ISO 27001 Experts in Düsseldorf
matched in minutes from over 15,000 CVsHire experts who design information security management systems, prepare organisations for certification audits and improve risk controls across cloud and on-premises environments. FRATCH connects you quickly with vetted, available freelancers whose experience fits your scope.
Meet FRATCH Experts in Düsseldorf, who have recently used ISO 27001
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Adrian K.
Last position:
Senior Advisor, Process Governance & Transformation at MOIA GmbH
- Ran a group-wide steering committee to set strategic direction for a turnaround program. Planned delivery to secure go-to-market and investor milestones
- Prepared the project structure and supplier management process for an ACQ.4 Automotive SPICE audit. Built dry runs and compiled evidence with the team, resulting in a successful CL2 assessment
- Synchronized Automotive SPICE activities with the organization's SAFe rollout by screening base practices and agile artifacts for overlap. Avoided approximately 30% duplicate effort
Timo T.
Last position:
Gronic Ident & Sign at Gronic Systems GmbH
Gronic Ident & Sign
Core technologies: Android, Jetpack Compose, Retrofit, Regula Document Reader, Adobe Sign
Android app on dedicated devices for identifications and electronic signatures at the PoS
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Wolfgang S.
Last position:
CIO / CDO / Project Manager AI Academy / Auditor of Operational Processes / Product Owner MS365 at F&P Executive Solutions AG
- Digitalization of accounting, signature/approval, and onboarding processes
- Restructuring of the IT department
- Introduction of a digital sales tool
- Implementation of an AI webinar series
- Introduction and optimization of information security
- Administration and optimization of the MS Office 365 environment
Ralph K.
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Saba F.
Last position:
Lead AI Strategy & Governance Consultant at Public Sector
- Operating Model Design: Designed and rolled out a 3-tier AI Governance Operating Model, defining organizational structures, roles, tooling, guidelines and processes across Corporate, Business Units, and Implementation layers to manage compliance for 200,000+ employees.
- EU AI Act Compliance: Led the strategic screening and risk classification of 3,800+ AI applications, implementing automated assessments for prohibited practices and General Purpose AI (GPAI) requirements.
- Enterprise Roll-out: Orchestrated the deployment of an internal GPT platform and Generative AI tools, defining the value proposition and adoption strategies for 10,000+ users.
- AI Literacy Architecture: Designed a modular AI training framework to transition the workforce from legacy manual workflows to AI-assisted processes.
- Executive Storylining: Developed strategic narratives for the CIO and Board to secure buy-in for AI investments, translating technical model performance into business-value summaries.
- PMO Infrastructure: Built the end-to-end PMO infrastructure using Jira, Confluence, and Azure Boards to track transformation progress and cross-entity dependencies.
Marc S.
Last position:
Consultant / Interim / Freelance at Self-employed
- Hybrid/Remote
- Digitalisation introduction and optimisation of software
- Advice on the introduction of AI
- Data & AI strategy
- Interim / tech consultant
- Product, process & management
- Vendor management
- Compliance management platforms (ISO 27001, GDPR, EU AI Act)
- M&A due diligence & analysis
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Abdelkader E.
Last position:
Lead Business Analyst (PIM)
- Further development and optimization of the PIM system (e.g. data modeling, interfaces, user experience)
- Analysis, structuring, and professional evaluation of business requirements in close coordination with business units and stakeholders
- Translating business requirements into functional and technical concepts (business & solution design)
- Designing and further developing the target PIM architecture including data models, object structures, versioning, and lifecycle concepts
- Defining interfaces, integration concepts, and data flows between PIM, eCommerce, ERP, and other systems
- Quality assurance in close collaboration with business units and the development team
- Effort estimations for analysis, design, and testing activities
- Agile, Scrum, 4APortal, SAP ERP, SAP eCommerce (Hybris)
Rakesh L.
Last position:
Multi Domain Expert IT Infrastructure at Speira GmbH
- Development and implementation of multi-domain infrastructure strategies to optimize system performance in OT and IT.
- Design of security concepts for multi-domain infrastructures, including IT security management.
- Oversight of incident management, problem management, and change management.
- Managing the entire lifecycle of a strategic project, including planning, execution, delivery, and stabilization.
- Supporting IT governance, IT architecture, and risk management.
- Conducting workshops on IT security and infrastructure.
Kai V.
Last position:
Process Manager in Operational Change Management at Jungheinrich AG
- Introduction of a central change process
- Technical support for the operational implementation of changes (ITIL technical change management)
- Co-design and technical implementation of digital processes
Kaliyan M.
Last position:
Techno-Functional Consultant – Digital Lab & Manufacturing Systems at Dynavax Technologies
- Led SampleManager LIMS 21.x & LabWare LIMS v8 implementation, reducing manual lab errors by 40% and improving data traceability.
- Configured LW LIMS & SM LIMS 21.2: workflow design, role-based access control (RBAC), and master data management.
- Designed and configured LES workflows: sample lifecycle management, test assignments, approvals, and result review processes.
- Managed Master Menu and CI configuration, ensuring consistency, data integrity, and regulatory compliance.
- Integrated LIMS 21.2 with MES, ERP, EM, WinKQCL (Lonza MODA), SoftMax Pro, Empower, and Chromeleon CDS via REST APIs and web services.
- Implemented PAS-X MES: architecture design, multi-platform implementation (PAS-X, Siemens Opcenter), and integration with PLC, SCADA, and DCS systems.
- Executed IQ/OQ/PQ qualification protocols and Validation Summary Reports (VSR) for QC analytical and utility systems in aseptic and sterile production environments.
- Developed and reviewed Risk Assessments, Traceability Matrices, and Data Integrity evaluations in accordance with ALCOA+, 21 CFR Part 11, and EU Annex 11.
- Led EMA/FDA/WHO inspection readiness, standardized CQV SOPs, enabled digital CQV integration (LIMS/CDS/MES/SCADA/ERP/SDMS), and ensured 21 CFR Part 11 & Annex 11 compliance.
- Managed secure OT cybersecurity: network configuration and access control.
- Configured NuGenesis SDMS for document/data management, CDS/LIMS integration, workflow automation, and reporting.
Torsten S.
Last position:
Managing Director at mac + you GmbH
- CFO of the company
- Consulting in processes and process management
- Consulting in information security ISO 27001
- Consulting Scrum / Agile Management
- Project management for IT projects, especially doctors' practices
- Digitalization projects
- Data protection / data security training
Discover over 15,000 top freelancers
Statistics of experts using ISO 27001
Aggregated from the professional profiles of matched freelancers.
Experience
23 years (Germany: 22 years)
Position duration
2.2 years (Germany: 2.6 years)
Positions per freelancer
15 (Germany: 14)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Automotive, Professional Services
Certification focus areas
Information Technology, Project Management, Quality Assurance
Bachelor's degree or higher
79% (Germany: 87%)
Master's degree or higher
43% (Germany: 53%)
Doctorate
7% (Germany: 9%)
Certifications per freelancer
5 (Germany: 6)
Most common languages
German, English, Spanish
Speak two or more languages
89% (Germany: 97%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Düsseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Düsseldorf using ISO 27001
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ISO 27001 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (95%)
- Automotive (53%)
- Professional Services (47%)
- Energy (42%)
- Banking and Finance (42%)
- Healthcare (42%)
- Government and Administration (42%)
- Insurance (32%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What ISO 27001 covers
ISO 27001 is the international standard for an information security management system, or ISMS. It gives organisations a structured way to identify information risks, select controls, document responsibilities and improve security over time. Certification demonstrates that security is managed through a repeatable system rather than isolated technical measures.
Core ISMS work
An ISO 27001 specialist turns the standard into practical governance. Typical work includes defining the ISMS scope, assessing risks, creating a statement of applicability and maintaining policies, procedures and evidence. The specialist also aligns security objectives with business processes, legal duties and customer requirements.
- Define scope, assets, stakeholders and security objectives
- Build risk assessment and treatment methods
- Map controls to operational processes
- Prepare audit evidence and management reviews
Controls and tooling
Effective programmes connect governance with daily operations. Professionals work with access management, supplier security, incident response, business continuity, asset registers, awareness programmes and corrective actions. Depending on the environment, they may coordinate evidence from Microsoft 365, Azure, AWS, ticketing systems, vulnerability scanners and governance tools.
When companies need help
Freelance expertise is useful when a company is starting an ISMS, changing its certification scope or preparing for a stage one or stage two audit. It is also valuable after an acquisition, major cloud migration, security incident or customer request for formal assurance. In Düsseldorf, specialists often support industrial, logistics, software, finance and service organisations while coordinating with local teams and international stakeholders.
Selecting a specialist
Strong professionals combine knowledge of ISO 27001:2022 with practical risk management and clear communication. Look for experience with internal audits, nonconformity handling, control ownership and evidence that stands up to scrutiny. The right specialist can explain requirements to leadership and operational teams without turning the ISMS into unnecessary paperwork.
- Review relevant certification and audit preparation work
- Check experience with comparable scope and risk profiles
- Test whether recommendations are specific and measurable
- Confirm familiarity with remote and on-site collaboration
Outcomes and continuity
A well-run ISMS gives teams a consistent way to make security decisions, track improvements and respond to changing risks. It can support customer due diligence, supplier reviews and regulatory expectations, but certification alone is not a security guarantee. After the audit, specialists help maintain control performance, refresh risk assessments and prepare for surveillance audits.
Frequently asked questions
Not sure where to start with ISO 27001? These answers cover the essentials.
ISO 27001 is used to establish, operate and continually improve an information security management system. It helps organisations manage risks to confidentiality, integrity and availability across people, processes, technology and suppliers.
ISO 27001 certifies an organisation's management system against an international standard. SOC 2 reports assess controls against defined trust service criteria, so the choice depends on customer expectations, market requirements and the type of assurance needed.
A strong ISO 27001 specialist often brings risk assessment, internal auditing, supplier assurance and business continuity skills. Knowledge of cloud security, identity management, incident response and data protection helps translate the standard into workable controls.
The right level of ISO 27001 experience depends on scope, organisational complexity and the maturity of existing controls. A focused gap assessment may need targeted support, while a new ISMS requires broader ownership from scoping through audit preparation and continual improvement.
ISO 27001 work is often suitable for remote collaboration because documents, interviews, risk registers and evidence reviews can be handled online. On-site workshops in Düsseldorf may still help with process observation, asset validation and engagement across operational teams.
An ISO 27001 specialist should clarify the ISMS scope, assess gaps, prioritise risks and establish an evidence plan. They should also prepare process owners, run an internal audit or readiness review and track corrective actions without promising a guaranteed certification outcome.
Ask an ISO 27001 professional to explain how they have handled risk treatment, control ownership, audit findings and management review. Good answers are specific, evidence-based and adapted to your environment rather than copied from a generic checklist.
ISO 27001 is internationally recognised, so its core principles apply across locations and industries. A specialist in Düsseldorf can support German teams and remote stakeholders, while adapting documentation, communication and implementation to the organisation's language and operating context.
The average hourly rate of freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects is 108 €, which corresponds to a daily rate of about 861 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects, 79% hold at least a Bachelor's degree, 43% hold at least a Master's degree, and 7% hold a doctorate.
On average, freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects have 23 years of professional experience, with a single engagement typically lasting around 2.2 years.
The most common languages among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are German (100%), English (89%), and Spanish (21%).
The most common industries among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are Information Technology (95%), Automotive (53%), and Professional Services (47%).
The most common business areas among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are Information Technology (100%), Project Management (89%), and Operations (74%).
Main locations of FRATCH Experts, who have recently used ISO 27001
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dortmund 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
