COBIT Foundation

• Evaluation and further development of Engineering Excellence initiatives as part of the “Digital First” program
• Validation of efficiency, productivity, and cost-saving potential in the Software Development Lifecycle (SDLC)
• Organization-wide analysis of the use of Generative AI in the Software Development Lifecycle (SDLC)
• Evaluation of optimization measures in the areas of product management, delivery, developer experience, metrics, and quality assurance
• Alignment of the “Next Level Architecture (NLA)” target vision with regard to organizational design, governance model, and scalability
• Identification of structural bottlenecks in the delivery organization and development of alternative optimization approaches
• Preparation of decision-making and management documents for department management and the Executive Board to evaluate efficiency potential and transformation measures

Skillset: Engineering Excellence, Operating Model Design, Generative AI, AI in SDLC, SAFe, DevOps, Software Delivery Metrics, Value Streams, Team Topologies, Domain Driven Design, Azure DevOps, Jira, Confluence, Management Reporting, Business Case Assessment

• Project: Introduction of an ERP system and process optimization across the company
• Employment type: Freelance
• Result: Increased efficiency through optimized processes and real-time KPI visualization

Technologies: Linux, ERP systems

Skills: Change Management, Risk Management, Project/Process Management, Validation & Audit Trail

Industry: Publishing, media Project management for the design of a RAG-based archive indexing solution: sovereign on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio/video holdings. Use-case assessment and make-or-buy together with editorial, archive and legal departments, taking copyright law, the Interstate Broadcasting Treaty and the AI Act into account. Differentiator: practical LLM infrastructure experience from two of my own productive platforms combined with C-level program management in regulated industries.

• Project management and consulting services with a focus on IT interim management: digitalization of corporate management, including processes and applications
• Assessment of the entire IT infrastructure, including applications, core processes and contracts, including cost optimization
• Evaluation and implementation of solutions to promote digitalization in the company in the areas of property management, CRM, invoice review and approval processes, smart metering, DMS and time tracking
• Digitization of file folders and introduction of SharePoint and Microsoft Teams as central document and communication platforms
• Design and delivery of an AI workshop, including the rollout of AI tools to increase efficiency and transparency in key business processes
• Preparation of training materials and delivery of user training for newly introduced digital processes and solutions

• Head of the group-wide, international, and cross-functional IT Governance & IAM department within the central IT division of a large French-German private banking group. Disciplinary management of around 30 employees at five different locations within the group (Frankfurt, Paris, Tunis, Saarbrücken, Düsseldorf). Head of IT committees and key role in direct communication with management, the supervisory board, external stakeholders, and regulators.
• Definition and establishment of a state-of-the-art IT strategy process and related IT governance structures for the group's IT department with more than 600 employees (testified by the German Federal Financial Supervisory Authority and the ACPR) and successful process run.
• Establishment of a new future-oriented process framework for IT and necessary governance structures (process squads) for the continuous improvement of IT processes with regard to new regulatory requirements (including DORA, EU AI Act, etc.).
• Establishment of stringent processes to close a historical backlog of findings (> 100 IT findings, 40 overdue findings in 2022) from internal and external auditors (WP, ACPR, BaFin). Successful reduction of stock of overdue findings to 0 at the end of 2025.
• Supporting more than 20 IT audits per year and establishment of regulatory monitoring processes. Introduction of ServiceNow to revolutionize regulatory change and IT compliance processes with advanced AI functionalities.
• Realignment of IT control processes in conjunction with the newly established ICT risk function under DORA and the three lines of defense concept using the TopEase GRC solution.
• Reduction of the application landscape, by systematically analysing the purpose with application and business owners, identifying duplicates while implementing a One-Tool Strategy throughout the group. Successful reduction of one third of the application landscape within the CMDB.
• Onboarding of all group applications into One Identity's group-wide IAM solution, as well as operation and further development of the solution in connection with segregation of duties (SoD), role-based access management (RBAC), etc.

• Insourcing a system-critical IT application to meet regulatory requirements in payment transactions
• Preparing project plans, cost estimates, and schedules for project phases
• Capturing and documenting processes
• Identifying critical paths in processes
• Preparing management documents and committee materials
• Methodology: Waterfall project management, risk and control assessments
• Tech & Tools: Project management software

• Development and implementation of multi-domain infrastructure strategies to optimize system performance in OT and IT.
• Design of security concepts for multi-domain infrastructures, including IT security management.
• Oversight of incident management, problem management, and change management.
• Managing the entire lifecycle of a strategic project, including planning, execution, delivery, and stabilization.
• Supporting IT governance, IT architecture, and risk management.
• Conducting workshops on IT security and infrastructure.

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• Program and project management for IT projects with a focus on energy supply, process & system harmonization (SAP IS-U)

• Project Health Check, Preventive Healthcare for IT projects, Turn Around Management

• Strategy consulting in IT governance and IT strategy with a focus on process & system harmonization

Subproject Lead – Nearshoring Transformation

Project context: Support of a transformation program for relocating operational services to an international nearshore model

• Subproject lead
• Assessment of existing organizational and operating models
• Conducting GAP analyses
• Development of a sourcing readiness model
• Coordination of various departments
• Management of external partners
• Documentation of organizational changes
• Monitoring of the service provider / nearshoring partner

• Delivery of various end-customer projects in server and network infrastructure on time, in quality, and within budget.
• Project 1: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall at an automotive supplier.
• Project 2: Migration of file services from dedicated servers at 5 branch locations into a central managed file service, including DHCP, directory, and print services, as well as decommissioning of the old domain controllers.
• Project 3: Renewal of the network infrastructure at the headquarters and branch locations of a logistics company and transition of the LAN, WLAN, and firewall environments into a managed network service.
• Project 4: Network renewal, replacement of the core and access switches at the headquarters of a medical technology company and transition into a managed network service.
• Project 5: Firewall renewal, replacement of an ASA firewall with a Fortinet firewall for a city.
• Environment: ASA and Fortinet firewalls, Cisco network components, ITSM Heat/Ivanti, Confluence.

• Functioned as a Fractional CIO for the GCC's largest gaming distributor, leading a complete IT transformation infrastructure upgrade and outsourcing of IT services and ERP applications
• Oversaw the development and rollout of two CEO-sponsored business systems with a $40 million budget, including the implementation of a comprehensive Hydrocarbon Accounting System (Tieto) and a Supply Chain Management System integrating seven multi-vendor applications across Qatargas, Rasgas, and Qatar Petroleum
• Led Schlumberger's global outsourcing, securing a $350 million deal over five years with a 15% cost reduction, managing a global team of over 30 and implementing operational models and frameworks for chargeback, procurement, and IT management
• Navigated technically intricate and organizationally demanding projects for prestigious companies worldwide across more than 30 countries, leading diverse teams and driving strategic innovation

• Analyzed the required scope of processes, infrastructure, and SAP for integrating the MacDermid subsidiaries
• Validated proposals from the new service providers
• Managed the collaboration and tracked the tasks of business and IT experts
• Coordinated communication and the PMO
• Created cutover plans in three waves for SAP conversion, Salesforce, and Ariba

• Integrating system architecture, business analysis, requirements engineering, and process consulting
• Managing business unit needs toward IT and implementation
• Capturing requirements in JIRA and breaking them down into epics
• Overseeing internal projects and programs, including stakeholder management and reporting
• Handling requirements from traditional IT developments to IoT integrations and SAP subsystem replacements
• Implementing current legal regulations (MAKO, EnWG, EEG, GWG, StromGVV, GasGVV, StromNEV, GasNEV)
• Applying agile methods (Agile, SAFe, ITIL, Scrum, Kanban, DDD, IaC, CI/CD, DevOps, automation, ETL, OOA, OOD, MDA, BPMN, BPM, UML, marketing automation, data science, ML, AI, GenAI, LLMs)
• Using tools like JIRA, SharePoint, MS Office, MS Project, MS Dyn CRM, VMware ESX/ESXi, BSI IT-Grundschutz, BSI C5, NIST, MS Azure, Typo3, mail automation, Docker, Kubernetes, OpenStack, OpenShift, Terraform, Ansible, SQL, REST, SOAP, Git, GitLab, LoRaWAN, SAP IS-U, S/4HANA, USU, KUGU, AbSys, sensors, MQTT