ANT+ Experts in Germany

• Launch of a new digital product in the Chinese market as part of a global growth strategy.

• Contact point and coordinating interface between central product management, local Chinese teams, and international stakeholders.

• Steering the full program management for the coordination of complex digital projects.

• Successful market launch of a digital product in China (including successful certification for the Chinese market).

• Balancing local needs with global priorities while taking tax and regulatory requirements into account.

• Introducing a new way of working to improve collaboration and management across locations.

• Developing and implementing a scaling strategy for the digital business model in China.

• Used Jira, Confluence, Miro, Scrum, Agile work, SAFe.

• Project language: English.

• Advise B2B technology and mid-market companies on commercial strategy, sales effectiveness, operating model design, and scalable growth.
• Coach senior sales leaders and executive teams on GTM choices, leadership effectiveness, accountability, and execution.
• Support market entry and growth planning through structured assessment of customer segments, value propositions, channel options, coverage models, investment priorities, KPIs, and risks.
• Facilitate peer-level strategy sparring and translate strategic decisions into measurable commercial initiatives.
• Combine systemic coaching, sales leadership experience, and change management practice to ensure decisions are practical and adopted.

• Development of an agent-based governance platform for the automated assurance of EU AI Act compliance and ODA-compliant orchestration of AI services in complex enterprise environments.

• Design and implementation of an agent-based "Mission Control" framework (Aletheia Conductor) for autonomous state monitoring and process control.

• Development of "Compliance-as-Code" (CaC) solutions based on OPA/Rego for system-wide enforcement of regulatory guardrails.

• Integration of TM Forum ODA standards (TMF630, TMF622, TMF642) to ensure interoperability and standardization.

• Building a highly available event-driven architecture using Redpanda and CloudEvents v1.0 for near-real-time event processing.

• Implementation of an audit-proof "Evidence Chain" through cryptographic linking of trace logs in preparation for automated audits.

• Tech Stack: Java 21 (Quarkus Native), TypeScript (Next.js), Redpanda (Kafka API), CloudEvents v1.0, OPA (Open Policy Agent) & Rego, TimescaleDB, ZincSearch, Redis, TM Forum ODA, Git, GitHub, Clean Code Development, Like-C4.

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

• Strategic and operational leadership of the technical service organization
• Improvement of all processes and workflows
• Development and introduction of a service management IT tool incl. AI database, customer app, and self-service portal

• AI product development: Design of an AI-supported GRC platform to automate compliance processes.
• AI expertise: Strategic deepening in Agentic AI and GenAI as a core asset for modern IT governance
• IT interim management and strategic consulting

Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.

• Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
• Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
• Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
• Transfer of the concepts into the M365 environments
• Creation of detailed technical documentation

In-house consulting provider and driver of transformation within the group, multi-stakeholder environment and C-level.

Realignment and stabilization of a cross-functional transformation and scaling program within the group. Sharpening the target picture, priorities, and set of measures, as well as building reliable governance, planning, and steering structures. Structuring roles, responsibilities, and strategic initiatives while including AI and IT automation ideas.

• Designed program realignment and project portfolio management

• Developed strategy model and target picture for IT projects

• Structured portfolio, roadmap, and priorities

• Established governance and regular meetings

• Worked out operating model for flagship projects

• Assessed AI and automation ideas

• Clarified roles and responsibilities

• Implemented change measures

• Developed, moderated, and evaluated workshops

• Transformed 17 initiatives into a steering model

• Increased transparency and decision-making ability

• Strengthened commitment in steering

• Sharpened the operating model structurally

• Integrated three top-5 institutes

• Involved over 80% of stakeholders

• Governance

• Portfolio steering (PPM)

• Change management

• Artificial intelligence

• Workflow automation

• AI use case assessment

• Confluence

• Jira

• Stakeholder management

• Transformation and global scaling (listed in the MDAX)
• Stabilization and professionalization of the ongoing value creation program
• Consistent challenging of the workstreams regarding content, target achievement, and progress, as well as realization of the defined value drivers
• Identification and removal of implementation blockers to ensure execution speed
• Reporting to the Executive Board and Supervisory Board

Stabilizing an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

• Building a scalable nearshore IT developer hub (Croatia, Czech Republic, Poland) as an independent company using a BOT model (Build – Operate – Transfer)
• Identifying, selecting, and managing full-service agencies; introducing governance and control mechanisms including KPIs, SLAs, and regular service reviews
• Creating and reviewing data processing agreements and framework contracts in coordination with Legal & Compliance; integrating regulatory requirements (including KRITIS) into process design
• Advising on cloud-vs.-on-premise strategies, data storage, and authorization concepts; supporting procurement with tendering and vendor evaluations
• Change management and process harmonization between internal teams and nearshore partners; reporting to management board, CFO, and CIO

Result: Scalable IT developer hub with an audit-proof governance model, lower operating costs, and faster product development.

• Creation of detailed concepts for all relevant GTS modules (compliance, pricing, customs clearance, Intrastat, preferences)
• Planning and conducting workshops, including scheduling and documentation
• Development and consulting of the organisational structure and its master data
• Setup and customisation of compliance functions: sanctions list review, embargo, legal control, US re-export
• Uploading and maintaining sanction and commodity lists
• Implementation and validation of integration tests
• Setup and customisation of the modules: pricing (including uploading of customs tariff numbers and STAWN data), customs clearance (including application for test operation with customs), Intrastat and preferences (including preference calculation and LLEs)
• Development and presentation of prototypes
• Derivation of insights for the final concept