RST Beratung

Consultant

• Contribute to building and further developing data protection structures (Data Protection Management System - DPMS) and processes.
• Serve as an appointed external Data Protection Officer (DPO).
• Implement and maintain documentation (e.g., records of processing activities, policies, roles, pragmatic evidence).
• Support DSFA/DPIA: preparation, facilitation, documentation.
• Deliver training and awareness sessions that make data protection understandable and sustainably embedded in daily work.
• Act as an interface with information/IT security and compliance: translate requirements between business, technical teams, and regulators in an audience-appropriate way.
• Conduct data protection audits and/or accompany and support clients during inspections.
• Participate in internal projects, structure our collective knowledge, and help evolve our consulting approach.

Consultant, Data Protection

• Advising on the establishment and improvement of ISMS and BCMS across various industries and company sizes.
• Advising on the integration and implementation of regulatory requirements from the BSI Act, the KRITIS umbrella law, DORA and other standards.
• Planning and implementing risk analyses and risk treatment aimed at effective manageability (KPIs, roadmaps, prioritization).
• Developing concepts and policies for clients in regulated industries (KRITIS, NIS-2, KRITIS umbrella law).
• Conducting internal audits and preparing and supporting our clients for certification to ISO 27001 and/or TISAX.
• Preparing and conducting emergency/contingency exercises.
• Participating in internal projects, structuring our collective knowledge and further developing our consulting approach.

Information Security Consultant – 100% Remote

• Contribute to the establishment and further development of data protection structures (Data Protection Management System - DSMS) and processes.
• Serve as an appointed external Data Protection Officer for clients.
• Implement and maintain documentation (e.g., Records of Processing Activities, policies, roles, pragmatic evidence of compliance).
• Support DPIAs (Data Protection Impact Assessments): preparation, facilitation, and documentation.
• Deliver training and awareness sessions aimed at making data protection understandable and embedding it sustainably in daily work.
• Act as an interface with information/IT security and compliance: translate requirements between business, technical teams and regulators in a way that fits the audience.
• Conduct privacy/data protection audits and/or accompany and support clients during inspections and assessments.
• Participate in internal projects, structure and consolidate cross-cutting knowledge, and help evolve our consulting approach.

Consultant – Data Protection, Experienced

• Advising on the establishment and improvement of ISMS and BCMS across various industries and company sizes.
• Advising on the integration and implementation of regulatory requirements such as the BSI Act, the KRITIS umbrella law, DORA (Digital Operational Resilience Act), and other standards.
• Planning and conducting risk assessments and risk treatment with the aim of ensuring effective controllability (KPIs, roadmaps, prioritization).
• Developing concepts and governance/rulebooks for clients in regulated sectors (KRITIS, NIS-2, KRITIS umbrella law).
• Performing internal audits and preparing and supporting our clients for certification to ISO 27001 and/or TISAX.
• Preparing and executing emergency/incident exercises.
• Participating in internal projects, structuring our collective knowledge across the firm, and further developing our consulting approach.