Senior Cyber Security Assessment Consultant (KRITIS / ISO 27001 / OT) – Remote & Frankfurt

Project overview

Keil Business Solutions GmbH is an innovative Google Reseller and IT service provider.

For a customer project, we are looking for a

Senior Cyber Security Assessment Consultant (KRITIS / ISO 27001 / OT) – Remote & Frankfurt

Our client is an operator of critical infrastructures (KRITIS) in the energy sector as an energy provider for rail transport and is regularly subject to comprehensive audits as a highly regulated company (audit readiness is given).

The goal of this project is a pragmatic, robust view of the actual security and implementation level with clear, actionable recommendations (Reality Check) – explicitly not a pure paper audit.

A central theme is the impact of the governance structure between central requirements and decentralized responsibility down to the operational level.

Responsibilities

The subject is the execution of a Cyber Security Assessment of our client by a service provider team.

The assessment evaluates the maturity level of information and OT security based on recognized frameworks (NIST CSF and ISO/IEC 27001/27002) and delivers a robust result with market benchmarks, prioritized recommendations, and a governance review between central and decentralized units.

The scope described here forms the framework for the entire service period and must be delivered unchanged after commissioning.

Mandatory in-depth work beyond a purely declarative maturity assessment:

(1) ISO 27001 Implementation Check – the actual implementation of ISO/IEC 27001 chapters or controls (Annex A / ISO 27002) must be checked with evidence collection (documents, proofs, sample effectiveness checks), not just interview-based.

(2) Control Effectiveness Check at Role Level – for the IS/Security team, it must be checked whether roles and responsibilities are assigned to the appropriate ISO 27001 controls and are effectively lived; where no clear assignment is possible, the check is carried out regarding the effectiveness of the function/role.

The check is explicitly organizational at the role/function level, not a personal assessment of individual employees.

Scope of Service: Maturity and Implementation Assessment of IT/OT Security including Market Benchmark, Governance Review (central/decentral), and Prioritized Action Catalog.

Deliverables: Kick-off (methodology/project plan); conducted maturity assessment (NIST CSF + ISO/IEC 27001/27002) including evidence collection; control/role effectiveness analysis; final report with market benchmark and action catalog; management-ready results presentation.

Addressed Domain: Domain 4 – Security (IT and OT Security, ISMS, KRITIS Regulation).

Special Features: KRITIS environment (energy sector); audit procedure competence according to § 8a (3) BSIG and ISO/IEC 27001 Lead Auditor/Implementer required (see must-have criteria).

Project details

2026-11-05

End: * PT) + Option

Utilization: Full-time

Remote and possibly individual days on-site in Frankfurt am Main if needed.

Project Language: German

If interested, please send us your profile (preferably in Word format).

Your contact at Keil BS

Adrian Dobo

Senior Recruitment Consultant

Keil Business Solutions GmbH

Landsberger Straße 154 | 80339 Munich

Tel: *

Fax: *

E-Mail: *@*.com

www.keil-bs.de

• Start: 2026-11
• Duration: 2 Monate
• Remote: remote
• Location: Frankfurt am Main, Deutschland, DE
• Languages: German