ISMS Experts in Düsseldorf
matched in minutes with vetted, available freelancers and the power of AIHire experts who establish information security management systems, prepare organisations for ISO/IEC 27001 audits, and improve risk, policy and incident processes. FRATCH connects you with precise matches from vetted, available freelancers quickly.
Meet FRATCH Experts in Düsseldorf, who have recently used ISMS
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Timo T.
Last position:
Gronic Ident & Sign at Gronic Systems GmbH
Gronic Ident & Sign
Core technologies: Android, Jetpack Compose, Retrofit, Regula Document Reader, Adobe Sign
Android app on dedicated devices for identifications and electronic signatures at the PoS
Ralph K.
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Kaliyan M.
Last position:
Techno-Functional Consultant – Digital Lab & Manufacturing Systems at Dynavax Technologies
- Led SampleManager LIMS 21.x & LabWare LIMS v8 implementation, reducing manual lab errors by 40% and improving data traceability.
- Configured LW LIMS & SM LIMS 21.2: workflow design, role-based access control (RBAC), and master data management.
- Designed and configured LES workflows: sample lifecycle management, test assignments, approvals, and result review processes.
- Managed Master Menu and CI configuration, ensuring consistency, data integrity, and regulatory compliance.
- Integrated LIMS 21.2 with MES, ERP, EM, WinKQCL (Lonza MODA), SoftMax Pro, Empower, and Chromeleon CDS via REST APIs and web services.
- Implemented PAS-X MES: architecture design, multi-platform implementation (PAS-X, Siemens Opcenter), and integration with PLC, SCADA, and DCS systems.
- Executed IQ/OQ/PQ qualification protocols and Validation Summary Reports (VSR) for QC analytical and utility systems in aseptic and sterile production environments.
- Developed and reviewed Risk Assessments, Traceability Matrices, and Data Integrity evaluations in accordance with ALCOA+, 21 CFR Part 11, and EU Annex 11.
- Led EMA/FDA/WHO inspection readiness, standardized CQV SOPs, enabled digital CQV integration (LIMS/CDS/MES/SCADA/ERP/SDMS), and ensured 21 CFR Part 11 & Annex 11 compliance.
- Managed secure OT cybersecurity: network configuration and access control.
- Configured NuGenesis SDMS for document/data management, CDS/LIMS integration, workflow automation, and reporting.
Heiko F.
Last position:
External Senior Advisor, Workshop Design and Facilitation at Mainova
ISMS-/KRITIS Target Vision and Development Roadmap
Energy / Utilities | regulated and KRITIS-focused environment
- Two half-day workshops with a structured interim phase to further develop the ISMS.
- Three-year target vision for governance/scope/roles, integration/scopes, management, as well as policies and interfaces.
- Facilitation of key areas of tension and consolidation into an implementation-oriented development roadmap.
Result: 30 specified work packages | 15 workshop focus areas + 15 additions
Melanie L.
Last position:
IT Consultant at BOVERMANN IT SOLUTIONS GmbH
- Design and development of an information security management system (ISMS) according to DIN EN ISO/IEC 27001
Matthias F.
Last position:
Information Security Project Manager at Deutsche Bahn AG
- Introduction of a new Information Security Management System (ISMS) according to ISO/IEC 27001.
- Implementation of the RL CySec-Rail cybersecurity directive for cross-border rail networks.
Discover over 15,000 top freelancers
Statistics of experts using ISMS
Aggregated from the professional profiles of matched freelancers.
Experience
27 years (Germany: 22 years)
Position duration
1.5 years (Germany: 2.5 years)
Positions per freelancer
18 (Germany: 14)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Professional Services, Energy
Certification focus areas
Information Technology, Quality Assurance, Audit
Bachelor's degree or higher
83% (Germany: 87%)
Master's degree or higher
67% (Germany: 56%)
Doctorate
17% (Germany: 12%)
Certifications per freelancer
11 (Germany: 7)
Most common languages
German, English, Spanish
Speak two or more languages
75% (Germany: 97%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Düsseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Düsseldorf using ISMS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ISMS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (88%)
- Professional Services (63%)
- Energy (50%)
- Government and Administration (50%)
- Banking and Finance (38%)
- Healthcare (38%)
- Manufacturing (38%)
- Pharmaceutical (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What ISMS covers
An Information Security Management System, or ISMS, is a structured way to govern information security across an organisation. It defines how a company identifies risks, protects information, measures controls and improves its security programme. An ISMS can support compliance, customer assurance and resilient business operations.
Core frameworks
ISO/IEC 27001 is the most widely recognised reference for an ISMS. Specialists map business risks to controls, policies and evidence, while related guidance such as ISO/IEC 27002 helps interpret control practices. Depending on the organisation, the work may also connect with GDPR, NIS2, SOC 2 or sector-specific requirements.
Typical deliverables
- Information security policies, procedures and control sets
- Asset registers, risk assessments and treatment plans
- Statement of Applicability and audit evidence
- Supplier, access and incident management processes
- Internal audit plans and management review materials
These deliverables turn security expectations into repeatable processes that teams can operate and improve.
When specialists help
Companies often bring in freelance ISMS specialists before certification, during a remediation programme or when an existing system has become difficult to maintain. They can provide an independent gap assessment, coordinate evidence collection or take ownership of a defined workstream. In Düsseldorf, local specialists may support workshops on site while continuing documentation and reviews remotely.
Skills around ISMS
Effective work combines governance with practical security knowledge. Useful adjacent skills include risk management, internal auditing, data protection, business continuity, supplier assurance, identity and access management, vulnerability handling and security awareness. Experience with GRC tools, document repositories and ticketing workflows helps embed controls into daily operations rather than leaving them in static files.
What strong professionals bring
Strong ISMS professionals connect controls to real business processes and explain requirements clearly to leadership, technical teams and auditors. They distinguish meaningful risk treatment from paperwork, define evidence that teams can maintain and track corrective actions to closure. Look for experience with the organisation’s regulatory context, clear documentation habits and the ability to work effectively with German- and English-speaking stakeholders.
Frequently asked questions
What clients ask us most about ISMS — answered in short.
An ISMS gives an organisation a repeatable framework for managing information security risks. It brings together policies, controls, responsibilities, evidence and improvement activities, often to support ISO/IEC 27001 certification or customer assurance.
An ISMS is a management system rather than a single audit report or policy library. SOC 2 assesses controls against defined trust criteria, while an ISMS establishes how risks, controls and improvement are governed over time; the approaches can support each other.
A capable ISMS specialist usually understands risk assessment, internal auditing, data protection, business continuity and supplier security. Familiarity with identity management, incident response, GRC tools and security awareness also helps connect governance with operational security.
The right ISMS background depends on the scope, starting point and audit objective. A focused policy or gap-assessment assignment may need a specialist with a narrow focus, while a certification programme benefits from someone who has led risk, control implementation, evidence and stakeholder coordination across the organisation.
Yes. ISMS work is well suited to remote collaboration because much of it involves interviews, document review, risk workshops and evidence tracking. On-site sessions in Düsseldorf can still be valuable for process walkthroughs, leadership meetings and workshops with German-speaking stakeholders.
A strong ISMS professional can show how they translated business risks into practical controls and maintained evidence through change. Ask for anonymised examples of risk registers, audit preparation, corrective-action tracking and stakeholder communication, then test whether their recommendations fit your operating model.
An ISMS does not have to be certified to be useful. ISO/IEC 27001 provides a recognised structure and certification route, but an organisation may also use the framework internally to improve risk management, customer assurance and security governance without pursuing formal certification.
An ISMS freelancer should clarify the business scope, information assets, risk appetite, regulatory drivers, existing controls and intended outcome. They should also agree who owns decisions, where evidence is stored, how teams will participate and how progress will be reviewed.
The average hourly rate of freelancers in Dusseldorf, Germany who have used ISMS in their recent projects is 102 €, which corresponds to a daily rate of about 818 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used ISMS in their recent projects, 83% hold at least a Bachelor's degree, 67% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Dusseldorf, Germany who have used ISMS in their recent projects have 27 years of professional experience, with a single engagement typically lasting around 1.5 years.
The most common languages among freelancers in Dusseldorf, Germany who have used ISMS in their recent projects are German (100%), English (75%), and Spanish (25%).
The most common industries among freelancers in Dusseldorf, Germany who have used ISMS in their recent projects are Information Technology (88%), Professional Services (63%), and Energy (50%).
The most common business areas among freelancers in Dusseldorf, Germany who have used ISMS in their recent projects are Information Technology (100%), Project Management (88%), and Operations (63%).
Main locations of FRATCH Experts, who have recently used ISMS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
