Cybersecurity Experts in Nuremberg

• The goal of the project is to build a Greenfield FailSafe data center (FSRZ) as an emergency measure in accordance with BSI 200/4 against a cyberattack.
• Recovery of a project that had been running for several years. Re-initialization of the project: adjustment of the project organization, initiation of regular meetings, establishment of project controlling and project reporting, introduction of project risk management and consolidation of project documentation. Establishment of project governance and introduction of decision-making structures based on decision papers. Definition of deliverables and derivation of phase plans and the project plan. Personnel and resource planning. Coordination with “neighboring projects”, initiation of concept development and implementation. Management of the project with 8 subprojects and PMO. Budget planning and controlling (14,8 Mio). Support and coaching of the subprojects in their methodological approach. Coordination with suppliers and support of EU tenders. Coordination and processing of change requests. Coordination with line management regarding the economically viable operation of the FSRZ. Technical support for IT architecture in the areas of zOS, Windows and Linux, networking and IT security, for designing interim operations and extended regular operations for the FSRZ, planning emergency processes and emergency communication internally and externally.

• Introduction of Agile-CCPM in an IT project agency with a focus on PHP-based content management systems.
• Preparation and facilitation of workshops to establish a cross-agency multi-project management system.
• Coordination and support of the agency partners.
• Coaching of the methodological framework.
• Collection, evaluation, and use of organizational metrics to plan next steps.
• Environment: OKR, CCPM, Agile Coaching, Agile Planning, Agile Metrics, Workshops, Facilitation, Change Management, JIRA, Zoom, Slack, Miro.

• Consolidation
• Mergers
• Law firm chart of accounts / cost centers
• Preparation of annual financial statements
• Digital process development and optimization of the accounting/closing and reporting area
• Optimization of the DATEV software environment

• Development of strategies, processes and system requirements to further develop the lead and campaign streams of a Salesforce system for the subsystems Sales Cloud, Marketing Cloud and Analytics Cloud
• Gathering and creation of marketing strategy concepts for direct sales, focusing on lead generation for new and existing customers
• Analysis and optimization of existing and new contact points
• Derivation of system requirements and user tests for new developments
• Establishment of a requirements and implementation process for business needs at the interface between CRM strategy and marketing system operations
• Facilitation of ideation workshops with the project's stakeholders
• Mediation between business and technical project stakeholders
• Analysis and post-documentation of existing marketing strategies and the system functions already created for them
• Analysis of target groups and pre-system data quality as a foundation for new CRM strategies
• Consultation on content and asset strategy for marketing campaigns
• Definition of KPIs and other performance criteria for the system and CRM strategy

• Tribe Home, Product Area 4 - Customer in Life, Squad Cybertron.
• Analysis, design, development, and testing of new requirements for Optimmo, construction financing software.
• Analysis, design, development, and testing of the JEE application MWS kredit-baufi.
• Analysis, design, development, and testing of the Wicket Optimmo application.
• Analysis, design, development, and testing of kredit-baufi batch programs.
• Migration of kredit-baufi batches to RHEL9.
• CiL SCS Consumer Pacts with Finagle.
• CiL ScS Touch Point Architecture Integration.
• Team size: 10.
• Tools / Frameworks: OpenJDK Java 17, Kotlin 1.6.0, Azure, Jenkins, Stash, JEE, Gitlab, JIRA, Confluence, git, Spring 6.0, Sping Cloud, Spring Data, Hibernate, JPA, JMS, Kafka, Oracle, PL/SQL, Red Hat Enterprise Linux (RHEL), Maven, REST, JBoss, Intellij IDEA, Wicket 9 and 10, Istio.

Developed a GRC guideline for project management in the rollout area.

• Rollout and new installations (HW, SW, OS, networking)
• Peripherals support / remote support
• Planning and execution of system upgrades/updates
• Documenting issues and their solutions
• System administration as well as support and troubleshooting of operating systems (Linux, Windows)
• Monitoring and maintenance of LAN/WLAN
• Organizing automated backups of critical data
• Network support for VoIP/IP telephony infrastructure (QoS, VLANs, SIP)
• Selecting and installing antivirus applications on all computers and servers
• Setting up a firewall on the main router/gateway to filter unwanted traffic
• Conducting vulnerability analyses and vulnerability assessments
• Installing, updating and configuring databases and ERP/accounting software, and organizing shared use
• Support during deployment, configuration and troubleshooting of CRM systems
• Setup, updates and support of office suites (Microsoft Office, LibreOffice) and industry-specific software for financial and tax reporting
• Technical coordination with hosting providers and web developers and CMS updates (WordPress, Typo3)
• Ensuring website availability and security

• Quality assurance of information security documentation
• Advising and coaching departments in creating information security documentation
• Analysis and documentation of information security for various basic services
• Maintaining data in the ISMS
• Identifying vulnerabilities
• Coordinating and tracking vulnerability remediation
• Clarifying data protection questions
• Data protection impact assessment
• Conducting internal IT security audits (review)
• Supporting audit preparation (maturity audit, BSI/ISO 27001 audit, KRITIS audit)

• Incident management
• User management and setting up user accounts
• IT security and network technology
• Installation and configuration of software
• Support via email, phone, and ticket system for problems and inquiries

• Advanced applied cybersecurity training focused on offensive and defensive operations.
• Designed and executed multi-vector penetration campaigns, including enumeration, privilege escalation, and lateral movement simulations across hybrid networks.
• Implemented SOC automation pipelines for incident response using Python, Bash, and SIEM integration.
• Conducted digital forensics and threat intelligence operations (malware reverse analysis, PCAP correlation, IDS/IPS rule engineering).
• Specialized in adaptive adversary emulation, Blue-Team countermeasures, and MITRE ATT&CK–based detection strategy.

• Founded and lead a consulting firm specializing in ISO 27001 and integrated management systems, advising organizations on certification readiness, governance frameworks and compliance structures.
• Support technology companies in implementing ISO-based management systems and risk management frameworks to strengthen information security and regulatory compliance.

• Leading a global team for quality assurance and compliance in cloud services