IT Consultants in Frankfurt

• Design and global rollout of sensitivity labels (confidentiality labels) for automated classification and encryption of business-critical data.
• Definition and rollout of Data Loss Prevention (DLP) policies to protect IP and personal data across endpoints, Exchange, SharePoint, Teams, and non-Microsoft clouds.
• Setup of Insider Risk Management policies to detect and contain excessive data leaks and risky user behavior.
• Implementation of GDPR and retention requirements through automated retention policies and structured records management.
• Technical support for legal teams in internal and external investigations using eDiscovery (Standard/Premium) and Content Search.
• Continuous improvement of the security and compliance level by reviewing the Microsoft Compliance Manager and closing gaps (regulations such as ISO 27001, NIS-2)

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Working as a freelance ICT journalist for print and online media, as well as a communications consultant for medium-sized German and Dutch IT companies.
• Creating specialist publications, white papers, and journalistic articles on topics such as AI, IT sustainability, climate protection through low-code development, and the introduction of the electronic invoice, etc. (>100 work samples in the original can be viewed at [link])
• Analyzing and reporting on cybersecurity trends, including the NIS-2 directive, Security by Design, and the development of associative computers.
• Conducting expert interviews with specialists and executives on technological innovations such as digital shadows in production and predictive maintenance.
• Numerous publications in trade media such as Wirtschaftsinformatik & Management, IM+io, IT&Production, Digital Business Magazin, eGovernment Computing, etc.

Technical and commercial risk assessment for an investment project in the hardware sector (scaling potential, liability risks, operational processes) Process consulting for two SMEs in the engineering environment, focusing on workflow digitization, PLM

Further development & digitalization of key sales and application processes in a regulated banking environment, including requirements structuring, roadmap work, and AI-supported use case evaluation

Responsibilities & impact:

• Support of existing digital products in the sense of stable operations (keep the lights on) amid growing regulatory complexity
• Product vision and derivation of a consistent, feasible roadmap
• Identification, structuring, and evaluation of AI-supported use cases at the interface of business, IT, and the regulatory environment
• Analysis, structuring, and translation of complex business requirements into epics and user stories
• Moderation of team, stakeholder, and alignment formats to ensure clarity of goals, collaboration, and decision-making
• Maintenance of transparent structures and documentation (LeanIX, application profiles, runbooks)

Contribution to results:

Stabilization and further development of key financial processes under high regulatory and technical complexity. Improved transparency, decision-making, and implementability through structured requirements, reviewable documentation, and AI-supported ways of working.

• Provided consulting for modernizing legacy applications
• Delivered critical features under tight deadlines for backend and frontend
• Technologies: C#, .NET, WPF, WCF, REST, Angular, MS SQL Server

• As a producer, I bring emotions to the screen and showcase your company in an unparalleled way.
• With my creative eye and technical know-how, I make your vision shine.
• Show the world who you are and what you have to offer.
• Let your audience dive into the captivating story your brand tells.
• Turn prospects into customers and boost your success.

• Project manager controlling the update to ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022) including gap analysis, project planning, preparation of internal and external audits, and creation and maintenance of required documentation.
• Coordination of adjusting existing measures and implementing new measures according to the new standard’s requirements, as well as continuous monitoring and adjustment of these measures.
• Regular reporting to management on progress and risks.
• Senior consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including resolving findings, creating and updating evidence documents, and amending provider contracts.
• Senior consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of over 1500 deliverables & obligations (D&O), setup of a D&O tracker (claim register), and joint expert review with service owners for various service descriptions (e.g. IT service management, workplace and print services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification, distribution).
• Senior consultant adjusting service scopes in existing service descriptions to enable end-to-end service responsibility of the provider, including identification and analysis of use cases, process analysis and optimization (incident, problem, change), as well as recording and documenting all software products in LeanIX and documenting the contract change.
• Focused services: managed software service, application and desktop service, workplace and print services, web server service, container service, M365, SAP/Oscare, output management systems (OMS), telephony and omnichannel management service.
• Project manager steering a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and client, review of benchmark results, and preparation and conduct of price negotiations with the IT provider.

Leading Jefferies’ DORA-driven operational resilience programme by strengthening ICT risk governance, control design, and regulatory readiness across key technology and outsourcing domains. Partnering with senior stakeholders to translate regulatory requirements into pragmatic governance, reporting, and assurance processes suitable for a global investment banking environment.

• Developed the Enterprise Register of Information (DORA Art. 28.3) to align with regulatory requirements.
• Defined and embedded ICT Risk Appetite and tolerance levels aligned to the Global Operational Risk Framework, strengthening decision-making and risk acceptance governance.
• Drove audit readiness by reviewing and re-drafting 50+ IT & Information Security policies, improving clarity, ownership, and control alignment.
• Oversaw the Operational Resilience Testing Programme (including penetration testing) and tracked remediation to closure, strengthening control assurance and reducing open findings.
• Aligned 10+ intra-group agreements with DORA regulatory standards.
• Enhanced executive-level decision-making with an enterprise ICT Risk Dashboard featuring KPIs/KRIs.

• Led the migration of local SharePoint sites to SharePoint Online, including planning, coordination, and communication
• Advised on governance, security, and data protection
• Created project documents: project charter, project plan, communication strategy plan, risk and risk mitigation plan, scope of work documents
• Analyzed manual processes and developed automated solutions

• Delivered multi-year, global consulting projects on strategy execution, digital transformation, and operating model optimisation for a DAX40 client.
• Acted as a key interface between business, technology, and delivery teams, coordinating the cloud migration of 57+ applications and ensuring controlled execution across regions.
• Structured complex problem statements, formulated hypotheses, and converted insights into clear strategic and operational recommendations.
• Facilitated workshops, developed executive-level presentations, and shared results with senior stakeholders and steering committees.
• Undertook initial leadership responsibilities, mentoring junior colleagues and contributing to knowledge sharing and internal offerings.
• Implemented structured project governance, tracking milestones, risks, and KPIs to ensure alignment with strategic objectives and timely delivery.
• Supported stakeholder decision-making through performance dashboards, progress reporting, and coordination across cross-functional teams.

• Linux server migrations: planning and execution of the migration with SLES Linux deployment of VMs in VMware 8.0
• Guiding colleagues on configuring Linux VMs with vSphere Auto Deploy
• Application operations: ensuring smooth operation of applications on migrated servers
• Operations manuals: revising existing manuals, updating and creating new ones as needed
• Reviewing service offers: adjusting and optimizing service offerings of external providers
• Logistics software, Red Hat Linux, Ansible, Confluence / Jira

• Implementation of business transaction layouts for the online banking UI in compliance with BITV (accessibility)
• Technologies: JavaScript, jQuery, LESS