KRITIS Experts in Düsseldorf
matched in minutes from over 15,000 CVs with the power of AIHire experts who protect critical services, assess operational risks and prepare resilient security processes across the KRITIS landscape. FRATCH connects you with vetted, available freelancers whose skills precisely fit your project.
Meet FRATCH Experts in Düsseldorf, who have recently used KRITIS
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Marcus W.
Last position:
CIO (ad interim) at Bartec Group
- Responsible for infrastructure, operations, network and VoIP, security, quality assurance, as well as asset management and business continuity
- Planning and implementation of all requirements related to NIS 2.0
- Responsible for application development
- Company-wide implementation of SAP S/4Hana and leading development of new business processes, incl. cut-over planning
- Digital transformation and cultural transformation toward a "doer mentality"
- Realignment of infrastructure (hybrid)
- Restructuring of the organization with partial outsourcing
- Management of four direct reports with a total of 25 internal and external employees
- Budget responsibility of up to €25 million
Ralph K.
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Heiko F.
Last position:
External Senior Advisor, Workshop Design and Facilitation at Mainova
ISMS-/KRITIS Target Vision and Development Roadmap
Energy / Utilities | regulated and KRITIS-focused environment
- Two half-day workshops with a structured interim phase to further develop the ISMS.
- Three-year target vision for governance/scope/roles, integration/scopes, management, as well as policies and interfaces.
- Facilitation of key areas of tension and consolidation into an implementation-oriented development roadmap.
Result: 30 specified work packages | 15 workshop focus areas + 15 additions
Discover over 15,000 top freelancers
Statistics of experts using KRITIS
Aggregated from the professional profiles of matched freelancers.
Experience
28 years (Germany: 24 years)
Position duration
0.8 years (Germany: 2.1 years)
Positions per freelancer
20 (Germany: 18)
Top business areas
Information Technology, Project Management, Strategy
Top industries
Information Technology, Energy, Banking and Finance
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
100% (Germany: 88%)
Master's degree or higher
60% (Germany: 49%)
Certifications per freelancer
14 (Germany: 8)
Most common languages
German, English, Spanish
Speak two or more languages
67% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Düsseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Düsseldorf using KRITIS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KRITIS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Energy (67%)
- Banking and Finance (67%)
- Healthcare (67%)
- Insurance (67%)
- Manufacturing (67%)
- Government and Administration (67%)
- Telecommunication (67%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What KRITIS covers
KRITIS refers to critical infrastructures whose failure could significantly affect public life, safety or economic activity. The field covers sectors such as energy, water, healthcare, transport, finance, food and digital infrastructure. Specialists help companies protect essential services against cyber incidents, technical failures and operational disruption.
Protection in practice
KRITIS work connects information security with business continuity, risk management and resilient operations. Experts assess systems, identify weak points and translate security requirements into practical controls. They also support incident response, recovery planning, supplier assessments and evidence for audits or supervisory reviews.
- Identify critical services and dependencies
- Assess cyber, physical and operational risks
- Define continuity and recovery measures
- Test response plans and escalation paths
Ecosystem and standards
The work may involve security management systems, network segmentation, identity and access controls, monitoring, backup strategies and emergency communication. Depending on the sector, professionals work with ISO 27001, BSI guidance, NIS2 requirements, sector-specific rules and established risk frameworks. Strong documentation connects technical safeguards with accountable processes.
When companies bring in experts
Companies often need freelance KRITIS expertise during compliance programmes, infrastructure changes, audits, incident preparation or major outsourcing decisions. Düsseldorf organisations in healthcare, finance, logistics, manufacturing and public services may need support that combines local stakeholder work with remote delivery. Specialists can join an existing team for a defined assessment or guide a wider resilience programme.
- Prepare for an audit or regulatory review
- Map suppliers, assets and service dependencies
- Create incident response and business continuity plans
- Validate controls through exercises and technical reviews
What strong professionals deliver
Effective KRITIS professionals understand both the technology and the organisation around it. They communicate clearly with leadership, operations, procurement and security teams, then turn complex risks into prioritised actions. Look for experience with comparable infrastructure, concise evidence, realistic remediation plans and the ability to work independently without losing alignment with internal stakeholders.
Choosing the right fit
The required profile depends on the service, threat model, regulatory context and project stage. Ask candidates to explain how they would scope critical assets, handle conflicting priorities and measure readiness without relying on vague claims. For Düsseldorf projects, clarify whether workshops require on-site presence, which languages stakeholders use and how remote access will be managed securely.
Frequently asked questions
Quick answers to the questions that come up most around KRITIS.
KRITIS is used to protect critical infrastructure and the services that society and the economy depend on. It combines cybersecurity, operational resilience, continuity planning, incident response and risk management.
KRITIS focuses on the resilience of essential services, not only on protecting individual systems or data. A KRITIS programme also considers physical dependencies, suppliers, recovery capability, emergency processes and the consequences of service disruption.
A strong KRITIS specialist usually combines information security with business continuity, risk analysis, audit preparation and incident management. Knowledge of ISO 27001, BSI guidance, NIS2, cloud environments and supplier risk can be valuable, depending on the sector.
The right level depends on the scope and impact of the service being protected. A focused control review may need a specialist with targeted experience, while a cross-organisational resilience programme calls for a senior KRITIS professional who can align technical, operational and management stakeholders.
KRITIS work can often be delivered remotely through secure collaboration, document reviews, interviews and workshops. On-site sessions may still be useful for inspecting facilities, validating operational processes or meeting stakeholders in Düsseldorf, so the project should define access and presence requirements early.
Ask how the specialist would identify critical services, map dependencies and prioritise remediation. A capable KRITIS freelancer should explain the method in practical terms and show how findings become owned actions, testable controls and usable evidence.
Quality is visible in clear scope, traceable risk decisions, realistic recovery measures and documentation that operations can maintain. Strong KRITIS work also includes exercises or validation activities rather than stopping at a policy document.
KRITIS specialists support organisations in energy, water, healthcare, transport, finance, food production and digital infrastructure. The exact obligations and controls vary by sector, so relevant domain experience matters when selecting a freelancer for a Düsseldorf assignment.
The average hourly rate of freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects is 127 €, which corresponds to a daily rate of about 1,012 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects, 100% hold at least a Bachelor's degree and 60% hold at least a Master's degree.
On average, freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 0.8 years.
The most common languages among freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects are German (100%), English (67%), and Spanish (33%).
The most common industries among freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects are Information Technology (100%), Energy (67%), and Banking and Finance (67%).
The most common business areas among freelancers in Dusseldorf, Germany who have used KRITIS in their recent projects are Information Technology (100%), Project Management (100%), and Strategy (100%).
Main locations of FRATCH Experts, who have recently used KRITIS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
