KAIT Experts in Germany
matched in minutes with vetted, available freelancers and the power of AIHire experts who translate KAIT requirements into practical IT governance, control frameworks and audit-ready evidence for capital management companies. FRATCH matches you quickly and precisely with vetted, available freelancers who fit your project.
Meet FRATCH Experts in Germany, who have recently used KAIT
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Karl-Heinz R.
Last position:
Supporting the further development of a European IT branch service organization (15 countries) at European retail company (discount retailer)
- Documenting the current Incident Management, IT Service Request Management, Problem Management, Change Management and Service Configuration Management processes (including CMDB)
- Conducting maturity assessments for these processes based on the ITIL® 4 Maturity Model
- Analyzing the various service value streams based on the ITIL® 4 value stream model
- Agreeing on maturity levels for the assessed processes
- Developing and approving a roadmap to achieve and measure the respective maturity levels
- Presenting the approach, including milestones, to management for approval
- Managing external service providers in 1st Level Support
Peter K.
Last position:
IT Audit Expert at Sparkasse
Support for Internal Audit:
Conducting an audit of the data protection officer and data protection management:
- Preparing an audit program based on the audit field concept
- Requesting the necessary audit documentation
- Carrying out control testing based on the audit program with the following focus:
- Reviewing the relevant PPS processes
- Reviewing the data protection mission statement, data protection policy, and data protection management concept
- Conducting audit interviews with the data protection officer
- Preparing the audit documentation
- Training a junior auditor in the methodology of Internal Audit
- Coordinating the audit documentation with the head of audit
Pierre G.
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Matthias O.
Last position:
IT Project Manager at IT service provider
Implementation of anti-money laundering requirements under AMLA/KYC for an international major bank in Munich
Services provided:
- Clarification of the assignment and definition of the work package structure for the AMLA/KYC implementation project
- AI-supported project planning using a custom AI workflow for project management
- Preparation of the project management plan
- Resource and capacity planning
- Development of collaboration structures between the IT service provider and the bank client
- Agreement on responsibilities (RACI matrix)
- Management of 5 project members (core team)
- Project control, project monitoring, project reporting
- Communications management
- Escalation management
- Stakeholder management (11 stakeholders)
- Permanent member of the Steering Committee
- Project representation internally and externally
- Project reporting and management of decision-making bodies
- Project volume: 506 person-days (development effort)
- Risk management
- Quality management
- Organization and delivery of workshops
Methods: PMI PMBOK, EVM, GWG, DORA, BAIT, KANBAN, AML, AMLR, AMLA, GWG, KYC
IT environment: JIRA, Confluence, Sharepoint, Kantata Kimble, AI LLM Copilot, ChatGPT, anti-money laundering systems (custom-developed and SMARAGD)
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Kai S.
Last position:
Senior Manager Regulatory Changes and Digitalization at Consulting Firm
- Responsible for business development, sales, partnerships, and marketing
- Project management and business analysis for regulatory and strategic projects
- Test management
- Expert in digitalization strategies
- Expert in new EU regulations and legislative changes
- Expert in client-related projects
- Implementations in asset management and in the banking sector
Theo L.
Last position:
Project Manager, Consultant at Umicore
- Led the migration of local SharePoint sites to SharePoint Online, including planning, coordination, and communication
- Advised on governance, security, and data protection
- Created project documents: project charter, project plan, communication strategy plan, risk and risk mitigation plan, scope of work documents
- Analyzed manual processes and developed automated solutions
Leonid R.
Last position:
IT Business Analyst / Requirements Engineer at S-Payment GmbH / Sparkasse (DSV-Gruppe)
- Business analysis of payments for the introduction of Wero EPI in Germany.
- Analysis and optimization of merchant processes in the context of acquiring and issuing.
- Analysis of interfaces for instant payments.
- Analysis of SCT-Inst processes, settlement mechanisms and reporting processes.
- Identification and clarification of gaps in merchant processes.
- Analysis and documentation of clearing and settlement processes.
- OSPlus process analysis and documentation.
- Coordination and alignment with scheme management as well as various payment service providers and financial institutions on merchant processes.
- Preparation and follow-up as well as active participation in EPI meetings on technical coordination and regulatory topics in payments, including content familiarization and prioritization.
- Preparation and documentation of project and steering committees in the EPI environment.
- Creation of status reports for the subproject.
- Maintenance and structuring of Confluence pages for project documentation.
- Coordination and alignment with the issuing teams on individual customer processes as well as aligning with bank processes and acquirer processes in the Wero environment.
- Communication with payment service providers regarding merchant and bank processes in the Wero environment.
- Organizational support for project management in special tasks in the EPI and Wero environment.
- Digital filing and documentation in Confluence and Microsoft Teams.
- Planning, implementation and tracking of work packages and steps.
- Quality assurance and project control.
- Consulting on IT strategy, IT architecture and interface management in the EPI and Wero environment.
- Technical environment: Jira, Confluence, XML, JSON, MS Office (Word, Excel, Teams, PowerPoint), SharePoint, Draw.io, Innovator, 3rd-level support, ITIL, creation and updating of software documentation, interface management, OSPlus, Scrum, KYC, payment, European Payments Initiative (EPI), Wero, Microsoft Loop, Instant Payments, SCT-Inst.
Markus J.
Last position:
Support ICT Asset Management & Info Registers at Zurich
- Finalization of the information register and ICT asset management
- ICT service provider analyses including sub-service providers
- Contract analyses with assessment of protection needs and system integration architecture
- IDV, kwF and mapping of approval-requiring activities and processes
Andreas N.
Last position:
M&A Integration Project Manager at GI Group
- Developed a project management roadmap and project plan for integration
- System migration to Zvoove
- Integrated payroll and invoicing processes
Ralf S.
Last position:
Senior Consultant / Developer at Überall Lokal
- Development of a marketplace for local retailers
- Technologies: Java, ORACLE, Ingres, REST, Spring Boot, Angular, nginx.
Tobias P.
Last position:
IT Consultant & Support at International asset management company
- Consulting on regulatory requirements in IT governance, IT security, KAIT, KAMaRisk & KAGB, ITIL, COBIT
- Development of emergency manuals and a BCM concept according to KAIT requirements, based on the BSI IT-Grundschutz standard 200-4
- Preparation of documents for the PwC audit
- Redesign of access management and risk management according to KAIT
- Administration, user management and setup of RE-VC
- Vendor management
- Establishment of filing structure and naming convention
- Change management including communication plan
Henryk O.
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Discover over 15,000 top freelancers
Statistics of experts using KAIT
Aggregated from the professional profiles of matched freelancers.
Experience
28 years
Position duration
2.6 years
Positions per freelancer
21
Top business areas
Information Technology, Project Management, Operations
Top industries
Banking and Finance, Information Technology, Insurance
Certification focus areas
Information Technology, Project Management, Quality Assurance
Bachelor's degree or higher
100%
Master's degree or higher
54%
Doctorate
15%
Certifications per freelancer
8
Most common languages
German, English, French
Speak two or more languages
95%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using KAIT
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KAIT experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Banking and Finance (86%)
- Information Technology (77%)
- Insurance (64%)
- Professional Services (59%)
- Government and Administration (45%)
- Energy (41%)
- Healthcare (41%)
- Manufacturing (36%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
KAIT in financial IT
KAIT is the BaFin framework for IT requirements at German capital management companies. The name refers to Kapitalverwaltungsgesellschaften-Anforderungen an die IT. It addresses secure, reliable and properly governed information technology across investment operations, risk management and reporting.
Governance and controls
KAIT connects IT strategy with documented responsibilities, risk assessment and internal controls. It covers information security, access management, outsourcing, incident handling, business continuity and the oversight of critical services. Evidence must be clear, current and traceable.
Practical deliverables
KAIT specialists help companies turn regulatory expectations into working processes and reviewable records.
- Map existing controls against KAIT requirements
- Define IT risk, security and access procedures
- Document outsourcing and provider oversight
- Prepare continuity, incident and recovery evidence
- Support internal and external reviews
Tools and adjacent skills
Work around KAIT often involves information-security management, IT risk methods and governance, risk and compliance tooling. Useful adjacent knowledge includes ISO 27001, DORA, BSI guidance, cloud controls, identity and access management, service management and audit documentation. Specialists also need to understand investment processes and the responsibilities of a capital management company.
When external expertise helps
Companies bring in freelance KAIT expertise during regulatory remediation, new outsourcing arrangements, cloud migrations, control-framework changes or audit preparation. In Germany, specialists may work with compliance, risk, security and IT teams on site or remotely. Clear German documentation is often important when policies and evidence are reviewed locally.
What strong specialists deliver
Strong KAIT professionals distinguish between a policy that exists and a control that works. They link each requirement to an owner, process, system and piece of evidence. They ask precise questions about critical services, dependencies and residual risk, then create documentation that business teams can maintain after the engagement ends.
Frequently asked questions
The facts hiring teams ask for most often when it comes to KAIT.
KAIT defines IT requirements for German capital management companies under BaFin supervision. It helps organizations structure information security, IT risk management, outsourcing oversight, continuity planning and control evidence.
KAIT is tailored to capital management companies, while VAIT focuses on insurance undertakings and BAIT on banks. DORA adds a broader European framework for digital operational resilience, so a project may need to map KAIT controls to DORA obligations rather than treat them as separate workstreams.
A strong KAIT specialist usually understands IT risk, information security, outsourcing governance and audit evidence. Experience with ISO 27001, BSI guidance, cloud controls, identity management, service management and DORA is also valuable.
The right level depends on the scope. A focused control review needs practical knowledge of KAIT requirements and documentation, while a full remediation or operating-model project calls for experience across governance, security, outsourcing and regulated investment operations.
Many KAIT activities can be completed remotely, including document reviews, control mapping and workshops. On-site work may still help when specialists need access to restricted environments, conduct interviews or coordinate closely with German-speaking compliance and IT teams.
Ask how the specialist has translated KAIT requirements into owned controls, procedures and evidence. Request examples of work involving outsourcing, access controls, incidents or continuity, while protecting confidential client information.
High-quality KAIT work is specific, traceable and usable. Each requirement should connect to a risk, control owner, operating process, system and review record, with gaps and remediation priorities stated plainly.
Working with KAIT requires more than reading the framework. Professionals need to understand how capital management companies operate, how outsourced services are governed and how security controls are tested, documented and maintained over time.
The average hourly rate of freelancers in Germany who have used KAIT in their recent projects is 120 €, which corresponds to a daily rate of about 957 € based on an 8-hour working day.
Of the freelancers in Germany who have used KAIT in their recent projects, 100% hold at least a Bachelor's degree, 54% hold at least a Master's degree, and 15% hold a doctorate.
On average, freelancers in Germany who have used KAIT in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 2.6 years.
The most common languages among freelancers in Germany who have used KAIT in their recent projects are German (100%), English (95%), and French (23%).
The most common industries among freelancers in Germany who have used KAIT in their recent projects are Banking and Finance (86%), Information Technology (77%), and Insurance (64%).
The most common business areas among freelancers in Germany who have used KAIT in their recent projects are Information Technology (95%), Project Management (95%), and Operations (86%).
Main locations of FRATCH Experts, who have recently used KAIT
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
