VAIT Experts in Dusseldorf
for compliant insurance IT, matched in minutes with vetted freelancersHire experts who assess IT governance, strengthen information security and prepare evidence for BaFin expectations around VAIT. Get fast, precise matches with vetted and available freelancers who can support your insurance organisation on site or remotely.
Meet FRATCH Experts in Dusseldorf, who have recently used VAIT
Frank D.
Last position:
Project Manager at TEAG Thüringer Energie AG
- Transition of Microsoft Azure operations to BTC AG
- Responsibility: budget of €60k
- Staff: leadership of 5 people
- Tools: Office 365, JIRA, Confluence
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As the only large integrated energy company in Germany, EnBW covers the entire value chain - from energy production through distribution to customers. It expands its renewable energy sources, advocates for a socially responsible coal exit, and drives key technologies like green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developed and implemented a holistic process view covering both technical and organizational aspects  Ensured end-to-end control of all IAM-related technical services  Established clear responsibilities and accountabilities within the IAM landscape  Collaborated with different departments to identify and optimize a holistic architecture and act as Single Point of Contact (SPoC) for Information Security  Introduced and monitored governance policies to ensure compliance and security  Continuously improved IAM processes and systems through regular audits and evaluations  Participated in external audits of the process as part of official ISO audits  Further developed the policy for setting administrative requirements and procedures and aligned it with administrative units  Conceptually advanced the KPI system to measure process quality
Dennis S.
Last position:
Third Party Risk Management at Ergo Group
- Processing entries in the Third Party Risk Management (TPRM) process
- Conducting clean-ups of existing business relationships
- Creating, processing, and documenting requests
- Reviewing entries from process participants based on existing files
- Collaborating with risk SMEs (Subject Matter Experts) and vendor contacts
- Working closely with procurement, information security, and data protection to align business requirements
- Implementing regulatory requirements (VAIT, DORA) and ensuring compliance and risk management
Nikolaus B.
Last position:
ICT Risk Management and Information Security at B. Metzler seel. Sohn & Co. AG
- Independently develop policies, guidelines, and frameworks for ICT risk management and information security
- Advise business units on ICT risk management and information security
- Further develop the ICT risk management framework that governs the identification, assessment, and control of ICT risks
- Evaluate the Information Security Management System (ISMS) and adjust it for new challenges
- Conduct risk analyses to identify and assess potential ICT risks and information security risks for the Metzler Group
- Advise on defining and implementing measures to reduce risks and improve the resilience of ICT systems
- Advise on ensuring compliance with relevant internal and external regulatory requirements (MaRisk, DORA, BAIT, BSI IT baseline protection, ISMS, ISO 27001, ISO 42001, ISO 27005, BCM ISO 22301)
- Advise on internal and cross-functional projects (SAP DORA compliance, Target2, Section 8a BSI Act)
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Heinz-Dieter L.
Last position:
Consultant at CH Crypto Group
- Advice on governance and information security topics: BAIT, MaRisk
- Creating governance documents (policies, guidelines)
- Developing emergency manuals
- Based on BSI IT baseline protection standard 200-4 and ISO2700x
Discover over 15,000 top freelancers
Statistics of experts using VAIT
Aggregated from the professional profiles of matched freelancers.
Experience
33 years (Germany: 25 years)
Position duration
1.4 years (Germany: 2.7 years)
Positions per freelancer
22 (Germany: 18)
Top business areas
Information Technology, Project Management, Operations
Top industries
Insurance, Information Technology, Energy
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
60% (Germany: 83%)
Master's degree or higher
20% (Germany: 45%)
Certifications per freelancer
5 (Germany: 7)
Most common languages
German, English, Spanish
Speak two or more languages
86% (Germany: 98%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Dusseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Dusseldorf using VAIT
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
VAIT experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Insurance (100%)
- Information Technology (100%)
- Energy (71%)
- Banking and Finance (71%)
- Healthcare (57%)
- Government and Administration (57%)
- Automotive (43%)
- Manufacturing (43%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What VAIT covers
VAIT stands for Versicherungsaufsichtliche Anforderungen an die IT. The framework issued by BaFin sets expectations for IT governance, information security, IT operations, outsourcing and risk management in insurance undertakings. It is not a software product, but a regulatory and organisational framework for controlling technology risks.
Insurance IT scope
VAIT applies across the systems and services that support core insurance activities. This includes policy administration, claims handling, underwriting, finance, customer portals, identity management, infrastructure and data platforms. Strong implementation connects business processes with clear controls, ownership and evidence rather than treating compliance as a document exercise.
Governance and controls
Professionals working with VAIT typically review the IT strategy, roles, policies, risk assessments and control framework. They establish processes for access management, change control, incident response, continuity, vulnerability handling and audit trails. Depending on the organisation, the work also covers cloud services, managed operations and critical third parties.
Typical project tasks
- Assess current IT governance against VAIT expectations
- Design information-security policies, controls and evidence repositories
- Review outsourcing, cloud contracts and third-party risk
- Prepare audit documentation and remediation plans
- Test incident response and business continuity processes
When outside expertise helps
Companies often bring in freelance VAIT specialists before a supervisory review, during a major transformation or when internal ownership is unclear. External support can help close control gaps, structure remediation and align security, risk, compliance and IT operations. In Dusseldorf, collaboration may involve insurance teams, auditors and service providers across the Rhine-Ruhr region, with remote work suited to document reviews and workshops.
What strong specialists bring
Strong professionals combine knowledge of VAIT and insurance operations with practical information-security experience. They can translate regulatory expectations into workable controls, assign accountable owners and produce evidence that stands up to internal and external review. Useful adjacent skills include ISO 27001, ITIL, COBIT, business continuity, data protection, cloud governance and risk-based audit methods.
Frequently asked questions
Before you brief your next project: the most common questions about VAIT.
VAIT is used to structure and assess IT governance, information security, operations, outsourcing and technology risk in insurance undertakings. It helps an organisation show that important systems and services are controlled, resilient and subject to appropriate oversight.
Versicherungsaufsichtliche Anforderungen an die IT is specific to insurance supervision in Germany and focuses on expectations relevant to regulated insurance undertakings. ISO 27001 provides an information-security management framework, while ITIL focuses on service management; these approaches can support VAIT implementation but do not replace its insurance-specific context.
A strong BaFin VAIT specialist usually understands information security, IT risk, internal controls and audit evidence. Experience with ISO 27001, COBIT, ITIL, business continuity, cloud governance, data protection and outsourcing risk is also useful.
VAIT expertise is useful for readiness assessments, remediation programmes, policy design, outsourcing reviews and preparation for supervisory or internal audits. The right level of experience depends on the scope, criticality of the systems and maturity of the existing control environment.
Much of a VAIT assignment can be completed remotely through interviews, evidence reviews, workshops and control testing. On-site sessions in Dusseldorf can still help when the work involves sensitive processes, stakeholder alignment, operational walkthroughs or close collaboration with insurance teams.
VAIT includes expectations for managing risks arising from outsourcing and external IT services, including cloud arrangements. A review should cover due diligence, contracts, access, monitoring, resilience, incident handling, audit rights and the organisation’s continuing accountability.
Look for a VAIT professional who can connect supervisory expectations with concrete controls, owners and evidence. Ask for examples of assessments, remediation work, audit preparation or outsourcing reviews, and check whether the person communicates clearly with both technical and non-technical stakeholders.
A VAIT assignment often requires careful handling of confidential architecture, risk and audit information. Freelancers should clarify the regulated entity’s scope, existing policies, access requirements, reporting line, deliverables and collaboration model before beginning the work.
The average hourly rate of freelancers in Dusseldorf, Germany who have used VAIT in their recent projects is 109 €, which corresponds to a daily rate of about 871 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used VAIT in their recent projects, 60% hold at least a Bachelor's degree and 20% hold at least a Master's degree.
On average, freelancers in Dusseldorf, Germany who have used VAIT in their recent projects have 33 years of professional experience, with a single engagement typically lasting around 1.4 years.
The most common languages among freelancers in Dusseldorf, Germany who have used VAIT in their recent projects are German (100%), English (86%), and Spanish (29%).
The most common industries among freelancers in Dusseldorf, Germany who have used VAIT in their recent projects are Insurance (100%), Information Technology (100%), and Energy (71%).
The most common business areas among freelancers in Dusseldorf, Germany who have used VAIT in their recent projects are Information Technology (100%), Project Management (100%), and Operations (86%).
Main locations of FRATCH Experts, who have recently used VAIT
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart 
Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Cologne Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
