ISO 27001 Experts in Dortmund
with precise AI matching and vetted, available freelancersHire experts who design information security management systems, prepare audit evidence and guide certification projects aligned with ISO 27001. FRATCH connects you with vetted, available freelancers whose experience fits your scope, industry and timeline.
Meet FRATCH Experts in Dortmund, who have recently used ISO 27001
Christian F.
Last position:
Project Lead & Cyber Security Consultant at Deutsche Börse Gruppe
- Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
- Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units
Jens B.
Last position:
Senior Cyber Security Consultant at Brennscheidt IT Consulting
KEY PROJECTS
Since 05/2023 | Bank | Senior Cyber Security Consultant (external)
- Advising and guiding the system owners in creating and further developing IT security concepts
- Coordinating and tracking the remediation of findings from reviews and audits
- Advising on the implementation of regulatory requirements for information security
10/2023 – 02/2024 | Fintech | Project Manager (external)
- Project management to close various audit gaps in the field of information security
- Conceptual design and implementation of an information security management system based on ISO/IEC 27001
- Creation and further development of ISMS documents and processes
Laurin H.
Last position:
Software Architect (Freelance) at Care4Sure
- Delivered MVP-focused full-stack architecture for a health-sector client: Vite/React frontend, backend services on Google Cloud Run, and Supabase for database plus IAM/authentication.
- Supported product requirements engineering and prioritized cost-aware workload placement, implementing browser-side/edge computation where feasible before moving logic to backend services.
Tarek E.
Last position:
Associate GRC at Egerer Consulting
Carve-out project: Creation of certification strategy, implementation and requirements plans across several standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz and BSI TR- RESISCAN
- Cross-standard assessment of the current state and risk evaluation
- Coordination with stakeholders across departments: ISB, management, certification bodies, legal and data protection
- Consulting in the areas of information security, GRC and IT auditing
Mohamad A.
Last position:
Systems Engineer for Network Security at Bechtle AG
- SD-WAN solution by Aruba – Swiss energy company (330 sites): design and implementation of an SD-WAN branch solution with Aruba 9004 gateways, encrypted overlay, policy-based routing, WAN load balancing, and centralized management via Aruba Central.
- LAN/WLAN & security – schools in Germany (9 sites): deployment of Aruba switches & AP-505, FortiGate 80F firewalls; setup of Checkmk monitoring, incident and change management, and secure admin access (BeyondTrust).
- Multi-site security – energy billing company (20 sites): deployment of a complete Fortinet solution (FortiGate HA cluster, FortiSwitch PoE, FortiAP), IPsec remote-access VPN via FortiClient, centralized management via FortiCloud, IntraID authentication, operations and incident management.
- Data center migration – German client: migration of data center switches (Mellanox), firewall cluster, and OfficeConnect switches to a new data center; securing configurations, implementing HA designs, testing, monitoring, and coordinated change and incident processes. Setup of two new 6300 M VSX clustered switches.
- Data center security – university hospital: implementation of a high-availability FortiGate 400F firewall cluster across three data centers; security policy design, operational support, and change/incident management.
- Enterprise campus & network access control – manufacturing company in Germany: introduction of Aruba ClearPass NAC, setup of a VSX-based switching architecture, secure WLAN access with MPSK, and integration into existing networks.
- EU client (Germany & Poland) – Sophos firewalls: operations, incident and change management of Sophos firewalls including IPsec VPN; troubleshooting and ongoing optimization of security configurations.
- Network modernization – pharmacy client in Germany: design and rollout of core and access switching (Mellanox, Aruba Instant On), migration from Sophos to Fortinet firewalls, network segmentation, and security hardening.
Manfred L.
Last position:
Senior Consultant Information Security at Creditplus Bank AG
- Designing the information security process based on ITIL 4
- Designing the ITIL 4 incident and change management processes
- Creating information security policies for the bank
- Support in the project for internal audit findings
- Advising on the setup of the bank's internal control systems (ICS)
- Advising on setting up ICS processes
- Advising and supporting security architecture and risk analysis of the existing IT landscape, including IT security architecture, data management, data compliance & physical security
- Advising and project leadership for the security concept of the bank's assets
- Advising and support in contracts with external service providers to meet the bank's regulatory (BAIT; MaRisk; DORA; NIS2; GDPR) and information security requirements
- Support in planning and implementing a SOC/SIEM and risk management
- Support for the spam email team in analyzing and handling incidents
Discover over 15,000 top freelancers
Statistics of experts using ISO 27001
Aggregated from the professional profiles of matched freelancers.
Experience
13 years (Germany: 22 years)
Position duration
1.5 years (Germany: 2.6 years)
Positions per freelancer
10 (Germany: 14)
Top business areas
Information Technology, Audit, Project Management
Top industries
Information Technology, Banking and Finance, Insurance
Certification focus areas
Information Technology, Audit, Project Management
Bachelor's degree or higher
100% (Germany: 87%)
Master's degree or higher
60% (Germany: 53%)
Certifications per freelancer
5 (Germany: 6)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 97%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Dortmund are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Dortmund using ISO 27001
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ISO 27001 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (83%)
- Banking and Finance (67%)
- Insurance (67%)
- Government and Administration (67%)
- Professional Services (50%)
- Automotive (33%)
- Energy (33%)
- Healthcare (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What ISO 27001 Covers
ISO/IEC 27001 is the international standard for an information security management system, commonly called an ISMS. It gives organisations a structured way to identify information risks, select suitable controls, document responsibilities and improve security over time. Certification demonstrates that the management system has been assessed against the standard’s requirements.
Where It Is Used
ISO 27001 supports organisations that handle sensitive customer, employee, financial or operational information. It is common in software, cloud services, manufacturing, healthcare, logistics, finance and public-sector supply chains.
- Establishing an ISMS and defining its scope
- Preparing for internal and external certification audits
- Managing supplier, access and incident risks
- Supporting customer security reviews and tenders
Standards and Tooling
Strong specialists connect ISO 27001 with practical security and compliance work. They interpret Annex A controls, maintain risk registers and statements of applicability, and align policies with frameworks such as ISO 27002, SOC 2, NIST Cybersecurity Framework and applicable data-protection requirements. Evidence often comes from identity management, endpoint security, vulnerability management, ticketing and document-control tools.
When to Bring in Experts
Freelance expertise helps when an organisation is starting its first ISMS, changing certification scope or preparing for an audit. It is also useful after an acquisition, cloud migration, major incident or customer due-diligence request.
- Audit findings remain open or lack clear ownership
- Policies exist but do not match daily operations
- Risk assessments are inconsistent across teams
- Evidence is scattered across business and technical tools
What Strong Specialists Deliver
Experienced ISO 27001 professionals turn requirements into workable processes. They can run risk workshops, define control owners, create audit-ready evidence, test procedures and coordinate business, IT, legal and management stakeholders. They distinguish documented intent from demonstrable operation and keep the ISMS proportionate to the organisation’s actual risks.
Working Together in Dortmund
Companies in Dortmund can engage specialists for on-site workshops, remote implementation or a blended model. Local collaboration can help with interviews, process mapping and management reviews, while secure remote access supports document analysis and evidence tracking. Agree early on language, confidentiality, access rules and the boundaries of the certification scope.
Frequently asked questions
Questions about ISO 27001? Start with the answers below.
ISO 27001 is used to establish and continually improve an information security management system, or ISMS. It helps an organisation manage risks, assign control responsibilities, protect information and prepare for an independent certification audit.
ISO 27001 defines requirements for a certifiable management system, while SOC 2 reports on controls against selected trust service criteria and the NIST Cybersecurity Framework provides guidance for managing cybersecurity risk. Companies often use them together rather than treating them as direct substitutes.
A strong ISO 27001 specialist usually understands risk management, internal auditing, cloud security, identity and access management, incident response and supplier assurance. Knowledge of ISO 27002, data protection and business continuity is also valuable when controls cross departmental boundaries.
The right ISO 27001 experience depends on the ISMS scope, existing controls, number of locations and audit stage. A focused gap assessment may need a different profile from a full implementation, remediation programme or certification-readiness review. Ask for comparable deliverables, not only a certification claim.
ISO 27001 work can often be delivered remotely through secure document sharing, interviews and evidence reviews. On-site workshops in Dortmund may still help with process observation, management sessions and stakeholder alignment. The working model should reflect confidentiality requirements and the organisation’s access policies.
Ask an ISO 27001 specialist to explain the proposed scope, assessment method, deliverables and audit assumptions. Useful outputs include a risk register, treatment plan, control mapping, policy set, evidence plan and clear ownership model. References or anonymised examples can show whether the work was practical.
Quality ISO 27001 advice connects each recommendation to a real information risk and an accountable process owner. Strong work is specific, evidence-based and proportionate; it does not rely on copied policies or controls that no team can operate. Independent review of sample evidence and open findings is a useful quality check.
During an ISO 27001 audit, a freelancer may coordinate evidence, prepare interviewees, explain risk decisions, track nonconformities and support corrective actions. They can also help maintain the statement of applicability and ensure that documented procedures match operational practice. The organisation’s management remains responsible for its ISMS and decisions.
The average hourly rate of freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects is 106 €, which corresponds to a daily rate of about 848 € based on an 8-hour working day.
Of the freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects, 100% hold at least a Bachelor's degree and 60% hold at least a Master's degree.
On average, freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects have 13 years of professional experience, with a single engagement typically lasting around 1.5 years.
The most common languages among freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects are German (100%), English (100%), and French (50%).
The most common industries among freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects are Information Technology (83%), Banking and Finance (67%), and Insurance (67%).
The most common business areas among freelancers in Dortmund, Germany who have used ISO 27001 in their recent projects are Information Technology (100%), Audit (67%), and Project Management (67%).
Main locations of FRATCH Experts, who have recently used ISO 27001
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
