Cybersecurity Experts in Hamburg

Providing executive marketing leadership for multiple clients across scaling B2B technology and B2C consumer brands. Driving growth through strategic marketing leadership, owning positioning, brand and go-to-market execution while building AI-enabled operating systems and company-specific frameworks that make teams faster, preserve institutional knowledge, and scale more effectively. Leading a full repositioning for B2B cybersecurity SaaS client, rebuilt the messaging architecture, ICPs, buying groups and defined a new go-to-market strategy spanning marketing and sales, including the go-to-market brand and market-facing presence

• Implementing AI-enabled knowledge and operational systems that improve execution, cross-functional alignment, and institutional knowledge retention

• Consolidating multiple separate brands for a B2C client into a single umbrella brand, with a new go-to-market strategy and operating setup behind it

• Brand modernization and digital growth strategy for a premium consumer brand, redesigning the brand architecture, customer journey, and e-commerce experience

• Establishing scalable content, marketing, and operating systems to support long-term growth and more effective execution

• Complete overhaul of the ISMS according to ISO 27001
• Conducted a comprehensive gap analysis
• Reduced ISMS documentation by 30% through consolidation and process optimization
• Introduced a full PDCA cycle for continuous improvement
• Established the ISMS within the company
• Implemented the necessary processes
• Managed and conducted internal and external audits
• Developed and implemented a company-wide risk management system
• Deployed an ISMS tool including process design and training
• KRITIS compliance: Prepared and provided required evidence, liaised with regulatory authorities, planned, documented, and implemented an attack detection system (SIEM), co-led the BCMS/ITSCM implementation subproject
• NIS-2 implementation: Gap analysis, risk assessments, training for executives and staff
• Led a cybersecurity team of 3 members
• Conducted various internal and external audits, managed providers, introduced continuous improvement
• Project consulting: closely coordinated with business and system owners, launched an online shop, a mobile app, and a customer portal
• Redesigned the security architecture, reducing administrative efforts by 20%
• Implemented ITIL processes (e.g., change management)
• Revised service agreements with internal and external providers
• Developed a security awareness strategy, ran social engineering tests, introduced and monitored phishing simulations, created various awareness materials, gave presentations
• Managed a budget of one million euros

• Disciplinary and professional leadership of the IT and service team
• Definition and documentation of the Current Mode of Operation (CMO) in Confluence: application landscape, infrastructure, networks, backup & storage
• Development of the Future Mode of Operation (FMO) including process analysis & stakeholder interviews with all departments using BPMN and flowcharts
• Optimization of license management: reduction of ongoing software costs by approx. 17% p.a.
• Introduction and establishment of Jira as the central tool for project and service management
• Introduction and rollout of the HR software MindKey to digitize HR processes
• Introduction of a VoIP solution with Microsoft Teams incl. PSTN connection to replace classic telephony
• Introduction of the production and planning software OptiControl to digitize operational processes
• Rollout of Intune as a Mobile Device Management solution for Windows, iOS and Android
• Build-up of Power BI dashboards for machine park monitoring and financial reporting
• Planning and execution of the IT consolidation of two locations for 170 users
• Introduction of automated penetration testing with Pentera
• Coaching and mentoring the team in agile methods & project management
• Operational support in day-to-day business: administration, incident & change management
• Management of external service providers and assurance of the quality of outsourced IT services
• Responsibility for the IT budget incl. planning and controlling
• Direct reporting line to management with regular management reports on IT KPIs, budget and project status

• Privacy by Design and by Default
• Working with OneTrust: creating and managing records for requesters
• Interface role: mediation and communication between the DPO and the specialist departments, including clarifying data protection questions
• Handling data protection incidents: analysis, documentation, and coordination of measures
• General advice on data protection topics: support with data protection-related questions
• Process optimization: identifying room for improvement in processes and implementing changes
• Documentation & reporting: creating reports on data protection incidents or general data protection topics for the DPO and weekly reports for the line manager for presentation in the performance board
• Risk assessment & compliance: support in assessing data protection risks in new projects or processes
• Distribution and independent handling of email requests or requests from the DPO: all incoming tickets are divided among team members, with no specialization in the tasks. Tickets are created and tracked in Jira.

Approach/Methods:

• Stakeholder management
• Communication at C-level
• Timeline and implementation plan

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Enterprise and IT strategy
• Digital transformation
• Process and portfolio management
• Interim IT management

Consulting on compliance and data protection topics in the telecommunications environment.

• Performed security assessments and penetration testing on Microsoft AI models for text, image, and video generation.
• Conducted prompt injection attacks through diverse input vectors, including crafted text, steganographic images, and manipulated visual elements (e.g., varying opacity and embedded content).

• Accompanied ad-hoc internal and external communication after cyber attack during containment phase
• Dialogued with employees, authorities (BSI), customers and suppliers
• Created communication plan and cybersecurity plan

• Managed the end-to-end product lifecycle for Complete Powertrain Products, Eimsbütteler Chaussee, Hamburg, from the Concept Study Gate to market launch.
• Provided key insights during feasibility studies that influenced a client to accelerate their platform change, moving a 2030 project to the present. This led to 15% increase in product offerings, a 40% boost in sales, and generating over €25 million in profits.
• Defined and governed feature requirements, translating business and regulatory needs into system-level deliverables across combustion, EATS, E&E, software, and vehicle integration teams.
• Served as contractual and technical gatekeeper in alliance projects, ensuring controlled information flow, protecting sensitive IP, and formalising SOW.
• Approved deviations and managed QDCF trade-offs to maintain delivery targets without compromising compliance or quality.

• Developing the concept for a cyber security awareness campaign for end customers
• Supporting the implementation of the international campaign
• Planning the roll-out

• Goal: Further development of existing data distribution from start to finish, from development partners to dealers and remote into vehicles. Designing and implementing the future data distribution in a globally distributed cloud
• Budget/Scope: Undisclosed (approx. 47 external FTE)
• Result: The project is running and is on time, within scope, and on budget.
• Responsibility: As part of the management team, leading the planning and execution of project management tasks; scope and time management (from mind map to network diagram to project plan); interface to the corporate finance department, personnel recruitment, securing budgets (e.g., from vehicle line management, production, IT budgets, etc.); demand management.

• Directed a 110-strong global team including data scientists, product managers, sales, operations, and developers
• Led investment and strategic reviews of scale-up ventures to drive profitability
• Developed and implemented portfolio strategy focused on IoT, AI, API platforms, and software products
• Restructured portfolio, eliminating unprofitable products and reallocating 70% of investments and resources to AI and platform development
• Delivered Vodafone’s first internal GenAI projects, enhancing sales and marketing efficiency
• Streamlined innovation strategy, reducing initiatives by 80% to focus on AI product enhancements and network APIs

• Responsible for configuring, maintaining, monitoring, troubleshooting, and optimizing the IT infrastructure, including Extreme Networks, SD-WAN, and Fortinet security solutions, at all international company locations in Europe and North America
• Developed a comprehensive strategic roadmap to optimize network architecture, including VLANs, NAC, QoS, firewall configurations, VPNs, DPI, NGFW, threat intelligence, and SSL/TLS inspection
• Implemented the OneIT strategy by introducing new technologies such as Cisco DNA Center, ExtremeCloud IQ, FortiOS, FortiManager, and FortiAnalyzer, boosting staff expertise and IT system efficiency
• Integrated IT and OT systems to optimize network and security architecture and improve operational efficiency