Volker Jung-Interim CISO (Germany, Austria, US, APAC), Auditor
Check rate
Experience
Interim CISO (Germany, Austria, US, APAC), Auditor
Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Interim CISO, Auditor
METRONOMIA Clinical Research GmbH
- Prepared for ISO 27001:2013 certification audit
- Drafted ISO 27001 implementation roadmap
- Scoped and implemented ISO 27001:2013 requirements
- Planned and conducted migration from ISO 27001:2013 to ISO 27001:2022
- Created comprehensive migration roadmap for ISO 27001:2022
- Improved and performed risk assessments and reporting
- Enhanced vulnerability scanning, management, and reporting
- Managed ISMS documentation and management reporting with monthly updates
- Improved supply chain risk assessment and reporting
- Enhanced cyber resilience
- Improved admission and access management including privileged access
- Improved identity and access management process, monitoring, and reporting
- Enhanced crisis management process and documentation
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Enhanced external vulnerability scanning and incident management and reporting process
- Planned and conducted supplier risk assessments to ensure compliance with internal and regulatory requirements
- Enhanced privileged access rights management and monitoring
- Conducted internal audits to comply with ISO 27001 Annex A
- Provided management status and risk reporting
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Enhanced information security strategy
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Defined and installed CISO-relevant information security KPI reporting
- Planned and conducted awareness trainings for employees, administrators, and management
- Installed regular joint forums with Quality and IT lead
- Set up regular joint forums with external DPO
- Prepared and conducted KRITIS/NIS-2 relevance assessment for the enterprise
Interim CISO (Germany, Hungary, Spain), Auditor, Deputy DPO
Framatome GmbH
- Responsible for information security across the company and its subsidiaries in close cooperation with global and regional CISOs
- Conducted BIA/BCM assessment to implement risk mitigation measures and process optimization
- Developed awareness and phishing campaigns in Germany, Hungary, and Spain
- Drafted security guidelines and processes for data carrier destruction
- Reported information security status to the SMC and the Cybersecurity Steering Committee
- Created and reviewed ISMS interface documentation and all other relevant documents
- Enhanced crisis management process and documentation
- Improved identity and access management process
- Created budget forecasts for upcoming information security investments (technology, staffing, trainings)
- Set up regular joint forums with risk manager and IT lead
- Improved asset classification and asset management
- Drafted cyber resilience strategy and roadmap
- Aligned local strategy with global cybersecurity strategy
- Improved risk management and reporting process
- Set up SIEM/SOC and incident reporting
- Conducted supplier audits
- Developed and released cyber resilience guidelines
- Drafted internal guidelines for handling VS-NfD information
- Improved vulnerability scanning and penetration testing
- Improved network segmentation for IT/OT
- Reviewed and reworked roles and responsibilities
- Sketched audit plan for service providers
Consultant Supply Chain Resilience Strategy
Siemens AG
- Reviewed Charter of Trust CP documents regarding cybersecurity measures for customers and suppliers
- Collaborated with legal department on new and updated information security clauses
- Performed protection requirement analysis for contractual cybersecurity measures
- Conducted service provider audits (GDPR, processes, cybersecurity) and risk assessments
- Developed measures and contractual clauses to improve cybersecurity in the supply chain
Deputy Project Manager and Topic Lead, Risk and Efficiency Assessment of the Global Certificate Management Infrastructure
Munich Re
- Assessed risk and efficiency of the global certificate management lifecycle infrastructure
- Conducted protection requirements analysis according to ISO 27001:2013 and BSI standards
- Aligned infrastructure with ISMS requirements
- Redesigned resilience measures for the global certificate management process
- Designed network segmentation for the new PKI
- Optimized, centralized, and standardized global certificate management processes as sub-project manager
- Trained external service provider
Industry Experience
See where this freelancer has spent most of their professional time.
Experienced in Pharmaceutical, Manufacturing, Energy, and Insurance.
Business Area Experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Audit, Legal, Supply Chain Management, and Project Management.
Skills
- Interim Management
- Leadership
- Management Reporting
- Iso/iec 27001
- Nis-2 / Cer
- Bsi / Kritis
- Ai
- Risk Management
- Audit
- Gdpr
- Isms
- Itil & Itsm
- Management
- Awareness Trainings
Languages
Education
Power plant electrician
Certifications & licenses
CISM
Statistics
Experience
Expertise
Qualifications
Profile
Frequently asked questions
Do you have questions? Here you can find further information.
Where is Volker based?
What languages does Volker speak?
How many years of experience does Volker have?
What roles would Volker be best suited for?
What is Volker's latest experience?
What companies has Volker worked for in recent years?
Which industries is Volker most experienced in?
Which business areas is Volker most experienced in?
Which industries has Volker worked in recently?
Which business areas has Volker worked in recently?
What is Volker's education?
Does Volker have any certificates?
What is the availability of Volker?
What is the rate of Volker?
How to hire Volker?
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
Similar Freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Interim CISO (Germany, Austria, US, APAC), Auditor
Nearby freelancers
Professionals working in or nearby Gröbenzell, Germany
Most recent projects
FRATCH works with many companies and recruitment agencies. Here you will find our recently posted projects and opportunities.
