Cybersecurity Experts in Dusseldorf

• Optimizing and accelera­tion of our Gitlab CI pipeline

• Conceptual work for the PoC of the Zero Trust system

• Extension of the policy-engine backend in Go

• Extension of the policy-testing mechanism in Python

• Architectural design of the PEP component of Zero Trust

• Documentation of the product

• Technologies: Zero Trust, Go, Python, Gitlab CI, Docker, JWT, Domain-Driven Design

• Responsible for infrastructure, operations, network and VoIP, security, quality assurance, as well as asset management and business continuity
• Planning and implementation of all requirements related to NIS 2.0
• Responsible for application development
• Company-wide implementation of SAP S/4Hana and leading development of new business processes, incl. cut-over planning
• Digital transformation and cultural transformation toward a "doer mentality"
• Realignment of infrastructure (hybrid)
• Restructuring of the organization with partial outsourcing
• Management of four direct reports with a total of 25 internal and external employees
• Budget responsibility of up to €25 million

Project: Concept and implementation of an AI product for four business use cases

Project management of an AI project at a leading provider of large-scale catering and food services, where a production-ready AI product for four use cases was implemented together with an external development partner: automated briefings from CRM and document data, voice-based capture and structuring of reports, detection and merging of duplicates in master data, and data-based market analysis. A central focus was a privacy-compliant architecture that passed the internal IT security review and enabled productive use.

• Translating business requirements into clearly defined AI use cases with a clear product scope and clear value proposition
• Selecting and evaluating models and architecture options for text extraction, speech-to-text and context enrichment from business systems, including LLM integration, function calling and retrieval
• Designing and enforcing an architecture with European hosting, data minimization and masking of personal data as a prerequisite for approval
• Managing the interfaces between business, IT, IT security and the external development partner under restrictive data access conditions
• Coordinating with CIO and executive management on data access, risk assessment and approval decisions
• Preparing the transition into productive use

• Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, vulnerability management policy, business resilience programme, risk governance plan
• Consolidation into an integrated emergency handbook (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table, and a formal approval structure
• Review of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with documented compensating control
• Review and documentation of NIS2 and HinSchG applicability, including the legal reasoning for non-applicability

• Further development and optimization of the PIM system (e.g. data modeling, interfaces, user experience)
• Analysis, structuring, and professional evaluation of business requirements in close coordination with business units and stakeholders
• Translating business requirements into functional and technical concepts (business & solution design)
• Designing and further developing the target PIM architecture including data models, object structures, versioning, and lifecycle concepts
• Defining interfaces, integration concepts, and data flows between PIM, eCommerce, ERP, and other systems
• Quality assurance in close collaboration with business units and the development team
• Effort estimations for analysis, design, and testing activities
• Agile, Scrum, 4APortal, SAP ERP, SAP eCommerce (Hybris)

• Architected and deployed a live B2B geocoding and demographic-data platform for Germany, combining address lookup with census-based population statistics through a web application and REST API.

As the only large integrated energy company in Germany, EnBW covers the entire value chain - from energy production through distribution to customers. It expands its renewable energy sources, advocates for a socially responsible coal exit, and drives key technologies like green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developed and implemented a holistic process view covering both technical and organizational aspects  Ensured end-to-end control of all IAM-related technical services  Established clear responsibilities and accountabilities within the IAM landscape  Collaborated with different departments to identify and optimize a holistic architecture and act as Single Point of Contact (SPoC) for Information Security  Introduced and monitored governance policies to ensure compliance and security  Continuously improved IAM processes and systems through regular audits and evaluations  Participated in external audits of the process as part of official ISO audits  Further developed the policy for setting administrative requirements and procedures and aligned it with administrative units  Conceptually advanced the KPI system to measure process quality

• Worked on FPGA enhanced network encryption device with secure boot, TPM2.0 and smart card integration for BSI approved usage with Post Quantum Cryptography
• Developed and audited Linux drivers
• Collaborated using GitLab, Gerrit, Confluence and Jira
• Technologies: C, C++, Secure Boot

• Founded technology consulting practice delivering business strategy & operations, digital transformation, and enterprise tech & innovation services to telecommunications, cybersecurity, and IT enterprise clients, leveraging 15+ years of Fortune 500 sector expertise
• Developing digital transformation and modernization strategies for legacy system optimization, cloud-native implementations, and operational process enhancement using proven PRINCE2 and agile methodologies
• Building consulting frameworks for project & product management, portfolio governance, and business coaching services while establishing initial client relationships in EMEA markets

• Digitalization of accounting, signature/approval, and onboarding processes
• Restructuring of the IT department
• Introduction of a digital sales tool
• Implementation of an AI webinar series
• Introduction and optimization of information security
• Administration and optimization of the MS Office 365 environment

• Executed post-carve-out stabilization, system consolidation and cybersecurity uplift. Re-assessed system landscape and assets and designed new IT strategy for future. Implemented new IT operating model focusing on product-centric organization and re-internalization of critical resources.
• Successfully designed new IT operating model of the company, based on massive reduction of external dependencies, insourcing of key positions and upskilling of employees.
• Massive reduction of IT cost in the first three years (-40m$), bringing IT spend level below Gartner industry benchmark (1.27%).
• Introduced new product-centric organization based on fusion teams between business and IT across the company.
• Administered implementation of corporate-wide IT/OT cybersecurity program with more than 60 projects.
• Continuous improvement of enterprise IT/OT cybersecurity maturity level with significant increase in the first two years (CMMI >3.5, C2M2 >2.5).
• Governed successful implementation of the business transformation program within IT area by overachieving the savings target by $8m.
• Initiated and created new cloud-based data management platform based on best-in-class technology.
• Implemented first company-wide Microsoft Copilot AI program based on various business cases, leveraging GenAI and AgenticAI.

• Processing entries in the Third Party Risk Management (TPRM) process
• Conducting clean-ups of existing business relationships
• Creating, processing, and documenting requests
• Reviewing entries from process participants based on existing files
• Collaborating with risk SMEs (Subject Matter Experts) and vendor contacts
• Working closely with procurement, information security, and data protection to align business requirements
• Implementing regulatory requirements (VAIT, DORA) and ensuring compliance and risk management

• Led workstream for analysis and optimisation of the solution development and release process within the newly established organizational structure
• Analyzed and adopted existing processes after transition of technical responsibility to E.ON Digital Services
• Supported the agile development approach within engineering teams
• Established a unified workflow for business requirements and clear communication interfaces, documented using Atlassian Jira on both the business and engineering sides
• Created dashboards with Rich Filters for Jira Dashboards to provide an overview of feature releases and their connection to technical releases
• Designed new burnup charts and statistics per release to improve transparency of overall technical progress at the product level

• Providing bespoke 1:1 and group negotiation coaching to participants of the ResultPlus TopPerformer Negotiation Master Class (including AI for better negotiations)