KRITIS Experts in Frankfurt
matched in minutes by AIHire experts who design, assess and improve critical infrastructure security, resilience and compliance across energy, healthcare, transport and public services. FRATCH connects you with precise, fast-matched freelancers who are vetted and available.
Meet FRATCH Experts in Frankfurt, who have recently used KRITIS
Reza N.
Last position:
Senior IT-Security Expert at Teambank AG
- Completed the integration of log sources into Microsoft Sentinel, including GCP workloads – centralized consolidation of all security-relevant events from Azure and GCP environments for complete end-to-end telemetry and comprehensive compliance evidence
- Developed custom rules and use cases based on the GFG Use-Case Library and the MITRE ATT&CK Matrix to cover company-specific threats and GFG-relevant scenarios with precise, mapped detection rules
- Tuned detection rules to minimize false positives, optimized detection thresholds, and modeled exceptions – enabling the SOC to work with relevant, prioritized alerts while reducing Mean Time to Detect/Respond
- Built SOAR capabilities in Sentinel by developing playbooks to automate recurring response processes such as containment, user and host isolation, and ticketing – shorter response times and 24/7 scalability
- Designed and built a log transformation solution to normalize and enrich incoming raw logs (GeoIP, CMDB, threat intelligence) and convert them into a consistent schema for high-performance KQL queries, use case logic, and correlations
- Managed Azure security through Azure Policies to enforce security and compliance standards, prevent drift, and continuously remediate deviations
- Operated the Defender XDR portal to link endpoint, identity, email, and SaaS signals with Sentinel findings, enable holistic incident triage, and orchestrate measures directly from XDR
Technologies: Microsoft Sentinel, Microsoft Defender XDR, Azure Policy, KQL, GCP, MITRE ATT&CK
Felix T.
Last position:
Data Engineering and Power BI at Wesernetz Bremen
Independently built a data platform with cross-system process monitoring.
- Designed the Bronze/Silver/Gold architecture and Python-based pipelines for diverse operational sources.
- Cleaned, harmonized, and validated data; processed and stored it in Parquet format.
- Tracked data history and built business-focused fact and dimension models for traceable reporting.
- Automated data delivery with Python and Power Automate (desktop and cloud); used SharePoint for archiving and data access.
- Developed the Power BI solution from data preparation through to visualizing process statuses, work progress, and deviations.
Technologies: Python, SQL, Parquet, Power BI, Power Query, Power Automate, SharePoint, Copilot
Axel Z.
Last position:
Project Manager at NTT Global Data Centers
- Project lead
- Coordinated the rollout of 148 firewalls (Palo Alto) for 74 buildings at over 14 locations in EMEA
- Managed the team (8 employees)
- Communicated with Senior Management (local) and Site Managers (EMEA)
- Ensured work packages were completed on time and to requirements, and formally accepted
- Extensive use of relevant Microsoft tools
- Wrike (project management)
Günther E.
Last position:
Senior Consultant at ISMS Rollout – Information Security Certification (ISO 27001)
- Built and successfully certified the Information Security Management System (ISMS) according to ISO 27001 in seven country organizations (Ghana, India, Bangladesh, Uzbekistan, Serbia, Kosovo, Albania).
- Full implementation of the ISMS from kick-off phase to certification, including defining the governance structure and process landscape.
- Developed and delivered target-group-specific trainings, workshops, and coaching sessions for local responsible persons on the basics of information security and ISMS operations.
- Designed and continuously improved training concepts and content to increase understanding and acceptance.
- Identified and implemented improvements in processes and tools, including risk management for international projects.
- Optimized central ISMS core processes from the idea through pilot operation and fine-tuning to global rollout.
- Optimized knowledge management, as well as work aids and methods for the global ISMS team.
- Built and moderated cross-functional coordination with key interfaces to the ISMS.
- Microsoft Teams, Excel, SharePoint Lists, Power Apps.
Mario P.
Last position:
Senior IT Project Manager / Program Lead – Network Strategy 2030 at ALDB GmbH
- Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
- Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
- Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
- Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
- Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
- Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
- Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
- Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
- Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control
Andreas I.
Last position:
Cybersecurity Specialist Assessor at Bundesnetzagentur
- Recognition of national notified bodies
- Preparation of cybersecurity competency reports
- EU Radio Equipment Directive
Peter S.
Last position:
IT Project Manager at PAS Provider for Hospital
Overall responsibility for managing a clinical digitization project in a regulated hospital environment.
Design and implementation of a patient call and management system (PASO) for the orthopedics department of a large hospital.
- Project management, planning, and control
- Process analysis and optimization, and managing implementation and rollout
- Coordination with clinical departments, IT, and external service providers
- Ensuring integration into existing IT and process landscapes
Project scope: 310 person-days, team size: 21 members.
Peter W.
Last position:
ISO 27001 Auditor for health insurance archive system at Health insurance company
The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.
The internal audit is meant to ensure the company's quality standards.
GDPR
ISO 27001 ff.
BSI
DORA
Patient data regulations
Host / Cloud / S3 / Container / highly scalable / Nuxeo
Budget: 50,000
Team: 1
Achim K.
Last position:
Portfolio Manager, Consultant, Leadership Coach at Abbvie Deutschland GmbH &Co. KG
- Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
- Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
- Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
- Preparing projects for works council information and project closeout communication
- Optimization of resource management (tracking, allocation, prioritization)
- Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
- Supporting the hiring of external project managers
- Optimization of meeting structure, project controlling (KPIs), change and demand management
- Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
- Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
- Design and implementation of a Business Value Complexity Scoring
- Building a strategic PMO with a sister department and optimizing cross-functional teams
- Reporting, communication and escalation at management level
- Leadership coaching for several future leaders (short-time assignment)
- Development of the concepts "PPM as a Service" and "Internal Customer Approach"
- Development and review of a concept "AI Data Governance" including roles and processes
- Selection and onboarding of the successor
Thoralf T.
Last position:
Consultant Digital Operational Resilience Act (DORA) at Swisslife Deutschland GmbH
- Auditing CIS evidence of the SOC providers T-Systems Austria and Cancom GmbH
- Mapping of VAIT, ISO:IEC 27002 and CIS 7.0 requirements for the IT realignment strategy of the German subsidiaries in threat intelligence and zero trust
- Reviewing SIEM evidence, reporting, incident management and security breaches
- Reviewing IT asset management regarding ITSCM and BCM processes
- Employee awareness and compliance training focused on CEO fraud
- Advising the chief information security officer
Falk W.
Last position:
SVP IT & Organisation / Deputy SVP Finance & Controlling Infrastructure at B+S Card Service / Payone
- Modernised post-merger regulated payment-processing infrastructure (KRITIS).
- Established cloud-enabled platform and ensured PCI and regulatory compliance.
Daniel S.
Last position:
Business and IT consulting at Business and IT Consulting (freelance)
- Process consulting
- Project management
- Creating and aligning functional and technical specifications
- Portfolio management
- Stakeholder management
- Data cleansing
- Test, quality, and requirements management
- Rollout management
- Financial planning
- Marketing and sales consulting
- IT architecture and strategy consulting
- Trainer for IT, project management, and eBusiness
Markus M.
Last position:
Project Manager / Senior Consultant (multiple projects) at gkv informatik
- Project Manager responsible for managing the revision of ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022), including GAP analysis, project planning, preparation of internal and external audits, and preparation and maintenance of the required documentation.
- Coordination of the adaptation of existing measures and implementation of new measures in accordance with the requirements of the new standard, as well as continuous monitoring and adaptation of the measures.
- Regular reporting to management on progress and risks.
- Senior Consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including remediation of findings, preparation or adaptation of evidence documents and additions to provider contracts.
- Senior Consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of more than 1500 Deliverables & Obligations (D&O), establishment of a D&O tracker (Claim Register) and joint professional review with the service owners for various service descriptions (including IT Service Management, workplace and printing services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification and distribution).
- Senior Consultant adapting service scopes in existing service descriptions to enable end-to-end service responsibility for the provider, including identification and analysis of use cases, process analysis and optimization (Incident, Problem, Change), as well as recording and documenting all software products in LeanIX and documenting them in the Contract Change.
- Focused services: Managed Software Service, Application and Desktop Service, Workplace and Printing Services, Webserver Service, Container Service, M365, SAP/Oscare, Output Management Systems (OMS), Telephony and Omnichannel Management Service.
- Project Manager responsible for managing a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and customer, review of the benchmark results, and preparation and conducting of price negotiations with the IT provider.
Discover over 15,000 top freelancers
Statistics of experts using KRITIS
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 24 years)
Position duration
2.5 years (Germany: 2.1 years)
Positions per freelancer
15 (Germany: 18)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Banking and Finance, Automotive
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
100% (Germany: 88%)
Master's degree or higher
33% (Germany: 49%)
Certifications per freelancer
5 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Frankfurt are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Frankfurt using KRITIS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KRITIS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (92%)
- Banking and Finance (85%)
- Automotive (54%)
- Healthcare (54%)
- Transportation (54%)
- Professional Services (54%)
- Energy (38%)
- Insurance (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What KRITIS covers
KRITIS refers to critical infrastructures whose disruption can affect public safety, economic activity or essential services. It covers sectors such as energy, water, healthcare, transport, finance, telecommunications and public administration. KRITIS work combines operational resilience, information security, risk management and dependable service delivery.
Systems and services
KRITIS specialists work across the technical and organisational layers that keep essential services running. Typical assignments include:
- Assessing risks to industrial control systems and operational technology
- Designing resilient cloud, network and data centre environments
- Protecting healthcare, energy and transport operations from cyber threats
- Preparing incident response, continuity and recovery processes
Compliance context
Companies often need KRITIS expertise when they must translate security requirements into practical controls, evidence and operating procedures. Professionals may work with frameworks and requirements such as BSI guidance, ISO 27001, NIS2, sector-specific obligations and internal governance policies. In Frankfurt, this is relevant to organisations spanning financial services, logistics, healthcare, transport and public infrastructure.
Tools and adjacent skills
Strong KRITIS work connects governance with hands-on technology. Relevant capabilities include security information and event management, identity and access management, vulnerability assessment, network segmentation, backup design, penetration testing, business continuity and supplier risk management. Experience with IT service management and industrial environments is valuable where IT and OT meet.
When companies bring in experts
External professionals add value when a company needs an independent assessment, rapid capacity or specialist knowledge for a regulated transformation. Common triggers include:
- Preparing for an audit, certification or supervisory review
- Responding to a security incident or critical vulnerability
- Integrating cloud, legacy and operational technology environments
- Creating continuity plans and testing recovery capabilities
What strong professionals deliver
The strongest KRITIS professionals link business impact to technical decisions. They define clear protection goals, document assumptions, prioritise risks and communicate with security, operations, compliance and executive stakeholders. They also test whether controls work in practice, leave usable documentation and respect the need for secure collaboration, whether the project is remote or on site in Frankfurt.
Frequently asked questions
Everything clients usually want to know about KRITIS, in one place.
KRITIS describes the protection and reliable operation of critical infrastructures and essential services. A KRITIS professional may assess risks, improve cyber security, design continuity measures or coordinate recovery across IT, OT and business operations.
KRITIS expertise is relevant to energy, water, healthcare, transport, finance, telecommunications, logistics and public administration. The right specialist understands the operational consequences of disruption in the specific sector rather than applying a generic security checklist.
KRITIS focuses on services whose failure can have serious public, economic or operational consequences. General IT security may protect corporate information, while KRITIS work also considers physical processes, availability, recovery, safety, dependencies and the interaction between IT and OT.
A strong KRITIS expert often combines information security with risk management, business continuity, incident response and governance. Depending on the assignment, knowledge of cloud security, industrial control systems, identity management, supplier assurance or ISO 27001 can be essential.
The scope of KRITIS work determines the depth of experience needed. A documentation review may suit a focused compliance specialist, while an incident response programme, OT security assessment or resilience redesign calls for someone who has handled comparable operational complexity.
KRITIS projects can often be delivered remotely for assessments, documentation, workshops and governance design. On-site work may still be necessary for sensitive facilities, operational technology reviews, control validation or collaboration with teams that handle restricted environments.
When assessing a KRITIS freelancer, review comparable assignments, sector knowledge, security practices and the quality of past deliverables. Ask how the professional separates business-critical risks from lower-priority findings and how recommendations will be tested, documented and handed over.
A KRITIS professional working with teams in Frankfurt should communicate clearly with technical, operational, legal and executive stakeholders. German may be important for local procedures and documentation, while English can support international suppliers, group security teams and cross-border projects.
The average hourly rate of freelancers in Frankfurt, Germany who have used KRITIS in their recent projects is 117 €, which corresponds to a daily rate of about 933 € based on an 8-hour working day.
Of the freelancers in Frankfurt, Germany who have used KRITIS in their recent projects, 100% hold at least a Bachelor's degree and 33% hold at least a Master's degree.
On average, freelancers in Frankfurt, Germany who have used KRITIS in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 2.5 years.
The most common languages among freelancers in Frankfurt, Germany who have used KRITIS in their recent projects are German (100%), English (100%), and French (8%).
The most common industries among freelancers in Frankfurt, Germany who have used KRITIS in their recent projects are Information Technology (92%), Banking and Finance (85%), and Automotive (54%).
The most common business areas among freelancers in Frankfurt, Germany who have used KRITIS in their recent projects are Information Technology (100%), Project Management (85%), and Operations (77%).
Main locations of FRATCH Experts, who have recently used KRITIS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Dusseldorf 
Essen Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
