Hire a certified Datenschutzbeauftragter (DSB) in Germany in minutes from over 15,000 CVs with the power of AI.

• Project manager for the analysis, implementation, and optimization of digital processes
• Concept, management, and optimization of comprehensive marketing campaigns for lead generation via Paid Social (including Meta Ads, TikTok Ads)
• Concept and execution of content production and marketing measures
• Project management in omnichannel marketing and process automation
• Implementation of digital tools to optimize customer acquisition and support
• Internal stakeholder management and coordination of external service providers

• Requirements management, process planning, interface role, ISMS implementation and documentation
• Implementation and establishment of an ISMS according to ISO 27001 as well as setup of emergency management / ITSCM
• Coordination of conditions with the authority-affiliated IT service provider
• Consideration of KRITIS relevance in the scope and implementation of a B3S
• Development of guidelines for document control and the continuous improvement process (KVP)
• Creation of relevant project documents
• Analysis of existing processes and development of guidelines
• Collection of requirements for ISMS and ITSCM and coordination with the IT service provider including definition of interfaces
• Analysis of communication processes and escalation paths
• Review of documents for risk management, ISMS, emergency preparedness and emergency response
• Development of a complete rebuild of all documentation and creation of new relevant documents
• Development of necessary rules, policies and concepts
• Interface function between customer and service provider to ensure document quality
• Coordination of protection needs with departments, especially regarding KRITIS relevance, and planning resulting measures
• Development of preventive measures to minimize data center outages for various scenarios such as pandemics or ransomware attacks
• Defining the test strategy for IT emergency exercises
• Initiation of necessary training measures for raising awareness in departments
• External Information Security Officer (ISB)
• Introduction of document control

As project manager for the Odoo implementation at a small company, I was responsible for designing, implementing, and training a fully integrated CRM and accounting system. Through structured requirements analysis, precise data migration, and targeted change management, I was able to complete the rollout in just eight weeks. The project led to a significant reduction in manual tasks, faster business processes, and increased real-time transparency.

Main Responsibilities

Requirements analysis and process mapping Configuration of Odoo modules: CRM, Sales, and Accounting Data migration (Excel/CSV → Odoo) and quality control Creation of workflows, automated email rules, and dashboards Conducting training sessions and providing support after go-live Project coordination (budget, schedule, stakeholder communication)

Key Achievements

Full implementation of the Odoo suite within the set timeframe (8 weeks) 30% reduction in accounting time and 25% acceleration of the lead-to-sale flow 100% customer satisfaction after go-live, based on survey results Successful migration of 100% of existing master data without data loss Establishment of a sustainable support infrastructure (3-month post go-live support)

Impact

Improved decision-making through real-time dashboards and automated reports Increased efficiency and cost savings (≈ €8,000/month) Scalability for future growth (additional modules can be integrated seamlessly) Strengthened sales and finance departments through seamless process integration

This summary highlights how I created concrete and measurable value for the company through structured project work, technical expertise, and targeted training.

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

Development of an AI console for integration into different open source solutions (ERP, CRM..)

Development of the target architecture Integration of different AI platforms (ChatGPT, Anthropic, Perplexity) Workflow with cross-platform use of the AI platforms Voice input and voice output History Console-based project management Generation of individual agents (Crewai..) Integration of agents into the AI workflow

• Consolidation
• Mergers
• Law firm chart of accounts / cost centers
• Preparation of annual financial statements
• Digital process development and optimization of the accounting/closing and reporting area
• Optimization of the DATEV software environment

• Responsible for Finance, Insurance, and Legal, including 3 department heads
• Leading and managing day-to-day accounting
• Preparing and reporting monthly financial statements according to HGB and IFRS
• Corporate controlling including budgeting, forecasting, and variance analysis
• Point of contact for external authorities, banks, tax advisors, and auditors
• Implementing group-wide processes at the corporate level
• Preparing annual financial statements according to HGB
• Supporting the annual audit
• Supporting special audits and due diligence projects at the group level
• Insourcing of accounting, including ERP implementation and department development

• IT Senior Consultant (bank infrastructure, Active Directory, Azure, security, PKI)
• Planning, design, and implementation of cloud solutions based on Microsoft Azure / M365
• Teams, M365, and cloud services
• Vulnerabilities, threats, attacks
• Security analysis, security policy, security architecture
• Conducting meetings and presentations at various management levels
• Organizing and leading team meetings to improve internal communication
• Tools: PowerShell, Active Directory, GPO, DNS, DHCP, scripting

• Governed multi-agent orchestration for regulated, EU-based companies – self-hostable, compliant with the EU AI Act and GDPR („by design“), BYOM (own models/GPU).
• Two-gate governance: agent deliberation + mandatory human approval, full signed audit trail; graduated autonomy model („internal → autonomous per skill“).
• Verified knowledge graph („Company Brain“) with source evidence for every answer; own orchestration framework (Virtual Team Framework).
• Industry solutions for financial services: compliance monitoring, invoice and contract review; hands-on development with LLMs (including Anthropic/Claude), agentic workflows, RAG.
• Building the governance-focused multi-agent platform TeamIntel (see AI reference projects).

• Create product vision

• Commission Scrum teams

• Create schedule and coordinate with project lead

• Coordinate and align with stakeholders

• Harmonize processes across initiatives

• Present project content at C-level

• Create security concept for classified information up to DEU GEHEIM and NATO SECRET considering BSI GS, KRITIS, SÜG, VSA

• Plan service changes to underpinning services

• Design architecture for secure infrastructures

• Dependency management in project context

• Risk management

• Requirements management

• Commission and oversee protection needs analysis and information security concept

• Coordinate service design activities

Based on previous experience in these fields, we match jobs in data and information security, compliance, quality management, and process optimization with the right candidates and freelancers, or do the work ourselves if needed.

• Preparation of data protection risk analyses
• Planning and carrying out audits for clients with regard to the statutory control obligations of the Data Protection Officer
• Updating internal policies (updating work instructions)
• Reviewing Data Protection Impact Assessments
• Carrying out risk assessments
• Monitoring and implementing an ISMS
• Preparing activity reports
• Training employees
• Contract reviews

• Informing and advising on obligations under applicable data protection regulations
• Reviewing compliance with data protection regulations and the client’s strategies for protecting personal data through own audits
• Advising on and preparing data protection impact assessments as well as data protection notices and data protection guidelines and policies
• Drafting, advising on and negotiating data processing agreements
• Raising awareness among management and staff on data protection by creating training materials and concepts and delivering training sessions
• Industries include: financial services, healthcare, trades, mechanical engineering, recruitment, auditing and tax consulting

• Project: Implementation of an ERP system with process optimization in the company
• Employment type: Freelance
• Result: Increased efficiency through optimized processes, real-time KPI visualization

Technologies: Linux, ERP systems

Skills: Change management, risk management, project/process management, validation & audit trail