Customer Relationship Management Experts in Stuttgart

• Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.

• Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.

• Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.

• Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.

• Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.

• Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.

• Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.

• Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.

• Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.

• Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.

• Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.

• Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.

• Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.

• Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.

• Result: >99.5% uptime over 20+ years and zero compromises.

• Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.

• Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.

• Managing the operational back office
• Handling quotations and invoicing
• Supporting preparatory accounting
• Coordinating appointments and operational alignments
• Interface management between management, clients, and external partners
• Structuring administrative processes in day-to-day business

By taking over operational back office tasks, management is noticeably relieved. Administrative processes run in a more structured, reliable, and efficient way, creating more time for clients, projects, and entrepreneurial decisions.

• Go-to-market and campaigns for SAP-related software solutions from positioning to execution.
• Buyer’s guides and sales tools,
• DACH and UK including tracking and attribution,
• Selection and management of the performance agency,
• Content concept for the DSAG Annual Congress trade fair booth,
• quality assurance of SAP-related content.
• Evaluation of two marketing platforms as a decision basis for management, implementation in HubSpot.

• Premium car manufacturer: rollout manager / project manager in charge of steering and coordinating several markets as part of a group-wide and brand-overarching program for the global Salesforce CRM implementation (Ingolstadt)

• Account management for existing and new customers
• Planning and coordination of client projects
• Stakeholder management with health insurance companies and associations

• Design, planning, and test case analysis
• Integration testing
• Coordination of UAT in the lab and on site
• Creation of HW and SW test catalogs
• Communication of test results from REST services with the SAP team
• Support for branches in the EU until rollout
• Coordination of defect management and SW updates with the involved vendors
• Checking the configuration of the charging stations in the backend software for different countries
• Continuous reporting of the quality status to project management
• Documentation of the user manual in English and German
• Tools: Confluence, be.Energised, OCPP Postman, OPI, CCV (payone.elavon), Excel, it4you

• Consulting, design, analysis, software architecture and development
• Designing, developing, and implementing a Pimcore environment and connecting multiple external API systems in a Kubernetes environment, as well as various PIM and ERP systems
• Technologies: Unix environment, design, Symfony development, PHP 8+, software architecture, MySQL/SQL, shell scripting, Git DevOps tasks, AI coding support, Pimcore 12, Shopware 6
• Team size: >10 people

• Designing the migration strategy for WLS applications to the BKA cloud and Stack IT

• Creating a hybrid cloud for internal testing and development with Kubernetes

• Transforming the IT landscape from a legacy monolithic architecture to a cloud-based architecture

• Integrating new CI/CD processes using Azure Pipelines

• Quadrupled the throughput of personnel security checks

• Migrated personnel security clearance applications to Docker-based applications

• Built CI/deploy pipelines with Azure DevOps

• Environment: Java Spring Boot, Kubernetes, Oracle WebLogic, OpenID, Camunda, JUnit, TOGAF

• Development of comprehensive services in cybersecurity, IT governance, and AI
• Building and delivering strategic security solutions such as vCISO service, ISMS, SOC-as-a-Service (SIEM, SOAR, use cases, playbooks, threat hunting, incident response), AI-driven risk and compliance tools, and frameworks for outsourcing and third-party risks
• Supporting companies in meeting regulatory requirements and certifications (ISMS, NIS-2, DORA, CRA, KRITIS, ISO 27001, TISAX, BSI IT Baseline Protection, EU AI Act)
• Promoting innovations in cybersecurity automation, AI governance, and secure digital transformation
• Responsible for company growth, client relations, and strategic partnerships

• Advising companies and institutions in the areas of customer service, customer experience, customer centricity, user journeys, CRM strategy, operations, digital banking, payments, and energy
• Selection and implementation of CRM systems
• Selection and implementation of billing/ERP systems
• Selection and implementation of omnichannel systems
• Selection and implementation of knowledge management systems
• Interim manager (COO, CCSO)
• Project management for CRM and IT projects as well as software rollouts
• Incident management (leading task forces)

• Consulting services for Enterprise Service Management (Strategic Planning, Requirement Analysis, Tool evaluation process, implementation)
• Project management for ITSM tool implementations (Cloud, On-Premise)
• Optimization and maintenance of Ivanti Service Manager installations (User acceptance, efficiency, workflow configuration, CDMB structure, process automation, non-IT areas, roadmap planning, release upgrades)
• Presales support for Ivanti Service Manager (Product demonstrations, Proof of Concepts/POC, technical concepts)

• Responsible for the modernization of central IT processes and the stabilization of operations in an international environment.

• As program manager, designed and implemented the ServiceNow consolidation program for the Vans division (OnePlatform Strategy).

• Led the migration of three legacy systems across 12 plants to a unified SaaS ServiceNow platform; coordinated a matrix organization with over 150 stakeholders including product owners; managed budget and timelines (program volume: €18M); adjusted operating models and accelerated delivery processes.

• Led Virtual Competence Team Processes (VCT): moderated workshops, introduced process rules and trained local teams.

• Managed risk and audit tasks: identified and analyzed corporate risks; planned and conducted internal audits; coordinated with Legal and Security.

• Coordinated external service providers and contingent workers; reviewed contracts and service agreements.

• Established a Major Incident & Crisis Management Framework for 12 plants; introduced clear escalation paths and reporting processes.

• Planned and managed capacity to support product rollouts; coordinated with engineering, procurement and colocation partners.

• Contributed to KWG/BaFin-relevant measures and projects for Mercedes-Benz Bank; addressed new requirements for core banking systems and security controls.

• Directly led up to 12 technicians; functionally coordinated matrix teams of up to 50 participants; managed external service providers across multiple contracts.

• Communication, coordination, and validation of the roadmap for each stakeholder
• Coordination and recording of relevant and necessary user stories
• Creation of necessary user stories and market-specific must-haves
• Creation and specification of implementable user stories in the backlog
• Refinement of user stories with the development and test team
• Monitoring of the entire development of the user stories
• Acceptance of the content of the user stories
• Go-live and startup support