years
Positions per freelancer
9
Top business areas
Information Technology, Project Management, Audit
Top industries
Professional Services, Information Technology, Banking and Finance
Certification focus areas
Information Technology, Audit, Quality Assurance
Bachelor's degree or higher
67%
Master's degree or higher
50%
Doctorate
17%
Certifications per freelancer
5
Most common languages
German, English, French
Speak two or more languages
88%
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using ISAE 3402
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
What it covers
ISAE 3402 is the assurance standard used for service organisation controls. It helps companies show that processes tied to financial reporting are designed and operated with discipline. In practice, it often sits alongside SOC 1 reporting and external audit work.
Where it is used
- Service providers that handle data, payments, payroll, or accounting support
- Shared service centres and outsourced back-office operations
- Cloud and software services that affect financial reporting controls
- Internal control documentation for auditors and client reviews
What experts deliver
Strong specialists translate control requirements into clear evidence, narratives, and testable process steps. They help define the scope, map key controls, and prepare the materials auditors need. They also reduce gaps between operational teams and compliance expectations.
Skills that matter
Good ISAE 3402 professionals know control design, walkthroughs, remediation tracking, and audit evidence handling. They understand how to document responsibilities, exceptions, and supporting systems without creating noise. Familiarity with service delivery, risk, and finance processes is essential.
When companies bring them in
Companies usually seek freelance help when they need to prepare for a first report, update an existing one, or fix findings before review. They also bring in specialists when internal teams lack time or when scope changes across systems or locations. In Germany, this is common when international service teams need clear reporting for group audits.
How to judge fit
Look for experts who can explain ISAE 3402 in plain words and work calmly with auditors. They should be able to trace controls from policy to evidence and spot weak documentation fast.
- Clear control mapping and scoping
- Practical evidence review
- Strong writing for reports and walkthroughs
- Comfortable remote coordination across teams
Frequently asked questions
Everything clients usually want to know about ISAE 3402, in one place.
ISAE 3402 is used to report on controls at a service organisation that may affect a client’s financial reporting. It is often relevant for outsourced services, shared service centres, and software or cloud services with control responsibilities. Companies use it to give auditors and customers structured assurance about how key controls work.
ISAE 3402 is the international assurance standard, while SOC 1 is the reporting framework more commonly used in the United States. They cover a similar control area, so the choice often depends on the client base and audit expectation. A strong specialist can help decide whether one report, or aligned versions of both, make sense.
A strong ISAE 3402 specialist usually knows internal controls, risk management, and audit evidence handling. Useful adjacent skills include process mapping, documentation writing, and working with finance or compliance teams. Experience with IT general controls can also help when systems support the control environment.
Companies often bring in ISAE 3402 help when a report is due, a control environment has changed, or an internal team needs extra capacity. Freelancers are also useful during readiness work, remediation, or after audit findings. The best time to start is before evidence collection becomes rushed.
Yes, ISAE 3402 work is often done remotely because much of it is documentation, review, and coordination. In Germany, on-site sessions can still help for walkthroughs, stakeholder interviews, or process clarification. Many projects use a mix of remote work and a few focused in-person meetings.
A ISAE 3402 project needs someone who has handled control reporting in a real service environment, not just read the standard. Small readiness tasks may fit a broad compliance specialist, but report coordination and auditor interaction need deeper experience. The more complex the service scope, the more important that background becomes.
Ask which ISAE 3402 reports they have supported, how they handle control gaps, and how they work with auditors. It also helps to ask for examples of evidence structures, walkthrough preparation, and remediation tracking. You want someone who can move between detail and business context without confusion.
Good ISAE 3402 work is clear, traceable, and easy for auditors to follow. Look for clean control descriptions, consistent evidence, and practical recommendations that fit how the service actually runs. Weak work usually shows up as vague wording, missing ownership, or controls that do not match operations.
The average hourly rate of freelancers in Germany who have used ISAE 3402 in their recent projects is 122 €, which corresponds to a daily rate of about 973 € based on an 8-hour working day.
Of the freelancers in Germany who have used ISAE 3402 in their recent projects, 67% hold at least a Bachelor's degree, 50% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Germany who have used ISAE 3402 in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 4.8 years.
The most common languages among freelancers in Germany who have used ISAE 3402 in their recent projects are German (100%), English (88%), and French (38%).
The most common industries among freelancers in Germany who have used ISAE 3402 in their recent projects are Professional Services (88%), Information Technology (75%), and Banking and Finance (63%).
The most common business areas among freelancers in Germany who have used ISAE 3402 in their recent projects are Information Technology (100%), Project Management (100%), and Audit (88%).
Main locations of FRATCH Experts, who have recently used ISAE 3402
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
