MaRisk Experts in Dusseldorf
for sound risk management with fast, precise AI matchingHire experts who design risk management frameworks, interpret BaFin requirements and strengthen governance, controls and reporting. FRATCH connects you with vetted, available freelancers whose experience matches your MaRisk project quickly and precisely.
Meet FRATCH Experts in Dusseldorf, who have recently used MaRisk
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account  Ensuring end-to-end control of all IAM-related technical services  Establishing clear responsibilities and accountabilities across the IAM landscape  Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security  Introducing and monitoring governance policies to ensure compliance and security  Continuously improving IAM processes and systems through regular audits and service reviews  Taking part in external process audits as part of official audits against ISO standards  Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments  Conceptually developing the KPI system for measuring process quality
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Matthias M.
Last position:
Project Manager at HSBC
- Project Manager for banking projects
- Management and coordination of the projects 'XONTRO T7 Migration' and 'UNO – Unified for New Opportunities'. Management of international stakeholders, preparation and leadership of steering committees, and coordination between departments, exchanges, and external partners.
- Project management of the strategic projects 'XONTRO T7 Migration' and 'UNO – Unified for New Opportunities'
- Management of international stakeholders including exchanges, custodians, and external project partners
- Coordination of functional and technical test activities at the exchanges between trading, IT, accounting, and mid-/back office
- Facilitation of steering committees at management level
- Preparation of decision papers, status reports, and risk analyses
- Conduct analyses in the areas of reporting (compliance, regulatory reporting, etc.), taxes on securities transactions & custody accounts, process analysis
- Enforcement of required requirements/specifications
- Coordination between business, IT, operations, and external market participants
- Coordination and alignment with external market participants, service providers, exchanges, and other project stakeholders
Lucy R.
Last position:
ESG & MaRisk Compliance Officer at Lesora GmbH
- Strengthen MaRisk compliance by enhancing risk management, internal controls, and regulatory processes.
- Optimize compliance workflows and perform key control activities to ensure regulatory alignment.
- Advise management and business units on supervisory requirements and compliance obligations.
- Collaborate closely with internal control functions, risk management, and other governance units to improve cross-functional compliance standards.
- Accompany strategic projects from a compliance perspective.
- Develop ESG measures and contribute to establishing ESG risk management.
- Serve as the ESG point of contact and co-author the company’s first ESG report.
- Deliver internal trainings on compliance and sustainability topics.
Daniel R.
Last position:
Project at VR Factoring
- Consulting services in risk controlling
- Gap analysis to ensure full MaRisk compliance
- Revision of the ICAAP/capital adequacy concept
- Revision of the risk quantification methodology
- Stakeholder management
Heinz-Dieter L.
Last position:
Consultant at CH Crypto Group
- Advice on governance and information security topics: BAIT, MaRisk
- Creating governance documents (policies, guidelines)
- Developing emergency manuals
- Based on BSI IT baseline protection standard 200-4 and ISO2700x
Discover over 15,000 top freelancers
Statistics of experts using MaRisk
Aggregated from the professional profiles of matched freelancers.
Experience
27 years (Germany: 24 years)
Position duration
1.5 years (Germany: 2.4 years)
Positions per freelancer
19 (Germany: 17)
Top business areas
Audit, Project Management, Finance
Top industries
Banking and Finance, Information Technology, Energy
Certification focus areas
Audit, Information Technology, Quality Assurance
Bachelor's degree or higher
100% (Germany: 92%)
Master's degree or higher
60% (Germany: 56%)
Certifications per freelancer
12 (Germany: 6)
Most common languages
German, English, Spanish
Speak two or more languages
86% (Germany: 99%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Dusseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Dusseldorf using MaRisk
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
MaRisk experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Banking and Finance (100%)
- Information Technology (71%)
- Energy (57%)
- Insurance (57%)
- Government and Administration (57%)
- Education (43%)
- Healthcare (43%)
- Automotive (29%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Regulatory framework
MaRisk, short for Mindestanforderungen an das Risikomanagement, is the German supervisory framework for risk management in banks and financial services firms. BaFin uses it to define expectations for governance, risk control, internal processes, outsourcing and reporting. The framework is principles-based, so companies must translate its requirements into controls that fit their business model.
Where it applies
MaRisk shapes how institutions identify, measure, monitor and manage material risks. It covers credit, market, liquidity, operational, compliance and strategic risks, alongside the responsibilities of management and control functions.
- Risk strategy and risk-bearing capacity
- Credit processes and lending controls
- Liquidity and market risk monitoring
- Internal control and reporting structures
Methods and tooling
Work around MaRisk often combines regulatory analysis with practical risk systems. Specialists review policies, process maps, control libraries and management reports, then connect them with data from core banking, finance and risk platforms. Useful adjacent knowledge includes SQL, data quality management, governance, internal audit and regulatory reporting.
Common deliverables include risk inventories, control frameworks, process documentation, limit systems, committee materials and evidence for supervisory reviews. The right tooling depends on the institution’s architecture and reporting model.
When expertise matters
Companies bring in freelance MaRisk professionals when a regulatory change affects processes, when controls need independent review or when a transformation must remain audit-ready. They are also useful during new product launches, acquisitions, outsourcing assessments and remediation programmes.
- Preparing for a BaFin review or internal audit
- Updating risk policies and governance documents
- Testing controls and closing identified gaps
- Aligning business, risk and IT teams
Dusseldorf delivery
Dusseldorf’s banking, insurance and corporate finance environment creates demand for specialists who can work across regulatory, business and technology teams. Local projects may require workshops on site, while documentation, analysis and control testing can often be handled remotely. German regulatory language is usually essential, with English useful for international groups and shared-service teams.
Strong professionals
A strong MaRisk specialist can explain supervisory expectations without losing sight of daily operations. They link risks to accountable owners, measurable controls, reliable data and clear escalation paths. Look for evidence of completed assessments, policy redesigns, audit support or control improvements in a comparable financial environment.
The best professionals also challenge weak assumptions, document decisions and communicate clearly with management, risk functions, compliance, internal audit and IT. They understand that effective MaRisk work is not a document exercise; it must operate consistently and produce evidence when decisions are reviewed.
Frequently asked questions
Questions about MaRisk? Start with the answers below.
MaRisk sets supervisory expectations for the organisation of risk management at German banks and financial services firms. It helps companies define responsibilities, controls, processes and reporting for material risks. A specialist translates those principles into procedures that work in the institution’s operating model.
MaRisk is a German supervisory framework with a strong focus on governance, processes, risk control and the responsibilities of management. It is not a replacement for Basel standards, ISO frameworks or internal control models; those may support the same risk objectives from different perspectives. The right comparison depends on the firm’s regulatory status and operating footprint.
A strong MaRisk freelancer often combines regulatory interpretation with operational risk, credit risk, internal controls, audit readiness and process design. Experience with risk data, SQL, governance tools or regulatory reporting can also be valuable. For technology-led projects, knowledge of system interfaces and data lineage helps connect policy with execution.
The required background depends on the assignment. A focused policy review may need a specialist who can assess wording and control design, while a framework transformation requires broader experience across governance, risk data, processes and stakeholder management. Ask for examples of comparable deliverables rather than relying on titles alone.
MaRisk work can often be delivered remotely when documents, systems and decision-makers are accessible online. On-site workshops in Dusseldorf can still help with process walkthroughs, interviews and management alignment. Agree early on access rules, German-language documentation and the cadence of face-to-face sessions.
For MaRisk, outsourcing must be governed with clear responsibilities, risk assessment, monitoring and access to relevant information. A specialist can review provider controls, service levels, escalation routes and exit arrangements. The assessment should cover both the outsourced activity and the institution’s ability to oversee it.
Ask a MaRisk professional to explain how they would connect a supervisory expectation to a process, control owner, evidence and escalation path. Strong specialists distinguish material risks from formal documentation and can show how findings were resolved. Clear reasoning, relevant work samples and practical stakeholder communication are important quality signals.
Before starting a MaRisk engagement, clarify the institution’s business model, regulatory scope, risk taxonomy, governance structure and expected deliverables. Confirm who owns decisions and how access to policies, data and control evidence will be arranged. In Dusseldorf, German-language communication may be central even when the wider project team works in English.
The average hourly rate of freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects is 109 €, which corresponds to a daily rate of about 870 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects, 100% hold at least a Bachelor's degree and 60% hold at least a Master's degree.
On average, freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects have 27 years of professional experience, with a single engagement typically lasting around 1.5 years.
The most common languages among freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects are German (100%), English (86%), and Spanish (29%).
The most common industries among freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects are Banking and Finance (100%), Information Technology (71%), and Energy (57%).
The most common business areas among freelancers in Dusseldorf, Germany who have used MaRisk in their recent projects are Audit (86%), Project Management (86%), and Finance (71%).
Main locations of FRATCH Experts, who have recently used MaRisk
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Munich 
Cologne 
Frankfurt Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
