Required skills
Languages: German
Job description
Seeking an experienced Security Consultant for a remote project focused on IT risk management processes. The role involves advising asset/application owners, conducting risk analyses, and developing remediation plans.
Project overview
Your contact person for this request
Kirsten Schmidt-Horst
Tel.: [contact removed]
E-Mail: [contact removed]
By using the masculine form of the word "Consultant / Developer etc.", all genders female/male/diverse are meant.
After submitting your offer, you will receive a CV template that must be completed. It is important that the mandatory and desired criteria are met, otherwise we have no chance.
The project must be carried out onshore - i.e., from Germany.
With this request, we are looking for a consultant in the field of security.
DEADLINE FOR OFFERS: 02.11.2026
2 Subject of the contract
The service provider performs the following services:
Consulting support for asset/application owners through the information security / IT risk management process (RiskM process for short) of the respective business unit with:
? Workshop-based development of protection needs assessments/analyses
? Performance of threat-based IT risk analyses and compliance checks in assessment format, based on workshops and document review.
? Development of risk treatment plans linking technical, procedural
and functional vulnerabilities/issues to potential business and monetary risks of the business/specialist process.
? Updating existing RiskM documents, analogous to the initial creation process
Mandatory Requirements (mandatory)
IT Security: In-depth knowledge and at least 5 years of practical experience in IT security.
IT Risk Management: In-depth knowledge and at least 3 years of demonstrable practical experience in IT risk management.
ISO 27001 and ISO 27005: Familiarity with the principles and requirements of both standards and at least 3 years of practical experience.
Desired Requirements (evaluation criteria)
Audit or Assessment Experience: At least 5 years of practical experience. Weighting: 30%
risk2value: Project experience in information security risk management with the tool risk2value from the manufacturer GBTEC (formerly Avedos). Weighting: 20%
Identification of Opportunities and Risks: At least 5 years of experience in identifying IT risks and opportunities through risk treatment measures. Weighting: 20%
Certifications: At least one of the following certifications: ISO 27001 Lead Auditor, BSI Grundschutz Auditor, CISSP or T.I.S.P. Weighting: 20%
Industry Knowledge: At least 2 years of practical experience in a railway company. Weighting: 10%
Project Tasks
Conducting protection needs assessments and analyses
Workshop-based IT risk analyses and compliance checks
Performing assessments according to ISO 27001 and ISO 27005
Creating risk treatment plans
Evaluating technical, procedural, and functional vulnerabilities
Updating existing IT risk management documentation
Project language: German (C1)
Utilization: 220 man-days - fulltime
Fee: €800.00 per day on an 8-hour basis for remote - 1 day must be provided free of charge (probably in Frankfurt)
Payment terms:
30 days
Other
Project details
01.01.2027
Duration / End
31.12.2027
If you can support us in this matter, please send us suitable profiles.
Please remember when submitting your offer that we need the CV as a Word file.
Furthermore, please be so kind as to state your fee or confirm the fee requirement.
Start / End
01.01.2027 - 31.12.2027
Languages
German
Utilization
220 man-days - fulltime
Payment terms
30 days
Fee
€800.00 per day on an 8-hour basis for remote - 1 day must be provided free of charge (probably in Frankfurt)
Other
If you can submit a qualified offer for this request, please send us a meaningful profile, including a concrete statement on availability and conditions. Please note that we will use the data you provide exclusively for the purpose of mediating project assignments in accordance with §5 BDSG. Disclosure to third parties within this scope will only occur after obtaining your consent. Thank you in advance for your support.
- Start: 01.01.2027
- Duration: bis 31.12.2027
- Remote: remote
- Location: remote, DE
- Rate: 100-100 EUR/h
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on ProTIP