GDPR Experts in Essen

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

• Setting architectural standards for Informatica Power Center development teams
• Maintenance-performance-health for DWH (Exadata) environments
• Qlik Sense / BO reports architectural standards
• Implementing best practices in ETL tasks
• Documentation ETL standards on Confluence
• Dynamic Data Masking rules for GDPR/KVKK regulations by using Informatica DDM tool
• DWH Data model Power Designer
• Upgrade Qlik Sense versions
• Merge all Informatica server's repository databases on one Oracle DB

• Development and operational implementation of effective pre-sales activities for new customer acquisition
• Operational development and implementation of best-practice conversation strategies
• Process development and process optimization
• KPI measurement, regular communication
• Coaching of the sales employees and managers involved
• On-the-job telephone training with "demonstrating" in customer conversations
• On-the-job sales coaching for sales with "demonstrating" in customer conversations
• Change management of pre-sales activities

• Acquires new B2B customers for an AI SaaS startup in the public tendering space and books product demos with IT decision-makers.
• Qualifies target customers based on a defined ideal customer profile, including discovery, needs analysis, and objection handling.
• Builds domain knowledge in public procurement (EVB-IT, German and EU procurement portals) for conversations on equal footing.

• AI consulting for HR & recruiting (identification and implementation of AI potential throughout the candidate journey)
• Development and implementation of AI-supported recruiting systems
• Building automations to optimize hiring processes (screening, communication, follow-ups)
• Design and integration of chatbots & AI assistants for candidate communication
• Analysis and optimization of existing HR processes with a focus on efficiency, time-to-hire & candidate experience
• Development of custom software solutions for recruiting workflows
• Integration of AI systems into existing HR tools & infrastructures
• Focus on scalability, automation, and measurable impact
• Advising companies on digital transformation in HR

• Technical lead for CI/CD modernization in the "Group Archive 4.0" system
• Architecture and steering responsibility according to the statement of work
• Setting up modern build and deployment processes
• CI/CD coaching and enablement of the internal development team
• Integration of modern DevOps, security, and compliance standards
• Ensuring technical governance, including collaboration with internal audit and BaFin
• Independently executing the modernization measures
• Supporting the team in adopting new technologies and methods

• AI-Enabled Analytics & Reporting: Lead a 2-person BI team, applying predictive analytics and automation to translate complex business requirements into forward-looking insights, recommendations, and financial reports.
• Advanced Data Visualization: Design and maintain 25+ high-impact Power BI/Tableau dashboards tracking company-wide KPIs and trends, structured to support predictive and automated reporting.
• Web Analytics & Insights: Own GA4 tracking and analysis, driving a 15% increase in conversion insight through deeper customer journey analysis.
• Data Pipeline Optimization: Partner with data engineers to redesign and automate data pipeline workflows, cutting manual reporting time by 20% while safeguarding data accuracy and system uptime.

NIS2 Implementation Project and ISMS Development Based on IT-Grundschutz

Municipal utilities, public-law institution

• Analysis of the current compliance status regarding the requirements of the NIS Directive (NIS-2, EU 2022/2555).
• Identification of critical infrastructures and processes within the organization.
• Development of an action plan to meet NIS requirements.
• Conducting a risk analysis in accordance with BSI Standard 200-3 as the basis for the security concept.
• Preparation of an individual security concept including technical and organizational measures according to BSI IT-Grundschutz.
• Preparatory support for an optional certification according to BSI IT-Grundschutz.
• Adaptation of existing security policies and development of new ones for access controls, incident management and data protection.
• Consideration of municipality-specific requirements and integration of the measures into the existing IT infrastructure.
• Documentation of the results and preparation of audit-ready evidence for audits.

Tools, languages and frameworks used: MS Office, Verinice, IT-Grundschutz (200-x), NIS-2 (EU 2022/2555), ISMS, AI-Act (EU 2024/1989)

• CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.

Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement

Conception, planning, and production deployment of two AI platforms for industrial research and engineering workflows, from use-case identification and requirements analysis through architecture decisions and build-vs-buy trade-offs to go-live.

• awRAG.io: Identification of the use case (fragmented knowledge base across distributed AI tools), definition of data requirements, architecture decision for a multi-tenant RAG-as-a-service platform with GDPR-compliant EU infrastructure and production-grade retrieval pipeline

• LAIERS.ai: Use-case definition (context loss in linear AI workflows), strategic product decisions on UX, cost structure, and multi-LLM orchestration, rollout of a spatial AI conversation platform with proprietary context management system LAICS

• LLMOps ownership: Quality assurance, pipeline optimization, security architecture (OAuth 2.0, SOC 2), and performance monitoring of both platforms in live production

• Core topics: LLM, RAG, vector databases, LLMOps, AI architecture strategy, cloud infrastructure, data sovereignty

• Gathering, analyzing, specifying, and prioritizing requirements for the 'Archive and Delete' module of the Chambers of Industry and Commerce in a Scrum team
• Capturing and specifying screen/form designs, functionality, and data types in Confluence, as well as creating user stories in Jira
• Preparing PowerPoint presentations for the 'Archive and Delete' module
• Coordinating and supporting the Chambers of Industry and Commerce in the implementation of the module
• Writing SQL scripts for an Oracle database
• Technologies used: Scrum, Confluence, Jira, MS Office, Postman, JavaScript, REST API, JSON, DBVisualizer, SQL

• Primary point of contact for stakeholders (particularly Group Controlling), responsible for the end-to-end Plan-to-Steer process as well as data-driven corporate planning and performance management using SAP Signavio, SAP Analytics Cloud (SAC), S/4HANA data models, KPI frameworks, reporting, dashboards, self-service BI, and advanced analytics.

• Accountable for requirements and integration management of group-wide SAP BI solutions, including BI standards, data governance, and architecture guidelines.

• Contributed to a global BI transformation program (rollouts, key-user trainings, documentation) to strengthen data literacy and drive continuous improvement.

• Scaled a newly introduced feature from MVP to global rollout within SAP Signavio, reducing customer process modeling time by 40% and increasing NPS from 41 to 63 within two release cycles.

• Managing the company with 5–10 employees
• Planning and delivering AZAV-certified training programs