Christian U.-GRC Expert, Audit and Advisory

• Established and led the GRC team in the Rhine-Main region, with professional and disciplinary responsibility.
• Cost center responsibility, including preparation, monitoring and reporting of forecasts, as well as planning for the following year.
• Speaker and thought leader at internal and external professional events, such as ESG Day and partner webinars.
• Key account management for listed corporations (DAX, SDAX and MDAX) and mid-sized companies, including strategic account management and development of client relationships.
• Developed and implemented integrated GRC strategies to strengthen corporate governance.
• Prepared policy documents to advance GRC advisory services professionally and methodologically and to support client acquisition.

Internal Audit:

• Served as Chief Audit Executive for various companies, including an internationally active SDAX corporation.
• Established the corporate audit function, including its written charter and Audit Universe.
• Planned and conducted audits, including staffing and scheduling, reporting and follow-up of actions.
• Communicated with the Executive Board, Supervisory Board, Audit Committee and local management of audited entities.

Internal Control System:

• Implemented Internal Control Systems for listed corporations internationally and had full project responsibility.
• Developed Target Operating Models and risk-control matrices.
• Designed and delivered training sessions and workshops for various stakeholders.
• Supported the selection and implementation of a GRC software solution, including high-level and detailed design and testing.
• Planned and carried out risk-based roll-outs and subsequent quality assurance activities.

Risk Management System:

• Implemented company-wide risk management systems internationally and had full project responsibility.
• Defined the Target Operating Model, RMS organization, written policies and training materials.
• Conducted risk identification, assessment and aggregation, and developed risk mitigation measures.
• Set up reporting for various stakeholders.

Key responsibilities as Head of Internal Audit:

• Planned and conducted audits and prepared audit reports, including planned audits, post- and pre-implementation reviews, and audits conducted alongside projects; developed risk-based audit plans.
• Conducted special investigations into financial crime and detected and investigated fraudulent acts.
• Implemented the Internal Control System, including planning, conducting and evaluating regular surveys and communicating the results.
• Further developed ICS processes, systems and reports; identified process weaknesses and advised on how to address them.
• Prepared and regularly updated company-wide policies and procedures.

Key responsibilities as Company Data Protection Officer:

• Trained and instructed employees on the requirements and rules of the German Federal Data Protection Act.
• Advised on and monitored matters relating to the German Federal Data Protection Act, particularly data processing on behalf of third parties and technical and organizational measures.
• Prepared company-wide policies and procedures (e.g. records of processing activities, handling data breaches, data protection policy).
• Led the project for handling emails, files and documents as part of the dissolution of Gesellschaft für angewandte Versicherungs-Informatik mbH.

Key responsibilities as Risk Management Officer:

• Introduced and continuously developed, coordinated and conducted the annual and quarterly risk management updates in accordance with MaRisk.
• Identified, analyzed, assessed and documented process- and project-related risks.
• Identified and assessed risk mitigation measures.
• Prepared quarterly reports and an annual report, including communication with management, shareholders and clients.

Key responsibilities as Occupational Safety Officer:

• Planned and conducted safety inspections and training at the locations of Gesellschaft für angewandte Versicherungs-Informatik mbH in collaboration with shareholders and clients.

Key responsibilities as Compliance Officer:

• Promoted compliance with legal and regulatory requirements by advising management and employees on relevant rules.