ISO 27001 Experts in Dusseldorf
matched in minutes from over 15,000 CVsHire experts who establish information security management systems, prepare evidence for certification audits and connect risk controls with daily operations. FRATCH matches you quickly and precisely with vetted, available freelancers for ISO 27001 work.
Meet FRATCH Experts in Dusseldorf, who have recently used ISO 27001
Alicja W.
Last position:
Integrated Security and Emergency Documentation for a 24/7 Logistics Company at Medium-Sized Logistics Company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), Access Control Policy, Vulnerability Management Policy, Business Resilience Programme, Risk Governance Plan
- Consolidation into an integrated emergency manual (12 chapters) with immediate-action checklists for six emergency scenarios, a prioritized action table and a formal approval structure
- Review and documentation of the applicability of NIS2 and HinSchG, including the legal justification for non-applicability
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As the only large integrated energy company in Germany, EnBW covers the entire value chain - from energy production through distribution to customers. It expands its renewable energy sources, advocates for a socially responsible coal exit, and drives key technologies like green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developed and implemented a holistic process view covering both technical and organizational aspects Ensured end-to-end control of all IAM-related technical services Established clear responsibilities and accountabilities within the IAM landscape Collaborated with different departments to identify and optimize a holistic architecture and act as Single Point of Contact (SPoC) for Information Security Introduced and monitored governance policies to ensure compliance and security Continuously improved IAM processes and systems through regular audits and evaluations Participated in external audits of the process as part of official ISO audits Further developed the policy for setting administrative requirements and procedures and aligned it with administrative units Conceptually advanced the KPI system to measure process quality
Wolfgang S.
Last position:
CIO / CDO / Project Manager AI Academy / Auditor of Operational Processes / Product Owner MS365 at F&P Executive Solutions AG
- Digitalization of accounting, signature/approval, and onboarding processes
- Restructuring of the IT department
- Introduction of a digital sales tool
- Implementation of an AI webinar series
- Introduction and optimization of information security
- Administration and optimization of the MS Office 365 environment
Ralph K.
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Saba F.
Last position:
Lead AI Strategy & Governance Consultant at Public Sector
- Operating Model Design: Designed and rolled out a 3-tier AI Governance Operating Model, defining organizational structures, roles, tooling, guidelines and processes across Corporate, Business Units, and Implementation layers to manage compliance for 200,000+ employees.
- EU AI Act Compliance: Led the strategic screening and risk classification of 3,800+ AI applications, implementing automated assessments for prohibited practices and General Purpose AI (GPAI) requirements.
- Enterprise Roll-out: Orchestrated the deployment of an internal GPT platform and Generative AI tools, defining the value proposition and adoption strategies for 10,000+ users.
- AI Literacy Architecture: Designed a modular AI training framework to transition the workforce from legacy manual workflows to AI-assisted processes.
- Executive Storylining: Developed strategic narratives for the CIO and Board to secure buy-in for AI investments, translating technical model performance into business-value summaries.
- PMO Infrastructure: Built the end-to-end PMO infrastructure using Jira, Confluence, and Azure Boards to track transformation progress and cross-entity dependencies.
Marc S.
Last position:
Consultant / Interim / Freelance at Self-employed
- Hybrid/Remote
- Digitalisation introduction and optimisation of software
- Advice on the introduction of AI
- Data & AI strategy
- Interim / tech consultant
- Product, process & management
- Vendor management
- Compliance management platforms (ISO 27001, GDPR, EU AI Act)
- M&A due diligence & analysis
Kai V.
Last position:
Process Manager in Operational Change Management at Jungheinrich AG
- Introduction of a central change process
- Technical support for the operational implementation of changes (ITIL technical change management)
- Co-design and technical implementation of digital processes
Abdelkader E.
Last position:
Lead Business Analyst (PIM)
- Further development and optimization of the PIM system (e.g. data modeling, interfaces, user experience)
- Analysis, structuring, and professional evaluation of business requirements in close coordination with business units and stakeholders
- Translating business requirements into functional and technical concepts (business & solution design)
- Designing and further developing the target PIM architecture including data models, object structures, versioning, and lifecycle concepts
- Defining interfaces, integration concepts, and data flows between PIM, eCommerce, ERP, and other systems
- Quality assurance in close collaboration with business units and the development team
- Effort estimations for analysis, design, and testing activities
- Agile, Scrum, 4APortal, SAP ERP, SAP eCommerce (Hybris)
Rakesh L.
Last position:
Multi Domain Expert IT Infrastructure at Speira GmbH
- Development and implementation of multi-domain infrastructure strategies to optimize system performance in OT and IT.
- Design of security concepts for multi-domain infrastructures, including IT security management.
- Oversight of incident management, problem management, and change management.
- Managing the entire lifecycle of a strategic project, including planning, execution, delivery, and stabilization.
- Supporting IT governance, IT architecture, and risk management.
- Conducting workshops on IT security and infrastructure.
Kaliyan M.
Last position:
Techno-Functional Consultant – Digital Lab & Manufacturing Systems at Dynavax Technologies
- Led SampleManager LIMS 21.x & LabWare LIMS v8 implementation, reducing manual lab errors by 40% and improving data traceability.
- Configured LW LIMS & SM LIMS 21.2: workflow design, role-based access control (RBAC), and master data management.
- Designed and configured LES workflows: sample lifecycle management, test assignments, approvals, and result review processes.
- Managed Master Menu and CI configuration, ensuring consistency, data integrity, and regulatory compliance.
- Integrated LIMS 21.2 with MES, ERP, EM, WinKQCL (Lonza MODA), SoftMax Pro, Empower, and Chromeleon CDS via REST APIs and web services.
- Implemented PAS-X MES: architecture design, multi-platform implementation (PAS-X, Siemens Opcenter), and integration with PLC, SCADA, and DCS systems.
- Executed IQ/OQ/PQ qualification protocols and Validation Summary Reports (VSR) for QC analytical and utility systems in aseptic and sterile production environments.
- Developed and reviewed Risk Assessments, Traceability Matrices, and Data Integrity evaluations in accordance with ALCOA+, 21 CFR Part 11, and EU Annex 11.
- Led EMA/FDA/WHO inspection readiness, standardized CQV SOPs, enabled digital CQV integration (LIMS/CDS/MES/SCADA/ERP/SDMS), and ensured 21 CFR Part 11 & Annex 11 compliance.
- Managed secure OT cybersecurity: network configuration and access control.
- Configured NuGenesis SDMS for document/data management, CDS/LIMS integration, workflow automation, and reporting.
Matthias F.
Last position:
Information Security Project Manager at Deutsche Bahn AG
- Introduction of a new Information Security Management System (ISMS) according to ISO/IEC 27001.
- Implementation of the cybersecurity guideline RL CySec-Rail for cross-border rail networks.
Torsten S.
Last position:
Managing Director at mac + you GmbH
- CFO of the company
- Consulting in processes and process management
- Consulting in information security ISO 27001
- Consulting Scrum / Agile Management
- Project management for IT projects, especially doctors' practices
- Digitalization projects
- Data protection / data security training
Nikolaus B.
Last position:
ICT Risk Management and Information Security at B. Metzler seel. Sohn & Co. AG
- Independently develop policies, guidelines, and frameworks for ICT risk management and information security
- Advise business units on ICT risk management and information security
- Further develop the ICT risk management framework that governs the identification, assessment, and control of ICT risks
- Evaluate the Information Security Management System (ISMS) and adjust it for new challenges
- Conduct risk analyses to identify and assess potential ICT risks and information security risks for the Metzler Group
- Advise on defining and implementing measures to reduce risks and improve the resilience of ICT systems
- Advise on ensuring compliance with relevant internal and external regulatory requirements (MaRisk, DORA, BAIT, BSI IT baseline protection, ISMS, ISO 27001, ISO 42001, ISO 27005, BCM ISO 22301)
- Advise on internal and cross-functional projects (SAP DORA compliance, Target2, Section 8a BSI Act)
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Discover over 15,000 top freelancers
Statistics of experts using ISO 27001
Aggregated from the professional profiles of matched freelancers.
Experience
24 years (Germany: 22 years)
Position duration
2.3 years (Germany: 2.6 years)
Positions per freelancer
14
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Automotive, Healthcare
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
79% (Germany: 88%)
Master's degree or higher
43% (Germany: 52%)
Doctorate
7% (Germany: 10%)
Certifications per freelancer
5 (Germany: 6)
Most common languages
German, English, Spanish
Speak two or more languages
89% (Germany: 97%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Dusseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Dusseldorf using ISO 27001
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ISO 27001 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (94%)
- Automotive (50%)
- Healthcare (50%)
- Professional Services (50%)
- Government and Administration (50%)
- Energy (39%)
- Banking and Finance (39%)
- Manufacturing (39%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What ISO 27001 covers
ISO 27001 is the international standard for an information security management system, or ISMS. It gives companies a structured way to identify information risks, select controls, assign responsibilities and improve security over time. Certification demonstrates that security is managed through a repeatable, auditable process.
Where it is used
ISO 27001 supports organizations that handle sensitive customer, employee, financial or operational information. Typical work includes:
- Defining the ISMS scope, policy and governance model
- Assessing risks across people, processes, suppliers and technology
- Preparing for internal, certification and surveillance audits
- Managing corrective actions and continual improvement
Standards and tooling
Strong ISO 27001 work connects the standard with practical security operations. Professionals may work with risk registers, asset inventories, statements of applicability, control libraries and audit evidence repositories. They often align the ISMS with ISO 27002 guidance, GDPR obligations, business continuity practices and frameworks such as NIST or CIS Controls.
When companies need help
Companies often bring in freelance expertise before certification, during a major audit or when an existing ISMS has lost momentum. A specialist can clarify ownership, reduce gaps in evidence and make controls usable for teams rather than creating paperwork that sits apart from operations. This is valuable for companies in Dusseldorf across manufacturing, logistics, finance, healthcare and business services.
What strong specialists deliver
Effective professionals combine governance discipline with technical understanding. They translate business risks into clear controls, interview process owners, test whether controls work and write evidence that an auditor can follow. They also explain requirements in plain language and leave behind maintainable registers, procedures, training materials and improvement plans.
Working with freelance expertise
ISO 27001 projects can be handled remotely when documents, workshops and evidence are accessible online. On-site sessions may help with stakeholder interviews, facility reviews or sensitive operating environments. For Dusseldorf teams, German and English language expectations, audit schedules and coordination with legal, IT, procurement and executive stakeholders should be agreed at the start.
Frequently asked questions
Not sure where to start with ISO 27001? These answers cover the essentials.
ISO 27001 is used to establish, operate and continually improve an information security management system. It helps a company manage risks to confidential information, integrity and availability while preparing for an independent certification audit.
ISO 27001 is a certifiable management system standard with a broad risk-based structure. SOC 2 focuses on controls linked to defined trust services criteria, while NIST provides a flexible cybersecurity framework; companies may use these approaches together rather than treat them as direct substitutes.
A strong ISO 27001 specialist usually understands risk assessment, internal auditing, supplier security, business continuity and privacy requirements. Familiarity with cloud security, identity management, incident response and governance tools is useful when controls must operate across technical and business teams.
The right level depends on the ISMS scope, company maturity and audit deadline. A smaller gap assessment may need a focused specialist, while certification across several sites or business units calls for someone who has led risk workshops, control implementation, evidence reviews and audit preparation.
ISO 27001 work is often suitable for remote collaboration because policies, registers, interviews and evidence can be managed digitally. On-site work can still be important for facility controls, workshops and stakeholder access, especially when a Dusseldorf organization has complex physical operations.
An ISO 27001 freelancer should provide a clear baseline, prioritized actions and practical ownership for each control. Expected deliverables may include the ISMS scope, risk methodology, risk register, statement of applicability, documented procedures, evidence plan and audit-readiness review.
Ask an ISO 27001 professional to explain how they turn business risks into operating controls, not just documents. Review anonymized deliverables, audit experience, stakeholder methods and examples of corrective actions, then check whether their recommendations fit your systems, culture and regulatory context.
For ISO 27001 projects in Dusseldorf, agree whether workshops, evidence requests and audit support will be handled in German, English or both. Define document ownership, meeting routines, access to internal systems and the boundary between remote analysis and on-site work before the engagement begins.
The average hourly rate of freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects is 111 €, which corresponds to a daily rate of about 886 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects, 79% hold at least a Bachelor's degree, 43% hold at least a Master's degree, and 7% hold a doctorate.
On average, freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects have 24 years of professional experience, with a single engagement typically lasting around 2.3 years.
The most common languages among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are German (100%), English (89%), and Spanish (28%).
The most common industries among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are Information Technology (94%), Automotive (50%), and Healthcare (50%).
The most common business areas among freelancers in Dusseldorf, Germany who have used ISO 27001 in their recent projects are Information Technology (100%), Project Management (89%), and Operations (83%).
Main locations of FRATCH Experts, who have recently used ISO 27001
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dortmund 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
