Freelancer profile translated to English.
Back to original languageAbout Jörg
I am a freelance information security consultant with over 30 years of IT experience. My focus is on implementing and optimizing ISMS according to ISO/IEC 27001, preparing for audits, and GRC topics. As a long-standing IT executive, I combine strategic expertise with technical depth, always pragmatically, solution-oriented, and on equal footing with my clients.
Service Portfolio
ISMS & Compliance
- Implementation and operation of ISMS according to ISO/IEC 27001
- Preparation for internal and external audits (incl. gap analyses)
- Support in complying with TISAX, NIS2, and other requirements
IT Security Consulting
- Security concepts for SMEs (e.g., DIN SPEC 27076)
- Risk analyses, determination of protection needs, action planning
- Penetration test support & vulnerability management
Business Continuity & Crisis Management
- Implementation of BCM systems according to ISO 22301
- Planning and execution of emergency drills
- Incident response & forensic coordination
Governance & Strategy
- Development of security-relevant GRC structures
- Consulting on secure digital transformation & cloud security
- License, contract & software asset management
Awareness & Policies
- Training and employee awareness
- Development of security policies & guidelines
3. Professional Focus Areas
- ISMS (ISO/IEC 27001, BSI Basic Protection)
- IT Governance & GRC (incl. COBIT)
- Strategic IT Management & IT Architecture
- Project management of security-relevant IT projects
- Cloud Security & Microsoft 365 Security
- BCM & IT emergency planning
- Incident Response & Forensic Coordination
- Audit preparation & compliance management
4. Selected Project Experiences
- Establishment of an ISO/IEC 27001 compliant ISMS for a retail company
- Project management of data center outsourcing & modernization
- Interim IT management for operational stabilization
- Deputy head of the corporate crisis team
- Coordination and analysis of a real cyberattack
German
Native or bilingual
Remote only
Primarily works remotely
Experience
- ResKontIS, RESilienz - KONTinuität - InformationsSicherheitSelf-employed Information Security ManagerCONSULTING AND AUDITSAugust 2025 - Today (1 year)Rotenburg an der Fulda, GermanyI founded ResKontIS to empower companies of all sizes to use information security as a success factor – pragmatically, efficiently, and sustainably.With over 30 years of experience in technology, management, and information security, I support organizations in building robust structures that ensure confidentiality, integrity, and availability, while also strengthening business continuity.My focus is on implementing and further developing ISMS according to ISO/IEC 27001, Business Continuity Management, cyber resilience, and audit preparation. As a certified auditor & lead implementer, I help to effectively and practically implement regulatory requirements such as NIS2, TISAX, or GDPR.ResKontIS stands for trustworthy, independent consulting with measurable added value – security without unnecessary complexity, but with sustainable impact.
- tegut… gute Lebensmittel GmbH & Co. KG, FuldaHead of GRC, Focus on Information SecurityRETAIL (SMALL BUSINESS)May 2023 - July 2025 (2 years and 2 months)Fulda, GermanyResponsibility for risk management as well as preparation and support for internal and external audits. Establishment of an ISMS according to ISO 27001 and management of structured vulnerability management.
- tegut… gute Lebensmittel GmbH & Co. KG, FuldaMember of Corporate Crisis Team, Deputy Head since 2019RETAIL (SMALL BUSINESS)March 2011 - July 2025 (14 years and 4 months)Fulda, GermanyCrisis team member with experience in managing crises, including the Corona pandemic and cyberattacks, including planning and execution of realistic crisis drills.
Recommendations
Be the first to recommend Jörg
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Wholesale and industrial clerkIndustrie- und Fahrzeugbedarf GmbH IFAG1983zum Großhandelskaufmann
- Training as an organizational programmerEDV-Bildungsinstitut der GBS1989Ausbildung zum Organisationsprogrammierer
Certifications
- ISO/IEC 27001 AuditorPECB2025
- ISO/IEC 27001 Lead ImplementerPECB2025