CSS Expert in Hamburg

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

• Designed and moderated a NIS2 preparation workshop for RAS Reinhardt Maschinenbau GmbH and its IT service provider Catuno GmbH. Together with executive management and IT leadership, the current status was assessed, an initial GAP analysis was conducted and areas for action were prioritized based on ISO 27001.
• Developed an ISO-27001-based regulatory framework (ISMS) for NIS2 compliance, including a structured current/target GAP analysis, targeted improvement of the security maturity level and preparation of the organization for NIS2 audit readiness.

Co-founded a software agency building custom web and cross-platform products. I owned the technical decisions across the whole portfolio and led 12 people, while carrying delivery planning, process and client relationships for 11 clients across 3 industries.

• Technical leadership: owned the technical decisions for the codebase across every project — stack, architecture, code conventions and the tooling the team worked with — and led the developers on how work got built through code reviews, pair programming and mentoring across a team ranging from junior to senior, keeping the codebase coherent as the portfolio and the team grew

• Delivery planning against the financial plan: built the company's financial plan and derived from it the billable hours each developer had to reach per month and the hours each project could absorb to stay within budget; planned capacity and scope against those figures and negotiated budgets and delivery dates directly with clients

• Client ownership: technical contact across the portfolio — requirements gathering and prioritisation, scoping and estimates, timeline communication, budget negotiation, and consistent transparency throughout delivery

• Team and people: owned the hiring and interview process end to end and took responsibility for offboarding where it was needed; designed an onboarding that got new developers productive within 1–2 days; cleared blockers daily and kept a close eye on where effort was creating value and where it was not

• Process ownership: consolidated a micro-service landscape spread over 15+ repositories into a single monorepo, cutting backend development time by ~40% and simplifying releases for 6 engineers; set up deployment pipelines with GitHub Actions and GitLab CI; ran retrospectives and turned the feedback into concrete changes; introduced AI agents into day-to-day development

• Delivered short-staffed: when the team shrank from 8 developers to 2, restructured scope, introduced AI-assisted development to hold the schedule and took on Go backend work alongside my own frontend scope

• Architecture and code: defined the architecture for every project in the portfolio — the structure the rest of the team built within — and wrote roughly 90% of the frontend code myself, from SSR applications with Next.js and Remix to cross-platform apps with Capacitor

• From zero to production: took a practice management platform — administration, inventory, integrated online shop, chat messenger — from an empty repository to production. Live in 7 markets with at least 7 more coming up, serving tens of thousands of users

• Delivery under pressure: built and shipped a replacement online shop for a Fortune 250 client in 4 days, restoring order intake while their global shops had been offline for several weeks

• Design system: built a cross-project design system used across 7 products, so new projects and features started from a shared, consistent base

• Cross-platform and real-time: built iOS and Android apps with Capacitor for a client live event with 1,000+ participants — web sockets and push notifications for real-time content, Stripe payments supporting PayPal, Apple Pay, Google Pay and cards

Key technologies: React, TypeScript, Next.js, Remix, GraphQL, ConnectRPC, Redux, Zustand, Go, Node.js, Turborepo, Nx, Capacitor, Ionic, WebSockets, Stripe, PostgreSQL, Playwright, Cypress, Vitest, Storybook, GitHub Actions, GitLab CI, Claude Code, Cursor, GitHub Copilot

Technologies: n8n, Notion, OpenAI API, Claude, MS AI Foundry, MS CoPilot Studio, MS CoPilot, LLM, Node.js, Vercel, LangGraph, PostgreSQL, pgEdge, pgvector, Docker, LangChain, Ollama, Open WebUI

• Continuous evaluation and prioritization of internal automation needs
• ~20 AI agents in active use: research, content pipelines, document processing
• 5 n8n workflows for automated data and process control
• Architecture built on the same principles as in customer projects: state management, event-driven orchestration, API integration
• Ongoing operation and further development

• Development of a web application for horse betting
• Conversion of the components to script syntax

• Industry: SaaS (Customer Success Management) – B2B

Comprehensive GEO implementation (Generative Engine Optimization) for a B2B CSM SaaS startup with a focus on AI Search Visibility and AI Citations in ChatGPT, Perplexity and Google AI Overviews – including a GEO workshop and a prioritized implementation roadmap.

• GEO Workshop & Roadmap: Conceptualized and delivered a GEO workshop (how LLMs work, AI Search Architecture, citation strategies); translated it into a prioritized implementation roadmap with impact/effort estimates
• Technical GEO Foundation: Robots.txt & llms.txt, Core Web Vitals & page speed, XML sitemaps for AI crawlers
• Schema & Structured Data: Gap analysis, implementation of Product/Service, FAQ, Article, Author and Organization schema, validation of coverage
• Content Architecture & GEO: Flat content architecture, topic clusters (pillar-and-spoke), 200–300 word chunks and answer-first content structure, E-E-A-T rollout through author pages
• Query Fan-Out & Prompt Anticipation: User prompt mapping, query fan-out, content gap analysis based on prompt coverage
• Citation & Backlink Strategy: AI citation analysis (news, Reddit, Wikipedia, listicles) and development of outreach and backlink strategies

Tools & technologies: Otterly.AI, PeecAI, Qforia (iPullRank), Schema Markup Validator, OpenAI Tokenizer, Prompt Coverage Monitor, ChatGPT, Perplexity AI, Semrush, Ahrefs, Framer CMS

• Technical management/setups including TikTok Shop, Merchant Center, Meta Shopping
• Strategic & operational campaign management (Meta, Google, TikTok)
• Creative development

• Environment: AWS, Ruby on Rails, GraphQL, React Native
• Penetration test for Backend, Android-App and iOS-App

• Development and further development of e-invoicing solutions, interfaces for invoice processing, and implementation of regulatory requirements

Technology & methods: XRechnung, ZUGFeRD, EN 16931, XML, API integration, backend development, cloud services, automation, compliance, AI-supported document analysis

• Several projects in a police context
• Model and document police procedures/projects with Archimate (as-is/to-be) in the context of P20 (BKA)
• Create software architectures with microservices
• POC development with Springboot/Docker/Kubernetes
• Project size: 10 people
• Enterprise architecture management with Togaf and Archimate
• Backend software development Springboot
• DevOps with Kubernetes
• Implemented using: Java 17/21, Springboot 3, P20 architecture, Togaf, Archimate

• Planning, management and monitoring of the Corporate Responsibility Tech Enablement project for IT
• Design and implementation of the EUDR (EU Deforestation Regulation)
• Design and implementation of the Eco-Design Regulation
• Continuation of projects as part of the Corporate Responsibility strategy
• Definition and review of requirements (e.g. governance, success metrics) and, where necessary, analysis and resolution of problems
• Overall management, marketing, communication and quality assurance of the projects
• Creation of the project plan including timeline/roadmap, budget and resources
• Ensuring compliance with budget and deadlines
• Defining project management guidelines, methods and priorities
• Planning and tracking resources & efforts, also in cooperation with other IT departments
• Evaluation of projects and preparation of results (reporting to management)
• Identification and reduction of risks
• Regular communication with stakeholders
• Management of internal and external stakeholders and service providers (Jira, Confluence, backlog management, task tracking, Sharepoint, MS 365 Platform etc.)
• Development of standards and automation of processes
• Technical design and documentation of the Digital Product Passport
• Selection and evaluation of potential software providers
• Training and workshops on Osapiens

Label: Azure Cloud, Jira, Confluence, Power BI, SAP BW, AWS, Miro, Bee360, Draw.io, Sharepoint, MS 365 Platform, Trello, Osapiens, Naravero etc.

• Data-analysis, Preparation, gathering and coordination of business requirements for retrieval of monthly- and long term (CLV – relevant) cost- and revenue-components per contract for a customer–base–grouping project (HUB–Project) for B2C-Postpaid-Controlling
• Concept and Implementation of cost- and revenue-KPIs calculation and corresponding CLV–reports (Oracle, Perl, SVN, MS SQL Server, MS Power BI, Serviceware Performance Analytics)
• Operational support of the HUB-Project – various ad-hoc reports, deployments, job-scheduling etc. (Oracle, SVN, BICSuite–Scheduler, DWSODA etc.)
• Analysis, implementation, retrieval and reporting of various physical and financial KPIs for B2P-Prepaid Business on an existing data-mart (Oracle, Perl)

• Platform: Web.
• Technologies: HTML5, CSS, TypeScript.
• Programming.
• Various updates.

• Translated technical style guides for corporate branding (Porsche, BMW, Health AG)
• Collaborated with copywriting teams on pitch development
• Recorded professional voice-overs for corporate branding videos