Cyber Security Assessment – ISO 27001 / KRITIS / OT-ICS – Freelancer

Project overview

For a cyber security assessment in the KRITIS environment, we are looking for experienced cyber security freelancers at short notice. The focus is on evaluating the actual maturity and implementation level of IT and OT security based on established security frameworks. Experts are sought who will cover the areas of ISO 27001, KRITIS, and OT/ICS security together.

Responsibilities

• Conducting a cyber security maturity and implementation assessment
• Evaluation based on NIST CSF and ISO/IEC 27001/27002
• Verification of the actual implementation of ISO 27001 controls based on documents and evidence
• Conducting interviews and sample effectiveness checks
• Analysis of the effectiveness of security roles and responsibilities
• Consideration of IT/OT security as well as central/decentralized governance
• Conducting a market benchmark
• Derivation and prioritization of concrete recommendations for action
• Contribution to the final report and management presentation

Requirements

For the project, we are looking for experts who fully cover the following competencies as a team:

Framework Conditions

If interested, we look forward to receiving your current CV including relevant certifications and reference projects, as well as information on availability and hourly rate. Please also indicate which of the mentioned competence areas you primarily cover. Applications from well-coordinated expert teams are also welcome.

• ISMS / ISO 27001 Auditing & Implementation: at least 5 years of experience
• OT/ICS Security: at least 3 years of experience, especially ISA/IEC 62443 and MITRE ATT&CK for ICS
• NIST CSF / Maturity and GAP Assessments: at least 3 years of experience
• KRITIS Regulation (§ 8a BSIG / NIS2): at least 2 years of experience
• Proven audit procedure competence according to § 8a para. 3 BSIG
• Active certifications as ISO/IEC 27001 Lead Auditor and Lead Implementer
• Demonstrable experience with assessments at KRITIS operators
• Very good German language skills, both written and spoken
• Start: 05.11.2026
• End: 31.12.2026
• Total scope: approx. 40 person-days
• Deployment: Onshore within Germany
• Onsite: by agreement in Frankfurt am Main
• Project and documentation language: German

Project details

• Start: 2026-11
• Remote: hybrid
• Location: Frankfurt, Deutschland, DE
• Languages: German