Framework agreement Support/services in the area of IT operational compliance

References - The provider must have provided similar support services in the last three years. Demonstration by at least two references.

Employee-related qualifications - role consultant "IT-operational compliance" Completed university of applied sciences or bachelor's degree in computer science, business informatics, compliance or a degree program with a minor subject in computer science; alternatively: state degree of an operational professional or long-term relevant professional experience in the IT mind. 15 years of professional experience after completion of the training or study in the following subject areas:

• IT service manager
• BSI basic protection consulting
• Lead auditor 27001
• Data protection auditor
• IT security auditor
• Data center auditor according to EN 50600
• Auditor according to §8a CRITIS Regulation Evidence must be provided by corresponding certificates / certificates. Of that at least. 10 years of professional experience in the management and operation of critical IT infrastructures in a responsible position (budget and personnel). Proven professional experience in the following subject areas:
• Auditor according to ISO 42001 (Management System for AI)
• AI Compliance Officer
• AI Technologies in Information Security
• Energy auditor according to ISO 50001 (Energy Management Systems)
• Energy Manager according to ISO 50001 (Energy Management Systems)
• BSI Criteria Catalogue C5 (Cloud Computing Compliance Criteria Catalogue)
• NIS2 Directive (EU Directive 2022/2555) Evidence shall be provided by appropriate certificates/certificates. Training of employees
• Audit of management systems according to DIN/IN/ISO 19011
• Project management according to DIN/ISO 69901 and ISO 21500
• Data Center Facilities and Infrastructure according to EN 5600 and
• TSI (Trusted Side Infrastructure)
• Service Management according to DIN/ISO 20000, ITIL and FitSM
• §8a BSI Act (KRITIS) Evidence must be provided by corresponding certificates / certificates. Project management and participation in projects: Requires a project experience of more than 3 years in the last 5 years The proof must be provided by describing suitable projects (form 2). Basic knowledge of the English language Negotiable knowledge of the German language.The proof must be provided by a certificate (minimum level C2) or mother tongue. Depending on the task, the staff must undergo an extended security inspection in accordance with §10 SÜG NRW. The staff must agree to an obligation under the "obligation of non-official persons" and the staff must sign it.Role Consultant "Identity &" "Access Management Systems" Completed University of Applied Sciences or Bachelor's degree in Computer Science, Business Informatics, Compliance or a degree program with a minor subject Computer Science; alternatively: state degree of an operational professional or long-term relevant professional experience in IT of which at least. 10 years of professional experience in the management and operation of critical IT infrastructures in a responsible position (budget and personnel). Proven professional experience in the following subject areas:
• IST analysis of processes in the area of authorizations of identities
• Determination of target processes in the area of authorization of identities
• Advice and support in the tendering and awarding of an IAM system
• Advice and support in the development of a technical infrastructure for an IAM system
• Advice and support in the implementation of the business roles of an IAM system
• Advice and support in the implementation of processes in an IAM system Project management and cooperation in projects: Required is a project experience of more than 3 years in the last 5 years The proof must be provided by describing suitable projects (form 2). Basic knowledge of the English language Negotiable knowledge of the German language. The proof must be provided by a certificate (minimum level C2) or mother tongue.

Depending on the task, the staff must undergo an extended security inspection in accordance with §10 SÜG NRW. The staff must agree to an obligation under the "obligati…

Minimum turnover - Required average annual turnover: > EUR 350.000,00