NIS2 Experts in Switzerland
matched in minutes with vetted, available freelancersHire experts who translate NIS2 requirements into practical security controls, incident response processes and supplier-risk reviews. Get precise access to vetted, available freelancers who fit your project quickly.
Meet FRATCH Experts in Switzerland, who have recently used NIS2
Tomas H.
Last position:
Senior Advisor at Private Equity company (Business Integration)
Engaged to build governance, risk and process-improvement capabilities from scratch across approximately 30 fast-growing, decentralised lines of business in Germany, driving quality and productivity gains across business and functional teams.
- Applied Six Sigma root-cause analysis methodology (5-Why, Fishbone/Ishikawa) to lead investigations and process-improvement initiatives across the organisation’s finance, risk, IT and procurement functions, driving corrective actions and process redesign through to verified, sustained closure.
- Delivered structured training programmes to approximately 1,200 employees, for Compliance topics, incl. Six Sigma analysis and process-improvement methodology, building a continuous-improvement mindset and self-assessment capability across business and functional leaders.
- Analysed and optimized finance, risk and procurement processes across approximately 30 decentralised lines of business, developing and implementing continuous-improvement strategies and collaborating with cross-functional stakeholders (Finance, Controlling, IT, Procurement) to achieve measurable quality and productivity gains.
Yannick H.
Last position:
Managing Director and Trusted Advisor at ODCUS
ODCUS makes sure AI works alongside people in the day-to-day operations of Swiss SMEs while keeping their data secure: vendor-independent, pragmatic and without hidden agendas. We make a company's knowledge useful to AI, automate workflows and protect what matters.
I transform IT from a cost factor into a competitive advantage. As the founder of ODCUS, I advise Swiss SMEs and mid-sized companies—independently, with a focus on results and without hidden agendas.
What drives me: Too many companies invest in technology without knowing its business value. That is where we come in: we always advise on IT in the context of the business and its success.
My focus areas:
- Cybersecurity – Pragmatic protection that fits the business
- Compliance – NIS2, ISO 27001, EU AI Act without excessive bureaucracy
- IT costs – Create transparency, eliminate waste
- AI – From pilot project to measurable value creation
Wolf P.
Last position:
Interim Head of IT-POS Base GK - SAP at Depot GDC
- Interim management of IT-POS based on GK and SAP for DEPOT GDC.
- Responsibility for the stability and further development of the POS base platform.
- Management of adaptations and rollouts in the POS environment in coordination with the SAP backend.
Philipp L.
Last position:
External Consultant & Interim Manager at Löffler Management GmbH
- Project Manager for IT Governance and IT Compliance (including ISAE 3402, ISO 27001, DORA and NIS2 implementations)
- Project Manager for Digital Transformation (including ServiceNow)
- Industries: Banking, Insurance and Automotive
Thorsten M.
Last position:
Managing Director at Morschheuser Consulting GmbH
- Building, developing and auditing ISMS and IAM/IDM structures (SAP & Non-SAP)
- Developing, optimizing and reviewing authorization concepts, role models and interfaces (including SAP IDM/NetWeaver/S/4HANA, as well as cloud & AD)
- Managing and documenting audit, compliance and certification projects (ISO 27001, TISAX, KRITIS)
Károly A.
Last position:
NIS2 & Risk Strategy Consultant at RRC power solutions GmbH
- Developed a compliant information security management system (ISMS)
- Advanced a modern risk management framework based on NIST for NIS2 compliance
Michael S.
Last position:
Freelance compliance & IT regulatory consultant at Various financial institutions and regulated companies
- Consulting financial institutions on implementing DORA and NIS2 requirements
- Gap analyses between existing governance structures and new regulatory requirements
- Creation and revision of policies, process descriptions, contract annexes, and technical-organizational measures
- Design of digital operational resilience testing programs (DORA Art. 24–25)
- Third-party risk management: building third-party registers, LEI matching, value chain analysis
- Training internal staff on DORA/NIS2 requirements
- Negotiation and renegotiation of outsourcing contracts according to DORA/NIS2 guidelines
- Use of technologies/frameworks: DORA, NIS2, EBA guidelines, BaFin requirements, NIST CSF, ISO 27001
- Engagements are subject to strict NDAs
Elias V.
Last position:
Cloud Architect & Security Advisor at BaFin
- Designing hybrid cloud architectures (on-prem + cloud)
- Implementing cloud governance structures according to NIS2, BSI, ESCB/SMM
- Developing policies for cloud security & access control
- Target designs, management decision frameworks, internal audits & cloud integration
Discover over 15,000 top freelancers
Statistics of experts using NIS2
Aggregated from the professional profiles of matched freelancers.
Experience
19 years
Position duration
1.6 years
Positions per freelancer
13
Top business areas
Information Technology, Project Management, Audit
Top industries
Banking and Finance, Information Technology, Insurance
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
67%
Master's degree or higher
50%
Doctorate
17%
Certifications per freelancer
4
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Switzerland are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Switzerland using NIS2
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
NIS2 experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Banking and Finance (100%)
- Information Technology (75%)
- Insurance (63%)
- Professional Services (63%)
- Energy (50%)
- Transportation (38%)
- Manufacturing (38%)
- Government and Administration (38%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Directive scope
NIS2 is the common name for the EU Network and Information Security Directive 2, formally Directive (EU) 2022/2555. It strengthens cybersecurity duties for essential and important entities, including risk management, incident handling, business continuity and management accountability. The rules apply across sectors such as energy, transport, health, digital infrastructure, public administration and manufacturing.
Swiss relevance
NIS2 is an EU directive, not automatically Swiss law. Swiss companies can still face its requirements when they operate in the EU, provide services to covered entities or sit in regulated cross-border supply chains. Specialists in Switzerland therefore assess the company’s legal exposure, customers, locations and contractual duties before turning requirements into a proportionate security program.
Controls and evidence
NIS2 work reaches beyond policy writing. Strong specialists map assets and critical services, assess cyber risks, define access and encryption controls, review backup and recovery arrangements, and establish vulnerability management. They also create evidence such as risk registers, incident playbooks, supplier assessments, training records and management reporting that can withstand internal or external review.
Ecosystem and tooling
The directive connects with established security practices rather than replacing them. Projects may involve ISO/IEC 27001, CIS Controls, SIEM and EDR systems, identity and access management, cloud security, secure development and data protection obligations. Specialists often coordinate with legal, IT operations, procurement, continuity teams and external incident-response providers.
When expertise helps
Companies commonly bring in freelance specialists when a compliance deadline, customer requirement or security review exposes gaps. Useful engagements include:
- Determine whether entities, services and suppliers fall within scope
- Build a gap assessment and prioritized remediation plan
- Prepare incident notification and escalation procedures
- Test resilience, recovery and third-party risk controls
What strong specialists show
Look for professionals who can connect regulatory language with verifiable technical and operational action. They should explain assumptions clearly, distinguish NIS2 from GDPR and Swiss requirements, and work comfortably with executives as well as security and infrastructure teams. Evidence of practical audits, incident exercises, supplier reviews and control ownership matters more than a template policy library.
Frequently asked questions
Curious about NIS2? Here are the answers that come up again and again.
NIS2 sets a harmonized cybersecurity framework for covered entities in the European Union. It requires risk management, incident reporting, resilience measures, supply-chain oversight and accountable governance across designated sectors.
NIS2 does not automatically become Swiss law, because Switzerland is outside the European Union. A Swiss company may still be affected through an EU establishment, cross-border services, regulated customers or contractual supply-chain requirements, so the scope needs a fact-specific review.
NIS2 is a legal obligation for entities within its scope, while ISO/IEC 27001 is a certifiable information security management standard. An ISO 27001 system can provide useful evidence and structure, but it does not by itself prove that every NIS2 duty has been met.
A strong NIS2 specialist usually combines governance with practical security knowledge. Relevant adjacent skills include ISO/IEC 27001, risk management, incident response, business continuity, cloud security, identity management, supplier assurance and data protection.
The right level depends on scope, organizational complexity and the maturity of existing controls. A focused gap review may need a short specialist engagement, while a multi-entity program requires sustained coordination, technical validation, management reporting and evidence preparation.
Much of NIS2 work can be delivered remotely through interviews, document reviews, workshops and access to security tooling. On-site sessions can still help with operational validation, incident exercises and stakeholder alignment, especially when teams work across Swiss and EU locations.
Ask how the specialist separates legal scope from control implementation and how they will produce defensible evidence. Good NIS2 professionals can show a clear method for asset mapping, risk prioritization, incident reporting, supplier review and management accountability without relying on generic checklists.
Typical NIS2 deliverables include a scope assessment, gap analysis, risk register, remediation roadmap, control ownership model and incident-response procedures. Depending on the engagement, the specialist may also provide supplier assessments, resilience test results, training material and an evidence index.
The average hourly rate of freelancers in Switzerland who have used NIS2 in their recent projects is 124 €, which corresponds to a daily rate of about 994 € based on an 8-hour working day.
Of the freelancers in Switzerland who have used NIS2 in their recent projects, 67% hold at least a Bachelor's degree, 50% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Switzerland who have used NIS2 in their recent projects have 19 years of professional experience, with a single engagement typically lasting around 1.6 years.
The most common languages among freelancers in Switzerland who have used NIS2 in their recent projects are German (100%), English (100%), and French (63%).
The most common industries among freelancers in Switzerland who have used NIS2 in their recent projects are Banking and Finance (100%), Information Technology (75%), and Insurance (63%).
The most common business areas among freelancers in Switzerland who have used NIS2 in their recent projects are Information Technology (100%), Project Management (100%), and Audit (88%).
Main locations of FRATCH Experts, who have recently used NIS2
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Countries:
Zurich Geneva Basel Bern Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
