Tarek El Idrisi-IT-Consultant

Carve-out project: Development of certification strategy, implementation and requirement plans across multiple standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz, and BSI TR-RESISCAN

• Cross-standard inventory and risk assessment
• Coordination with cross-department stakeholders: ISB, executive management, certification bodies, legal and data protection
• Consulting in information security, GRC, and IT auditing

Software audits in a regulatory environment: PSD2 payment services, core banking applications, mobile banking apps, and document management systems

• Service provider audits according to IDW PS 951 (internal control system at service companies), e.g., for a provider in the cash transport and cash services sector
• Participation in year-end audits for clients in retail and cooperative sectors, focusing on data analytical audit procedures (IDEA)
• Development of an internal training concept on the NIS2 directive and conducting impact analyses for clients
• Participation in model calculations for regulatory audits

• Contributing to the development of IT concepts for the central tasks department
• Planning IT infrastructure and designing technical solutions
• Conducting trainings for internal departments
• Technical support and assistance for all internal areas
• Service in various IT battalions and units