Cyber Security Assessment | Critical Infrastructure, ISO 27001, NIST CSF, IEC 62443

Project overview

For a demanding cyber security assessment at a critical infrastructure operator, we are seeking an experienced assessment team or two to three complementary security freelancers (m/f/d) on short notice.

The goal of the project is to evaluate the maturity and actual effectiveness of information and OT security. A pure document audit is explicitly not expected. In addition to analyzing existing requirements and evidence, interviews, spot checks, effectiveness tests, and potentially on-site appointments are planned.

Responsibilities

Mandatory Requirements

Framework Conditions

If interested and professionally suitable, please send us your current profile including availability, workload, and remote hourly rate.

• Conduct a maturity assessment based on the NIST Cybersecurity Framework
• Verify the implementation and effectiveness of controls according to ISO/IEC 27001 and ISO/IEC 27002
• Evaluate security roles, responsibilities, and governance structures
• Analyze IT and OT security in the critical infrastructure environment
• Incorporate ISA/IEC 62443 for OT/ICS security
• Conduct interviews, document reviews, and evidence spot checks
• Market benchmark of the existing security level
• Develop a prioritized and actionable catalog of measures
• Create a final report and a management-ready presentation of results
• Several years of experience with ISMS, ISO 27001, and security assessments
• Active certification as ISO/IEC 27001 Lead Auditor and/or Lead Implementer
• Demonstrable experience with audits, gap, or maturity assessments at critical infrastructure operators
• Experience with the NIST Cybersecurity Framework
• Practical knowledge in OT/ICS security and ISA/IEC 62443
• Knowledge of requirements according to § 8a BSIG and NIS-2
• Experience with interviews, evidence reviews, and effectiveness analyses
• Very good German language skills, both written and spoken
• Full service provision exclusively from Germany
• Project start: 05.11.2026
• Project end: 31.12.2026
• Total scope: approx. 40 person-days
• Engagement model: predominantly remote, individual appointments by arrangement
• On-site deployment: Frankfurt am Main
• Place of performance: Germany only
• Project language: German
• Contract model: freelance or via a consulting company

Project details

• Start: 2026-11
• Remote: hybrid
• Location: Frankfurt am Main, Deutschland, DE
• Languages: German