NIS2 Expert in Essen
for resilient compliance with vetted and available freelance specialistsHire experts who translate the NIS2 Directive into practical security controls, incident processes and supply-chain governance. Work with vetted, available freelancers matched quickly and precisely to your requirements.
Meet FRATCH Experts in Essen, who have recently used NIS2
Christian F.
Last position:
Project Lead & Cyber Security Consultant at Deutsche Börse Gruppe
- Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
- Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units
Henry H.
Last position:
Interim Manager IT-Compliance at Int. Fertigungsunternehmen
- Industry: mechanical engineering, vehicle manufacturing
- Regulations: Data Act
- Project focus: data governance, legally compliant use of machine data, data platforms
- Assigned by: CFO, platform product owner
Successes/Results (early phase):
- Compliance support for the setup of an internal standardized data usage platform based on Databricks.
- Created the basis for the legally compliant and effective use of machine data, including:
- Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
- Technical: consideration of data flows from the platform to users and third parties.
- Organizational: drafting and finalizing the required data usage agreements.
Jens B.
Last position:
Senior Cyber Security Consultant at Brennscheidt IT Consulting
KEY PROJECTS
Since 05/2023 | Bank | Senior Cyber Security Consultant (external)
- Advising and guiding the system owners in creating and further developing IT security concepts
- Coordinating and tracking the remediation of findings from reviews and audits
- Advising on the implementation of regulatory requirements for information security
10/2023 – 02/2024 | Fintech | Project Manager (external)
- Project management to close various audit gaps in the field of information security
- Conceptual design and implementation of an information security management system based on ISO/IEC 27001
- Creation and further development of ISMS documents and processes
Michael L.
Last position:
Head of IT at Ruthmann Holdings GmbH
- Management of IT with 10 employees, including budget and personnel responsibility.
- Harmonization of the Navision systems in Germany, Switzerland and Austria.
- Connection of the ERP systems in Switzerland, Austria and Italy to the central Microsoft Power BI systems in Germany.
- Rollout of a new firewall at 10 locations in D, CH and A.
- Evaluation of a new DMS.
- Migration to Windows 10 / 11.
- Transformation of 9 countries into ONE Europe.
- Start of NIS2 implementation in 5 European countries.
Manuel E.
Last position:
External Technical Lead for CI/CD, Architecture & Technical Governance at Insurance
- Technical lead for CI/CD modernization in the "Group Archive 4.0" system
- Architecture and steering responsibility according to the statement of work
- Setting up modern build and deployment processes
- CI/CD coaching and enablement of the internal development team
- Integration of modern DevOps, security, and compliance standards
- Ensuring technical governance, including collaboration with internal audit and BaFin
- Independently executing the modernization measures
- Supporting the team in adopting new technologies and methods
Daniel J.
Last position:
Information Security Consultant
NIS2 Implementation Project and ISMS Development Based on IT-Grundschutz
Municipal utilities, public-law institution
- Analysis of the current compliance status regarding the requirements of the NIS Directive (NIS-2, EU 2022/2555).
- Identification of critical infrastructures and processes within the organization.
- Development of an action plan to meet NIS requirements.
- Conducting a risk analysis in accordance with BSI Standard 200-3 as the basis for the security concept.
- Preparation of an individual security concept including technical and organizational measures according to BSI IT-Grundschutz.
- Preparatory support for an optional certification according to BSI IT-Grundschutz.
- Adaptation of existing security policies and development of new ones for access controls, incident management and data protection.
- Consideration of municipality-specific requirements and integration of the measures into the existing IT infrastructure.
- Documentation of the results and preparation of audit-ready evidence for audits.
Tools, languages and frameworks used: MS Office, Verinice, IT-Grundschutz (200-x), NIS-2 (EU 2022/2555), ISMS, AI-Act (EU 2024/1989)
Kai-Uwe P.
Last position:
Technical Project Management at CHG Meridian AG
- CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.
Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement
Carsten W.
Last position:
Managing Consultant - IT Outsourcing-Services (IT, Voice, Data) at Bank / insurance group (Savings Banks Group)
- Transforming complex AI use cases into practical solutions
- Analyzing IT/telecom end-to-end business processes from requirements to order (RACI), modeling with IBO Prometheus
- Risk management
- Assessing digitalization potential, AI, and strategic supplier analysis against the IT target picture
- Optimizing offer and cost calculation bases in strategic and operational IT procurement
- Optimizing supplier strategy (DSGV and financial institutions)
- Exploring various approaches to cost optimization and simplifying supplier management
- Optimizing contracts and licensing management (e.g., SAP, Microsoft, IBM, Cisco, BMC, etc.)
- Desk and field expediting with external partners
- Possible outsourcing and consolidation of services with fewer suppliers
- On-time handover of work packages within agreed time and budget
Tamara S.
Last position:
Working Student Contract Law at SITA Airport IT GmbH
- Assisting in drafting, reviewing, and negotiating contracts and other legal documents (NDAs, termination agreements, termination notices, etc.)
- Research and analysis of legal issues
- Implementation of legal and regulatory requirements (GDPR, NIS2, DORA, Data Act, AI Act)
- Supporting compliance with legal requirements and internal policies (AI Regulation, Accessibility Enhancement Act, Supply Chain Due Diligence Act, Whistleblower Protection Act)
- Documenting and filing important contract documents in the digital system
- Negotiating and evaluating individual contract clauses
Discover over 15,000 top freelancers
Statistics of experts using NIS2
Aggregated from the professional profiles of matched freelancers.
Experience
22 years (Germany: 21 years)
Position duration
1.8 years (Germany: 2 years)
Positions per freelancer
19 (Germany: 16)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Banking and Finance, Energy
Certification focus areas
Information Technology, Audit, Project Management
Bachelor's degree or higher
75% (Germany: 83%)
Master's degree or higher
38% (Germany: 45%)
Certifications per freelancer
10 (Germany: 7)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 95%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Essen are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Essen using NIS2
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
NIS2 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (78%)
- Energy (67%)
- Healthcare (67%)
- Insurance (67%)
- Manufacturing (56%)
- Government and Administration (56%)
- Retail (56%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What NIS2 covers
NIS2 is the European Union directive that strengthens cybersecurity requirements for essential and important entities. It replaces the original Network and Information Security Directive with broader sector coverage, stronger risk management duties and clearer accountability for management. The work focuses on reducing operational risk, protecting critical services and reporting serious incidents to the relevant authorities.
Where it applies
NIS2 affects organisations in areas such as energy, transport, health, digital infrastructure, manufacturing, public administration and selected digital services. Its impact depends on the organisation’s role, size, services and national implementation. Companies in Essen and the wider Ruhr region may need to assess how industrial operations, logistics systems and connected suppliers fit within the directive’s scope.
Core workstreams
- Define the organisation’s NIS2 scope and accountable roles
- Assess cyber risks across business services, assets and suppliers
- Build incident detection, escalation and reporting procedures
- Document business continuity, crisis response and recovery controls
- Prepare evidence for audits, management decisions and regulator requests
These workstreams connect governance with day-to-day security. Specialists often map existing ISO 27001 controls, risk registers and business continuity plans to NIS2 obligations instead of creating parallel documentation.
Ecosystem and tooling
NIS2 projects involve security governance, risk management, vulnerability handling, identity and access management, backup, monitoring and incident response. Relevant tools may include SIEM and SOAR systems, ticketing platforms, asset inventories, GRC software and supplier-risk workflows. Strong professionals understand how these tools support evidence, ownership and repeatable processes rather than treating compliance as a document exercise.
When companies need help
Freelance expertise is useful when an organisation is clarifying its scope, preparing for national implementation, integrating acquired operations or responding to a security gap. It can also support supplier assessments, tabletop exercises, policy updates and remediation planning. For Essen-based companies, on-site workshops can be combined with remote delivery across German and international teams, depending on the operating model.
What strong specialists bring
The best NIS2 professionals combine regulatory interpretation with practical cybersecurity delivery. They can speak with management, IT, operational technology, legal teams and suppliers, then turn unclear duties into owners, controls, deadlines and evidence. Look for experience with incident reporting, risk acceptance, executive accountability and the organisation’s relevant sector. Clear documentation and calm communication matter as much as technical knowledge.
Frequently asked questions
Curious about NIS2? Here are the answers that come up again and again.
NIS2 is used to raise cybersecurity and resilience standards for organisations that provide important services or support critical economic and social activity. It requires risk management, incident handling, supply-chain oversight, business continuity and management accountability.
NIS2 is a legal directive whose obligations apply according to an organisation’s sector and status under national law. ISO 27001 is a certifiable information security management standard that can provide useful structure and evidence, but certification alone does not prove that every NIS2 duty has been met.
A strong NIS2 specialist usually understands cybersecurity governance, risk assessment, incident response, vulnerability management and supplier assurance. Knowledge of ISO 27001, business continuity, cloud security, operational technology or data protection can be valuable depending on the organisation’s services.
The right NIS2 experience depends on the assignment. A gap assessment may need focused knowledge of the directive and the relevant sector, while a full implementation calls for experience with governance, technical controls, incident processes and executive reporting across a complex organisation.
Yes. NIS2 assessments, policy work, evidence reviews and many workshops can be delivered remotely from Essen. On-site sessions may still help when specialists need to inspect operational technology, meet local stakeholders or validate how controls work in practice.
Before engaging a NIS2 freelancer, collect an overview of legal entities, services, locations, suppliers, critical systems and existing security policies. A recent incident record, risk register and audit findings can help the specialist identify priorities without repeating work.
A capable NIS2 professional connects each recommendation to a clear risk, owner, process and piece of evidence. Ask how they would handle scope, incident reporting, supplier risk and management accountability, and look for concise deliverables that teams can operate after the engagement ends.
NIS2 is relevant to sectors including energy, transport, health, digital infrastructure, manufacturing and selected digital services. The exact duties depend on national implementation and the organisation’s classification, so specialists should first confirm scope rather than assume that every company faces the same requirements.
The average hourly rate of freelancers in Essen, Germany who have used NIS2 in their recent projects is 123 €, which corresponds to a daily rate of about 981 € based on an 8-hour working day.
Of the freelancers in Essen, Germany who have used NIS2 in their recent projects, 75% hold at least a Bachelor's degree and 38% hold at least a Master's degree.
On average, freelancers in Essen, Germany who have used NIS2 in their recent projects have 22 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Essen, Germany who have used NIS2 in their recent projects are German (100%), English (89%), and French (22%).
The most common industries among freelancers in Essen, Germany who have used NIS2 in their recent projects are Information Technology (100%), Banking and Finance (78%), and Energy (67%).
The most common business areas among freelancers in Essen, Germany who have used NIS2 in their recent projects are Information Technology (89%), Project Management (89%), and Operations (67%).
Main locations of FRATCH Experts, who have recently used NIS2
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Munich 
Cologne 
Frankfurt Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
