GDPR Experts in Essen

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

• Development and operational implementation of effective pre-sales activities for new customer acquisition
• Operational development and implementation of best-practice conversation strategies
• Process development and process optimization
• KPI measurement, regular communication
• Coaching of the sales employees and managers involved
• On-the-job telephone training with "demonstrating" in customer conversations
• On-the-job sales coaching for sales with "demonstrating" in customer conversations
• Change management of pre-sales activities

• Acquires new B2B customers for an AI SaaS startup in the public tendering space and books product demos with IT decision-makers.
• Qualifies target customers based on a defined ideal customer profile, including discovery, needs analysis, and objection handling.
• Builds domain knowledge in public procurement (EVB-IT, German and EU tender portals) for technical discussions at eye level.

• CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.

Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement

• Technical lead for CI/CD modernization in the "Group Archive 4.0" system
• Architecture and steering responsibility according to the statement of work
• Setting up modern build and deployment processes
• CI/CD coaching and enablement of the internal development team
• Integration of modern DevOps, security, and compliance standards
• Ensuring technical governance, including collaboration with internal audit and BaFin
• Independently executing the modernization measures
• Supporting the team in adopting new technologies and methods

• Setting architectural standards for Informatica Power Center development teams
• Maintenance-performance-health for DWH (Exadata) environments
• Qlik Sense / BO reports architectural standards
• Implementing best practices in ETL tasks
• Documentation ETL standards on Confluence
• Dynamic Data Masking rules for GDPR/KVKK regulations by using Informatica DDM tool
• DWH Data model Power Designer
• Upgrade Qlik Sense versions
• Merge all Informatica server's repository databases on one Oracle DB

Conception, planning, and production deployment of two AI platforms for industrial research and engineering workflows, from use-case identification and requirements analysis through architecture decisions and build-vs-buy trade-offs to go-live.

• awRAG.io: Identification of the use case (fragmented knowledge base across distributed AI tools), definition of data requirements, architecture decision for a multi-tenant RAG-as-a-service platform with GDPR-compliant EU infrastructure and production-grade retrieval pipeline

• LAIERS.ai: Use-case definition (context loss in linear AI workflows), strategic product decisions on UX, cost structure, and multi-LLM orchestration, rollout of a spatial AI conversation platform with proprietary context management system LAICS

• LLMOps ownership: Quality assurance, pipeline optimization, security architecture (OAuth 2.0, SOC 2), and performance monitoring of both platforms in live production

• Core topics: LLM, RAG, vector databases, LLMOps, AI architecture strategy, cloud infrastructure, data sovereignty

• Gathering, analyzing, specifying, and prioritizing requirements for the 'Archive and Delete' module of the Chambers of Industry and Commerce in a Scrum team
• Capturing and specifying screen/form designs, functionality, and data types in Confluence, as well as creating user stories in Jira
• Preparing PowerPoint presentations for the 'Archive and Delete' module
• Coordinating and supporting the Chambers of Industry and Commerce in the implementation of the module
• Writing SQL scripts for an Oracle database
• Technologies used: Scrum, Confluence, Jira, MS Office, Postman, JavaScript, REST API, JSON, DBVisualizer, SQL

• Primary point of contact for stakeholders (particularly Group Controlling), responsible for the end-to-end Plan-to-Steer process as well as data-driven corporate planning and performance management using SAP Signavio, SAP Analytics Cloud (SAC), S/4HANA data models, KPI frameworks, reporting, dashboards, self-service BI, and advanced analytics.

• Accountable for requirements and integration management of group-wide SAP BI solutions, including BI standards, data governance, and architecture guidelines.

• Contributed to a global BI transformation program (rollouts, key-user trainings, documentation) to strengthen data literacy and drive continuous improvement.

• Scaled a newly introduced feature from MVP to global rollout within SAP Signavio, reducing customer process modeling time by 40% and increasing NPS from 41 to 63 within two release cycles.

• Managing the company with 5–10 employees
• Planning and delivering AZAV-certified training programs

• Transforming complex AI use cases into practical solutions
• Analyzing IT/telecom end-to-end business processes from requirements to order (RACI), modeling with IBO Prometheus
• Risk management
• Assessing digitalization potential, AI, and strategic supplier analysis against the IT target picture
• Optimizing offer and cost calculation bases in strategic and operational IT procurement
• Optimizing supplier strategy (DSGV and financial institutions)
• Exploring various approaches to cost optimization and simplifying supplier management
• Optimizing contracts and licensing management (e.g., SAP, Microsoft, IBM, Cisco, BMC, etc.)
• Desk and field expediting with external partners
• Possible outsourcing and consolidation of services with fewer suppliers
• On-time handover of work packages within agreed time and budget

• Assisting in drafting, reviewing, and negotiating contracts and other legal documents (NDAs, termination agreements, termination notices, etc.)
• Research and analysis of legal issues
• Implementation of legal and regulatory requirements (GDPR, NIS2, DORA, Data Act, AI Act)
• Supporting compliance with legal requirements and internal policies (AI Regulation, Accessibility Enhancement Act, Supply Chain Due Diligence Act, Whistleblower Protection Act)
• Documenting and filing important contract documents in the digital system
• Negotiating and evaluating individual contract clauses

• Designed and implemented the system architecture for scalable document workflows, improving stability and performance.
• Optimized the login flow with TOTP-based MFA, reducing complexity and login time by 35%.
• Built secure backend APIs for document upload, signing, and management.
• Developed encrypted file handling with AWS S3 pre-signed URLs, ensuring GDPR-compliant data protection.
• Implemented JWT-based role authentication, strengthening access control and overall platform security and reducing code and database complexity.
• Optimized database queries and caching using ORM, reducing API response time by 40%.
• Integrated real-time webhook updates, enhancing workflow transparency and user experience.

• Enhanced quality assurance of documents, processes and required evidence in preparation for the upcoming KRITIS audit 2025.
• Reviewing and commenting on all relevant documents.
• Advising authors and document owners on inquiries and during the creation process.
• Supporting departments with IT security inquiries.
• Used tools/Frameworks MS Office, SharePoint, Jira, Confluence, ISO27001+, NIS-2 (EU 2022/2555), B3S (Statutory Health & Private Health Insurance), BSIG / IT-SIG 2.0, BSI-KritisV, BSI-C5, BSI Baseline Protection (200-2, 200-4), ServiceNow, RCE (EU 2022/2557), SGB, GDPR