NIS2 Expert
in minutes with vetted, available freelancers matched by AIHire experts who translate NIS2 requirements into practical security controls, incident processes and supplier-risk measures. Get fast, precise matching with vetted, available freelancers who can support compliance assessments, remediation plans and secure operations.
Meet FRATCH Experts who have recently used NIS2
Jonas P.
Last position:
Cyber Security Manager - Home Connect PKI - Team Lead at Bosch - BSH Hausgeräte GmbH
- Lead the team responsible for providing millions of home appliances with trust.
- Certification authority management at scale: Over 300 million certificates issued.
- Certificate lifecycle management, HSM hardening and air gap-based security controls.
- Prepared PQC transition, NIS2 and CRA readiness initiatives.
- Developed and implemented comprehensive security controls and vulnerability management, based on industry best practices and standards.
- Listed top on Bosch Products Hall of Fame 2025 for disclosure of vulnerabilities.
- Achieved a 50%+ team performance improvement through AI automation.
Thomas K.
Last position:
Founder at PentaVision by Thomas Kreutle
Part-time, full-time operations planned from 01/2027
Management consulting for automation, digitalization, interoperability, track & trace and artificial intelligence · Pharma/MedTech and mechanical engineering
- Built a service portfolio across the five competencies: from analysis, architecture and planning to supported implementation.
- Listed as a consultant by BAFA (09/2026): consulting services for SMEs as part of BAFA funding.
- Established a brand identity, website and quality management handbook as the basis for consistent, transparent consulting quality.
Dorothée M.
Last position:
Head of Secure Operations at Fidelity Fondsbank
Willy W.
Last position:
IT Security Consultant
SIEM/SOC Wazuh Implementation
Logistics
Wazuh | OpenSearch | Use Cases | Dashboards | Training
- Advised and provided technical support for the implementation of Wazuh as a SIEM solution
- Prepared and coordinated with teams involved in firewall, network, and IT operations
- Installed and configured Wazuh on the designated server infrastructure
- Developed security-related use cases and dashboards for centralized monitoring
- Delivered employee training on using and analyzing data from the SIEM solution
Erkan Y.
Last position:
Devops Expert at Datev
Task: Operator development and observability
Technologies and skills: Kubernetes, Valkey-Operator, Crossplane, Backstage, OpenPortal, OTEL, Grafana Cloud, Azure DevOps, Artifactory, Flux, Alloy, Prometheus, Grafana, Loki, OCF, Copilot
What I did:
- Evaluated/developed Valkey-Operator
- Set up OpenTelemetry
- Integrated it with OpenPortal/Backstage/CrossPlane
Vivekanandhan S.
Last position:
DevOps Consultant/Site Reliability Engineer at IONOS
- Manage multiple Kubernetes clusters in Production with Ceph as storage layer.
- Implemented CICD pipelines for automating deployments with Gitlab CI
- Terraform for Infrastructure provisioning.
- Claude code
- Helm charts for deploying via ArgoCD
- Implemented automated incident notification pipelines in Kubernetes to align with NIS2 mandatory 24-hour early warning disclosure rules
- Configured Azure Policy and Logging guardrails aligned with BSI IT-Grundschutz (SYS.1.3 / OPS.1.1), ensuring continuous baseline compliance across 50+ cloud workloads
Environment: Gitlab CI, IONOS Cloud, Ceph, ArgoCD, terraform, Elastic cluster, Grafana, Alert Manager & Prometheus
Roberto S.
Last position:
Requirements Management & Compliance for the Cyber Resilience Act (CRA) at Please inquire
Technology company
- Analysis of CRA requirements
- Management workshop
- Development of recommendations
Result: Prioritized CRA readiness plan for compliance.
Joerg S.
Last position:
Various short-term CTO, Enterprise Architecture Advisory for companies at various
Support for Transformation Projects:
- Expert CTO advisory and enterprise architecture consulting for several short-term transformation projects, ensuring measurable improvements in project outcomes and technical business alignment.
- Supporting strategic IT initiatives for diverse clients, driving digital transformation and optimizing technology operations to increase business value and operational efficiency.
Mischa G.
Last position:
Non-Financial Risk Officer at Nationale-Nederlanden
- Temporary cover for an absent non-financial risk officer.
- Operational scope: incident intake and follow-up, internal control testing, and first-line reporting for the Belgian entity.
Stefan R.
Last position:
Information Security Consultant at TÜV TRUST IT GmbH
- Conducting information classification, risk management and supplier assessment workshops
- Introduction of a customer-specific information security minimum standard (based on TISAX and ISO 27001) since Apr. 2026; implementing the same standard in parallel for a second customer
- Building an ISMS according to ISO 27001 for a logistics company (approx. 160–200 MA)
- Municipal utility company (KRITIS, approx. 450 MA): independently introduced the CRISAM GRC tool and am currently expanding it to include NIS-2 areas, took over parts of the ISB support mandate, and followed up on and remediated audit findings
- Supporting customers in implementing DORA and NIS-2, including documentation for a financial institution
- Conducting and supporting audits of systems for attack detection (SzA) according to § 8a BSIG (today §§ 31, 39 BSIG)
- Creating network structure plans according to IT-SiKat
- Creating technical security concepts (logging, IAM, attack detection)
Andreas S.
Last position:
Interim Lead ITSM Transformation at Fielmann
Interim Lead ITSM Transformation
Industry: Retail & Industry – Optics (partly critical infrastructure)
Mandate: Transition of ITSM governance to the product- and capability-oriented governance model already established across the Group, as well as acceleration and partial automation of service volumes through optimized entry channels. Design and system-based implementation of an ITSM target operating model.
- ITSM target process design based on the capability owner model: target processes and ownership for Incident, Service Request, Problem, Change Enablement, CMDB, Service Level, Supplier and Knowledge Management, derived from the Group-wide target operating model
- AI-supported Enterprise Service Management: Reorganization of currently mixed requests into a structured, cross-functional service model including a new self-service portal. AI-supported classification and automation considered in the architecture model
- Migration & Cloud Architecture: Planning and management of the end-to-end migration, coordination of cutover management and go-live support; ensuring productive stability during the hypercare phase. Consideration of a multi-source CMDB (~500,000 assets), connection of go-live-critical field service and vendor interfaces
- Scaling & Blueprint: Central instance for headquarters and production, designed as a blueprint for additional international retail and production sites
- Delivery and Stakeholder Management: End-to-end management from target vision to go-live with regard to time, budget & quality. Building consensus and balancing interests between independently managed IT units up to CIO level
Elisabeth S.
Last position:
Head Of IT at Schölly Fiberoptic GmbH
- Led IT with 12 employees during a period of group integration, filling 3 new positions
- Analyzed IT maturity and created transparency around risks, resources and project status
- Structured and prioritized the project portfolio (group integration, ERP, NIS2, IT security)
- Engaged external service providers to close capacity gaps and initiated additional projects
- Supported the implementation of Business Central and represented IT on steering committees
Shalabh K.
Last position:
Founder & Principal at SK SAP Advisory
Following the Vaillant engagement, established independent practice focused on senior SAP advisory and building ASTRA — a methodology, not a tool. ASTRA is independent and unbiased: the same four pillars serve CIO / Business Leadership, SI / SAP Practice, and Programme Director / Principal with equal weight. No audience is primary.
ASTRA serves three audiences with equal weight — CIO / Business Leadership · SI / SAP Practice · Programme Director / Principal. ASTRA is independent and unbiased — it does not sit inside any SI practice and does not serve any single audience as primary customer. Each audience receives a role-calibrated output from the same analysis.
One methodology, two outcomes:
OUTCOME 1 — SAP TRANSFORMATION GOVERNANCE:
Any active SAP programme: ECC→S/4HANA Greenfield, Brownfield, Global Rollout, AMS. The four pillars answer the four questions that determine whether a transformation succeeds — for any of the three audiences.
- Are business requirements clean — or is the SI building what SAP standard already covers? (Functional Auditor → all three audiences)
- Is the custom object inventory healthy — or accumulating debt that blocks upgrades? (RICEFW Auditor → Director and CIO)
- Is the SteerCo reporting accurate — or is leadership seeing a Watermelon? (Truth Engine → CIO and Director)
- Are people ready for the system they are receiving? (Human Signal → CIO and Director)
OUTCOME 2 — AUTONOMOUS ENTERPRISE READINESS:
Any programme deploying Joule, pursuing RISE, or planning an AE migration. The same four pillars answer the questions SAP does not — again, calibrated per audience.
- Which custom objects block the 224 Joule AI agents? (RICEFW Auditor → SI gets remediation paths, Director gets verdicts, CIO gets financial impact)
- Is the Fiori deployment complete enough to activate Joule? (Truth Engine → all three audiences)
- Is the workforce trained for AI-native working? (Human Signal → CIO and Director)
Four pillars (each serves all three audiences):
- Functional Auditor: Clean Core Score 0–100. Section A (CIO): KG fidelity risk in €. Section B (Director): SI challenge questions, man-day saving. Section C (SI): Language Translation Ledger, SAP alternatives.
- RICEFW Auditor: Joule API Pathway Audit, Clean Core Level A–D, Technical Debt Index 1–10. Section A: financial impact of blocked AI agents. Section B: RETIRE/MIGRATE/REDESIGN/KEEP verdicts. Section C: BTP remediation paths.
- Truth Engine: Watermelon Detection, Fiori Deployment check, Programme Truth Score 0–100. Section A: 3 SteerCo questions. Section B: 48-hour action list. Section C: vendor friction map.
- Human Signal: three-stage Fiori adoption model, HITL Policy readiness, Human Signal Score 0–100. Section A: GUI training weight, AE adoption financial risk. Section B: go-live recommendation, stakeholder resistance map.
On-Demand SAP Advisory:
- SAP Programme Management — end-to-end governance, factory management, multi-stream delivery, vendor oversight, SteerCo reporting for Greenfield, Brownfield, Rollout and AMS programmes.
- Delivery Management — RICEFW oversight, Data Migration governance, Release & Cutover management, Hypercare, SLA/KPI management.
- Due Diligence & Landscape Assessment — SAP landscape review, AS-IS/TO-BE roadmap, RFP structuring, SI selection advisory.
- IT Strategy & CIO Advisory — transformation roadmap, Clean Core strategy, Autonomous Enterprise readiness planning.
- Programme Recovery — distressed programme assessment, rapid governance setup, escalation resolution.
Operating through senior professional networks across EMEA.
Mahmoud Q.
Last position:
Information Security & GRC Expert at GLG (Gerson Lehrman Group)
As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.
My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).
The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.
Lutz E.
Last position:
Founder & Principal InfoSec Recruiter at Cyber Defense Recruitment / Lutz Eichenhofer HR Consult
Specialist recruiting for cyber security.
- Filling specialist and leadership roles exclusively in information security (IAM/PAM, GRC/ISMS, SOC/DFIR, pentesting, security architecture, CISO)
- Active sourcing and direct outreach, including to passive candidates
- Structured candidate interviews and candidate reports for clients
- Anonymized candidate profile marketing to companies and security consultancies
- Clients in Germany and Austria, including consultancies, banks, industry, and public IT service providers
Discover over 15,000 top freelancers
Statistics of experts using NIS2
Aggregated from the professional profiles of matched freelancers.
Experience
21 years
Position duration
2 years
Positions per freelancer
16
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Information Technology, Professional Services, Banking and Finance
Certification focus areas
Information Technology, Audit, Project Management
Bachelor's degree or higher
84%
Master's degree or higher
48%
Doctorate
3%
Certifications per freelancer
7
Most common languages
German, English, French
Speak two or more languages
95%
Based on our profile pool as of 11 Nov 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts using NIS2
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 11 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
NIS2 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (95%)
- Professional Services (63%)
- Banking and Finance (61%)
- Manufacturing (53%)
- Automotive (45%)
- Insurance (44%)
- Government and Administration (40%)
- Energy (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What NIS2 covers
NIS2, formally the Network and Information Systems Directive 2, is the European Union framework for strengthening cybersecurity across essential and important entities. It focuses on risk management, incident handling, business continuity, supply-chain security, accountability and reporting. Companies use it to structure security obligations around critical services and digital operations.
Where it applies
The directive concerns sectors such as energy, transport, healthcare, banking, digital infrastructure, public administration, manufacturing and selected digital services. Applicability depends on the organisation’s activities, size, role in the supply chain and national implementation. Specialists help companies determine scope without treating NIS2 as a generic checklist.
Compliance workstreams
- Map systems, services, suppliers and dependencies
- Assess cyber risks and document treatment decisions
- Define incident detection, escalation and reporting procedures
- Strengthen continuity, recovery and crisis-management plans
- Prepare evidence for governance and supervisory review
NIS2 work often connects legal interpretation with operational security. Strong delivery turns obligations into controls that teams can run, test and improve.
Ecosystem and tooling
NIS2 projects commonly involve governance, risk and compliance tools, security information and event management, endpoint protection, vulnerability management, identity and access management, backup systems and incident-response platforms. Relevant practices include ISO 27001, CIS Controls, threat modelling, penetration testing and supplier assurance. Specialists should understand how these tools produce reliable evidence for risk and compliance decisions.
When companies need specialists
- A new national NIS2 law changes existing security duties
- The organisation cannot confirm whether it falls within scope
- Incident reporting and escalation paths are unclear
- Third-party risks are not documented or monitored
- Security evidence is scattered across teams and systems
Freelance expertise is useful when internal security, legal and technology teams need focused support. Remote work suits documentation, assessments and workshops; on-site sessions can help with leadership interviews, facility reviews and crisis exercises.
What strong experts deliver
Strong professionals combine NIS2 knowledge with hands-on cybersecurity and clear communication. They can link executive accountability to practical controls, explain gaps in plain language and produce usable policies, risk registers, response playbooks and remediation roadmaps. They also distinguish a genuine control from evidence that merely looks complete, and leave internal teams able to maintain the programme.
Frequently asked questions
What clients ask us most about NIS2 — answered in short.
The NIS2 Directive is used to raise cybersecurity standards for organisations that provide important or essential services. It guides risk management, incident response, governance, supply-chain security and business continuity. A specialist helps translate those duties into controls, processes and evidence.
NIS2 is a legal cybersecurity obligation whose scope and enforcement depend on the relevant national implementation. ISO 27001 is a voluntary management-system standard, although it can provide useful structure and evidence for NIS2 work. They can support each other but are not interchangeable.
A capable NIS2 specialist often combines regulatory analysis with risk management, security architecture, incident response, identity management and supplier assurance. Familiarity with ISO 27001, CIS Controls, SIEM tooling, vulnerability management and business continuity is also valuable. The right mix depends on whether the assignment is strategic, technical or operational.
The NIS2 Directive does not prescribe a single project profile for every organisation. A scoping review may need a focused compliance specialist, while a complex remediation programme may require professionals who have led security, continuity and supplier-risk work across several business functions. Judge the need by the organisation’s services, technical landscape and current evidence.
NIS2 assignments are often suitable for remote collaboration because interviews, document reviews, risk workshops and policy drafting can take place online. On-site work may add value when specialists must inspect facilities, validate operational processes or run crisis exercises. Clear access to system owners and decision-makers matters more than location alone.
No. NIS2 sets regulatory expectations, while frameworks such as ISO 27001, NIST CSF and CIS Controls offer methods for organising security activities. A good professional maps existing controls to NIS2 obligations instead of introducing a parallel programme without checking what already works.
A strong NIS2 deliverable connects each obligation to an accountable owner, a practical control, supporting evidence and a review method. It should identify scope assumptions, residual risks, dependencies and clear next steps. Avoid work that only repeats directive language without showing how teams will operate and test the proposed measures.
Before starting, a NIS2 specialist should clarify the organisation’s sector, services, legal entities, supply-chain role and national regulatory context. The assignment should also define whether the focus is scoping, gap assessment, implementation, incident readiness or evidence preparation. Access to business and technology stakeholders is essential for producing practical results.
The average hourly rate of freelancers who have used NIS2 in their recent projects is 119 €, which corresponds to a daily rate of about 956 € based on an 8-hour working day.
Of the freelancers who have used NIS2 in their recent projects, 84% hold at least a Bachelor's degree, 48% hold at least a Master's degree, and 3% hold a doctorate.
On average, freelancers who have used NIS2 in their recent projects have 21 years of professional experience, with a single engagement typically lasting around 2 years.
The most common languages among freelancers who have used NIS2 in their recent projects are German (98%), English (95%), and French (22%).
The most common industries among freelancers who have used NIS2 in their recent projects are Information Technology (95%), Professional Services (63%), and Banking and Finance (61%).
The most common business areas among freelancers who have used NIS2 in their recent projects are Information Technology (98%), Project Management (90%), and Quality Assurance (62%).
Main locations of FRATCH Experts, who have recently used NIS2
Our freelancers and interim experts are at home all over Germany — available on-site in Berlin, Hamburg, Munich and every major business hub, or fully remote. Choose a city to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt 
Essen 
Vienna Across Switzerland our specialists are active in Zurich, Geneva, Basel and Bern — working on-site or fully remote. Choose a city to discover matched specialists, local market insights and up-to-date availability.
Zurich Geneva Basel Bern Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
