NIS2 Expert in Munich
matched in minutes from over 15,000 CVs with the power of AI.Work with specialists who assess IT infrastructure vulnerability, implement robust risk-management frameworks, and align your business operations with the new European cybersecurity directive. Our AI-driven platform matches you with vetted, available freelance professionals in Munich who ensure your compliance before legal deadlines.
Meet FRATCH Experts in Munich, who have recently used NIS2
Vicenco Kenk
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Florian Krebs
Last position:
LAN Planner at Global Network AG
- As-is assessment of the current network infrastructure and its documentation, including on-site inspections
- Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
- Planning of new copper and fiber optic cabling, including patch panels
- Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
- Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
- Additional support after the components go live (hypercare phase)
- Regular communication with project management and client stakeholders
Paul Privler
Last position:
Independent Consultant – Industry/ Embedded/ IoT at Self-employed
Consulting and support in the areas of sales/business/technology/development/marketing:
- Sales, Key Account Management
- Business Development, business/corporate development
- Partner management
- Program/project management
- Product management & marketing
- Technical marketing, content marketing
- New business, innovation and technologies
Until July 2021 active as advisor and consultant for Mixed Mode in the areas of Key Account Management, Project Management and Business Development.
From Q3/2021 successful delivery of various customer projects in the area of Business Development, corporate development, consulting, coaching, technical content management, sales and marketing:
- EMS service provider and PCB test house, inspection systems: revision of company portfolio and presentation. Integration of specialized distribution for optical inspection systems from Japan: content management, marketing, communication, web, sales automation, lead generation
- Full service marketing agency – technology marketing for industry: expansion of the existing B2B and B2C marketing portfolio with industrial and technology topics: content management, presentation and focus on "technical marketing", web, target market and customer analysis, lead automation, consulting
- Software product manufacturer & software development in the field of security for Embedded & IoT: company alignment and portfolio definition for an IoT and Embedded Security company with a SaaS solution for IoT device management: building a partner network to offer complete Embedded/IoT security solutions, technical content, company alignment and portfolio definition, strategy & planning, target market and customer analysis, product marketing/USPs for the security device management tool "IoT-Suite", standards and regulations for cyber resilience (e.g. CRA, NIS2, RED), web content, SEO, management of marketing and sales agencies, CRM, sales, presentations, trade fairs, congresses, building company webinars & events
- Software engineering service provider/system house for IoT, Embedded, web, mobile and desktop applications: business development, content creation, customer acquisition and sales
- Manufacturer of memory products with security features as an add-on: memory products in standard form factors (SD, CF, SSD...) are extended with security modules such as HSM, TPM or secure elements and thus offer users secure data storage, transfer and access. Also interesting as an upgrade or retrofit solution to meet the coming new regulations and requirements regarding cybersecurity such as CRA, RED and NIS2. Business & New Business Development for the area "Embedded IoT Solutions & Security", sales & marketing. Expansion of the pure semiconductor business to include security solutions and services. Interface between management, marketing, sales and product management. Building business partners, technology partners, system integrators and resellers from the Embedded, IoT, OT and IT environment. Creating reference designs/demos/lighthouse cases and proof of concepts for cross- and reference selling. Co-marketing with security partners. Technical content creation for web, sales and marketing, webinars, social media etc. Networking, participation in trade fairs, congresses and events. Lead generation, qualification, follow-up and conversion to customer. Product definition, USPs, features. Analysis of competitors, market positioning, target markets - strategy, concept and measures - go to market.
- Marketing agency group with sales and management consulting: consulting for companies on restructuring, market analysis and market entry, go-to-market concepts, customer acquisition and expansion, new customer generation, lead generation and management, concepts and execution of campaigns (web, mail, social media, phone outreach in person or with AI voice assistant, webinars...). Processing and managing customer product data for PIM product information and DAM data asset management systems. Focus on customers in the industrial and technology environment with products and services that need explanation.
Patrick Upmann
Last position:
Interim Management | Consulting & Implementation | Data Deletion in SAP at BSR (Berliner Stadtreinigung)
- Topics: Business Analysis, Data Privacy, Data Management, Stakeholder Management, Conceptualization
- This project focuses on developing and implementing a strategic approach for data deletion in SAP systems. The goal is to identify the relevant data and structures during system migration to ensure both data privacy and IT system efficiency. At the same time, downtime should be minimized and regulatory requirements met.
- Development of a comprehensive approach for data deletion in SAP systems, considering data privacy and business requirements.
- Ensuring efficient and structured data transfer to the new system.
- Optimizing system efficiency and reducing downtimes during migration.
- Creating functional and technical concepts to ensure compliant and sustainable data management.
- Topic preparation: Detailed study of the "data deletion" area to lay the foundation for a structured data migration.
- Definition of project structure: Setting roles, interfaces and the project's organizational structure.
- Regulatory requirements: Analysis of data privacy regulations and business requirements to define deletion criteria.
- Approach: Developing possible scenarios and methods for data cleansing and deletion.
- Deletion concepts: Creating functional and technical deletion concepts that structure the implementation and provide clear guidelines.
- Setting deletion criteria: Defining which data and structures to delete or transfer.
- Responsibilities: Clarifying responsibilities within the project team and among stakeholders.
- Analysis of ongoing activities: Identifying and collecting existing activities in the "data deletion" area.
- Effort, cost and timeline planning: Creating estimates for resources, effort and budget.
- Implementation initiatives: Developing and executing concrete measures to apply the defined deletion strategies.
- IT system efficiency: Analyzing the existing IT infrastructure to identify optimization potential for data deletion and transfer.
- Technology trends: Evaluating new technologies and tools that can support the data cleansing process.
- Cost-benefit analysis: Assessing the financial impact of data cleansing and the introduction of new solution approaches.
- Risk management: Identifying potential risks during implementation and developing appropriate mitigation measures.
- This project lays the foundation for a sustainable and compliant data transfer to a new SAP system. With a clear approach to data deletion, it meets data privacy requirements, reduces downtimes and increases the efficiency of the new system. The results and recommendations will help companies develop a future-proof data strategy that meets legal and business needs.
Markus Drewes
Last position:
Global PR Coordinator at Linde Engineering
- Development of global PR and media relations work
- Topic scouting, coordination, and alignment
Norbert Stilling
Last position:
Self-Employed Consultant and Project Manager at Self-Employed Consultant and Project Manager
- 21 projects ≥ 6 months at large and medium-sized companies
- 13 projects as project or subproject manager
- 6 international projects with English as project language
Jonas Anschütz
Last position:
Senior Consultant (Freelance) at Various companies in the energy, statutory health insurance (GKV), and IT sectors
- Consulting in IT sourcing, tendering procedures, and process management
- Drafting procedure and contract documents
- Project and document management as well as quality assurance
- Analysis and optimization of business processes
- Conflict analysis, contract review, and solution development
Klaus Kilvinger
Last position:
Consultant and Trainer, Managing Partner at Opexa Advisory GmbH
- Advising clients on ISO/IEC 27001, TISAX, BSI IT-Grundschutz and GDPR
- Trainer and internal auditor
- Contract management (service and work contracts, framework agreements)
- Coordinating and supporting tender responses
- Developing strategies and measures for clients and new business opportunities (e.g. phishing, online awareness trainings)
- Further developing the governance/risk/compliance offering
- Account management for existing clients and new business acquisition
- Supporting HR with hiring and interviews
Volker Jung
Last position:
Interim CISO (Germany, Austria, US, APAC), Auditor at Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Discover over 15,000 top freelancers
Statistics of experts using NIS2
Aggregated from the professional profiles of matched freelancers.
Experience
24 years (Germany: 20 years)
Position duration
4.1 years (Germany: 2.2 years)
Positions per freelancer
13 (Germany: 15)
Top business areas
Information Technology, Project Management, Legal
Top industries
Information Technology, Professional Services, Manufacturing
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
71% (Germany: 84%)
Master's degree or higher
57% (Germany: 47%)
Doctorate
14% (Germany: 4%)
Certifications per freelancer
5 (Germany: 7)
Most common languages
German, English, French
Speak two or more languages
89% (Germany: 95%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Munich using NIS2
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Understanding the new cybersecurity mandate
The NIS2 Directive is the European Union's updated legislation aimed at achieving a high common level of cybersecurity across member states. It expands the scope of the original rules to cover more sectors and introduces stricter security measures and reporting obligations.
Key compliance requirements for organizations
Companies must implement concrete measures to secure their network and information systems. Freelance specialists help local businesses navigate these regulatory demands efficiently.
- Establishing comprehensive risk management policies
- Implementing incident handling and vulnerability disclosure protocols
- Securing the digital supply chain and vendor relations
- Setting up business continuity and crisis management plans
- Training staff and management on cybersecurity hygiene
Essential technical and regulatory skills
Expertise in this domain requires a blend of legal understanding and deep technical knowledge. Professionals must be familiar with standard security frameworks like ISO 27001, BSI IT-Grundschutz, and NIST, translating their guidelines into practical organizational workflows. They design secure network architectures, audit legacy systems, and implement multi-factor authentication and cryptography.
Local compliance demands in the Munich region
Munich is a major hub for automotive, aerospace, defense, and manufacturing industries. Many medium-sized enterprises in Bavaria fall under the critical or important entities definitions of the directive. Local experts understand the specific expectations of German regulatory bodies like the Federal Office for Information Security and can coordinate hybrid or on-site assessments in the Munich metropolitan area.
Why hire freelance compliance specialists
Achieving compliance requires specialized knowledge that internal IT teams often lack the time or training to execute. Freelancers provide objective external audits, bridge resource gaps during peak implementation phases, and establish the initial framework. Their experience across multiple industries speeds up the transition and helps avoid heavy penalties for non-compliance.
What distinguishes leading security experts
The best professionals combine technical engineering depth with strong communication skills to align executive boards with IT departments. They hold recognized certifications such as CISSP, CISM, or specialized IT-Grundschutz qualification. A strong track record of successfully guiding medium to large enterprises through complex compliance audits is the ultimate proof of their capability.
Frequently asked questions
What clients ask us most about NIS2 — answered in short.
The NIS2 framework impacts critical sectors such as energy, transport, banking, and healthcare, but also highly relevant Munich industries like automotive manufacturing, chemicals, and waste management. Companies classified as essential or important entities must comply with the strict guidelines.
While ISO 27001 is an international standard for information security management systems that companies adopt voluntarily, NIS2 is a legally binding European Union regulation. Achieving an ISO certification provides a solid foundation, but companies must still address specific reporting timelines and supply chain security obligations mandated by the directive.
An expert specializing in NIS2 compliance should be proficient in network security architecture, vulnerability scanning tools, threat intelligence, and disaster recovery planning. Understanding the German BSI IT-Grundschutz methodology is also highly beneficial for local projects.
The duration depends heavily on the initial security maturity level of the organization. A professional focusing on NIS2 readiness will usually need several months to conduct a gap analysis, draft new security policies, and train internal teams to ensure full compliance.
While much of the policy drafting and system analysis can be done remotely, key phases like physical security audits and initial team alignment benefit from on-site workshops. Local experts in Munich can easily join hybrid collaboration models to balance efficiency with personal coordination.
Look for active industry certifications such as CISM, CISSP, or specialized risk management credentials. A reliable NIS2 expert should also demonstrate practical experience in implementing similar EU regulations or leading security audits within your specific industry sector.
Failing to comply with the NIS2 requirements can lead to severe consequences, including substantial administrative fines and potential personal liability for corporate management. Regulatory bodies also have the authority to temporarily suspend operations or revoke executive management licenses.
A freelance specialist will begin with a comprehensive gap analysis to compare your current cybersecurity measures against the NIS2 requirements. This initial assessment identifies vulnerable points in your infrastructure, supply chain risks, and policy deficits, resulting in a concrete roadmap for implementation.
The average hourly rate of freelancers in Munich, Germany who have used NIS2 in their recent projects is 121 €, which corresponds to a daily rate of about 970 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used NIS2 in their recent projects, 71% hold at least a Bachelor's degree, 57% hold at least a Master's degree, and 14% hold a doctorate.
On average, freelancers in Munich, Germany who have used NIS2 in their recent projects have 24 years of professional experience, with a single engagement typically lasting around 4.1 years.
The most common languages among freelancers in Munich, Germany who have used NIS2 in their recent projects are German (100%), English (89%), and French (44%).
The most common industries among freelancers in Munich, Germany who have used NIS2 in their recent projects are Information Technology (100%), Professional Services (78%), and Manufacturing (67%).
The most common business areas among freelancers in Munich, Germany who have used NIS2 in their recent projects are Information Technology (100%), Project Management (100%), and Legal (67%).
Main locations of FRATCH Experts, who have recently used NIS2
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Cologne 
Frankfurt 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
