RST Beratung

Consultant

• Contribute to building and further developing data protection structures (Data Protection Management System - DPMS) and processes.
• Serve as an appointed external Data Protection Officer (DPO).
• Implement and maintain documentation (e.g., records of processing activities, policies, roles, pragmatic evidence).
• Support DSFA/DPIA: preparation, facilitation, documentation.
• Deliver training and awareness sessions that make data protection understandable and sustainably embedded in daily work.
• Act as an interface with information/IT security and compliance: translate requirements between business, technical teams, and regulators in an audience-appropriate way.
• Conduct data protection audits and/or accompany and support clients during inspections.
• Participate in internal projects, structure our collective knowledge, and help evolve our consulting approach.

Consultant, Data Protection

• Advising on the establishment and improvement of ISMS and BCMS across various industries and company sizes.
• Advising on the integration and implementation of regulatory requirements from the BSI Act, the KRITIS umbrella law, DORA and other standards.
• Planning and implementing risk analyses and risk treatment aimed at effective manageability (KPIs, roadmaps, prioritization).
• Developing concepts and policies for clients in regulated industries (KRITIS, NIS-2, KRITIS umbrella law).
• Conducting internal audits and preparing and supporting our clients for certification to ISO 27001 and/or TISAX.
• Preparing and conducting emergency/contingency exercises.
• Participating in internal projects, structuring our collective knowledge and further developing our consulting approach.

Consultant, Data Protection

Information Security Consultant – 100% Remote