All positions
AI content
·POSITION · GAD-4697
Freelance Consultants Information Security (f/m/d)
As a self-employed expert, you get companies and public authorities ready for an information security management system (ISMS) under ISO 27001 and for the obligations of NIS 2. You take on clearly defined work packages, each commissioned and paid individually.
AI content
Your responsibilities
- Gap analysis: you assess where a company stands against ISO 27001 or NIS 2 and deliver a clear list of the gaps
- Risk assessment and Statement of Applicability (SoA, the list of which ISO 27001 controls apply and why)
- Policies and processes that fit the company, for example on access rights, emergencies, suppliers and reporting channels for security incidents, and on data protection under the GDPR where needed
- Prioritised action plan and support for implementation with the customer’s IT and business teams
- Internal audits and preparation for the certification audit. The certification itself is always carried out by an independent certification body
- You decide for each request whether to take on the work package and work with your own methods and tools
Your profile
- Several years of experience implementing or auditing ISMS under ISO 27001, shown by certifications you have supported
- ISO 27001 Lead Implementer or Lead Auditor or equivalent, BSI IT-Grundschutz practitioner is a plus
- Good knowledge of NIS 2 and the German implementation act, experience with critical infrastructure, energy or healthcare is a plus
- You are self-employed, other clients are explicitly possible
- You run workshops with management and IT confidently and clearly
- Fluent German, good English
What awaits you
- Paid as a fixed fee per work package, for example a gap analysis, a risk assessment or an internal audit, agreed in writing before each assignment
- Invoiced on your own invoice, without minimum volume and without any obligation to accept assignments
- We handle sales, the offer and the contract with the customer
- Growing demand: with NIS 2, far more companies have to prove information security
Your benefits with us
- Mostly remote work, on site with the customer for workshops and audits by arrangement
- A fixed contact person with us for requests and invoicing
- On request, professional exchange with our GRC & Compliance and Cybersecurity teams
·FEEDBACK
Rate us on kununu
Whether you have just been through our application process or work with us, we welcome honest, constructive feedback. It helps us get better.