INTERIM COMPLIANCE · REGULATORY CHANGE · DORA · NIS2
Regulatory change legal support: interim professionals for DORA, NIS2 and other new rules
Alpinum Solutions provides regulatory change legal support to companies, banks, insurers and financial service providers in Switzerland, Germany and Austria: legal and compliance professionals for DORA and NIS2 projects, from gap analysis and DORA contract review with ICT providers to new policies and controls. This regulatory change staffing covers junior to senior levels, via staff leasing or freelancing, part-time or full-time, as individuals or project teams. Your company directs the project and makes the decisions.
New regulation rarely affects only one department. Supplier contracts need amending, policies rewriting, controls introducing and business units training – usually alongside daily business and against a fixed date. That is exactly the capacity many legal and compliance teams lack. Alpinum selects professionals by project, industry, languages and seniority and provides them for the duration of the project. The regulatory projects that used to sit under interim compliance now have their own page. Alpinum does not provide legal advice.
The following scenarios are examples from project practice, not individual client cases.
Typical assignments in regulatory change projects
Reviewing and renegotiating ICT provider contracts
Hundreds of contracts with IT and cloud providers sit in different systems. A small team records them, ranks them by criticality, checks them against the internal clause catalogue and prepares amendments; an experienced lawyer negotiates the open points with the providers. Duration: several months, depending on the portfolio. Workload: juniors often full-time, the lead part-time or full-time.
NIS2 between legal, IT and information security
IT drives the security programme, but the legal parts remain open: documenting whether the company is in scope, aligning the reporting process with legal and management, supplementing supplier contracts, preparing papers for management. Duration: several months. Workload: usually part-time, working closely with the IT project lead.
Gap analysis and implementation plan for a new requirement
Whether DORA, the EU AI Act or a change in AML/KYC: capturing requirements, comparing them with existing policies and processes, recording measures with owners and deadlines. Duration: a few weeks to a few months. Workload: often 50 to 100% during the analysis phase.
Follow-up after the deadline
The date has passed, but findings from internal audit or external review are open, documentation is missing, contracts are only partly amended. A professional works through the list and hands over to the business in good order. Duration: several weeks to months. Workload: part-time or full-time.
Regulatory change legal support: what professionals take on in DORA and NIS2 projects
Preparing scope and requirements
The professional compiles which entities, functions and providers a project touches and prepares the basis for decisions. Whether and how far a requirement applies to your company is assessed by your legal department and advisers.
DORA contract review
Checking ICT provider contracts against the requirements your company has defined, documenting deviations, drafting amendments and preparing negotiations. For large portfolios, a team works with one consistent review grid.
Policies, processes and controls
Translating new obligations into policies, regulations and control plans, recording responsibilities and training business units until the line can carry the task itself.
Project management and reporting
Keeping the action list, preparing status reports for management and the board, coordinating interfaces with IT, procurement, risk management and internal audit.
Scope of this page
This page covers implementing new regulation across industries. The ongoing compliance function and vacancies are covered by interim compliance, money laundering remediation by AML/KYC remediation. Technical services such as penetration testing or running a security system are not included.
Profiles from junior to senior and what your company directs
- Junior (0–2 years): recording contracts and policies against a review grid, keeping deviation lists, filing evidence, preparing training materials.
- Mid-level / experienced (3–6 years): running one work package independently, such as the gap analysis or contract amendments, interviewing business units and drafting policies.
- Senior (7+ years): subject-matter lead of the regulatory change project, negotiations with key providers, reporting to management and supervisory bodies, coordination with external advisers.
You set scope, priorities, reporting line and all decisions; interpreting the regulation stays with your company. In staff leasing, the right to give professional instructions generally lies with you and the professional works within your project team. In freelancing, they take on a defined package, for example reviewing a contract portfolio, and deliver it independently within the mandate.
Engagement models for regulatory change projects in Switzerland, Germany and Austria
Workloads of 20 to 100% are possible. Regulatory projects have phases: analysis needs more capacity, implementation often less. Professionals working with internal systems, contract data and board papers are usually integrated via staff leasing; a clearly defined review package can also go to freelance professionals.
Switzerland
Project work via staff leasing (Personalverleih) with Alpinum Solutions AG as contracting party, or as freelancing.
Germany
Project work as temporary agency work (Arbeitnehmerüberlassung) with Alpinum Solutions GmbH as contracting party, or alternatively as freelancing. More on the German market: interim lawyers in Germany.
Austria
Freelancing or staff leasing, contracted through the German or the Swiss Alpinum company.
Limits
Alpinum is neither a law firm nor an IT consultancy. Legal opinions, responsibility towards supervisory authorities and the approval of measures remain with your company and your advisers.
Process: from project to the right team
01 · Describe the project
Which regulation, which work packages, which deadline? Plus languages, workload per phase and whether one person or a team is needed.
02 · Review profiles
Within 48 hours we send you selected profiles for the project. You hold the interviews; you agree the start of the assignment with Alpinum – a start date is not guaranteed.
03 · Project start
Review grid, templates, access to contract and document repositories, and contacts in IT, procurement and compliance are ready on day one.
04 · Phases and handover
Team and workload follow the project phases. At the end, results, open items and documentation go to the business; moving into your team (temp-to-perm) is possible.
What regulatory change professionals cost
Daily rates as ranges, excl. VAT, as of 18 October 2026. Assignments in Austria use the values for Germany.
Switzerland, CHF
Junior (0–2 years) 600–800 · Experienced (3–6 years) 800–1'200 · Senior (7+ years) 1'200–1'800+
Germany and Austria, EUR, staff leasing
Junior 480–720 · Experienced 720–960 · Senior 960–1'440+
Germany and Austria, EUR, freelancing
Junior 720–960 · Experienced 960–1'360 · Senior 1'360–2'000+
For a large contract review, the mix keeps costs down: juniors record and compare, a senior professional decides and negotiates. A comparison with permanent hiring and external fees is in the guide cost models in interim legal and compliance.
FAQ on regulatory change projects
Does the professional replace our law firm or consultancy?
No. The law firm answers questions of interpretation, the professional implements in-house: contracts, policies, evidence, alignment with business units. Advisory hours are then kept for the questions that need outside expertise.
Does this also concern companies in Switzerland?
Whether an EU requirement such as DORA or NIS2 applies to a company in Switzerland, for example through entities or clients in the EU, is for you to clarify with your legal department or advisers. Alpinum provides professionals for such projects in Switzerland, Germany and Austria.
Do we need someone with financial services experience?
For projects at banks and insurers, usually yes, because supervisory practice and terminology should be familiar. For contract reviews or gap analyses in other industries, solid compliance or contract experience is often enough.
Can we start with one person and build a team later?
Yes. Often an experienced professional starts with the analysis; once the size of the contract portfolio is clear, juniors join for the data capture.
Can the professional hold a formal compliance function?
Depending on your requirements and the rules in Switzerland, Germany and Austria, this is possible via staff leasing or freelancing, for example as compliance officer with regulatory responsibility. Legally required independence and responsibilities are preserved.
Related services: interim compliance officers and managers · legal subject matter experts for projects · contract review lawyers. All practice areas and occasions: interim legal and compliance support for companies and law firms.
Discuss your needs: support for your regulatory change project
Tell us the project, deadline and scope. Within 48 hours you receive selected profiles for your project.