GDPR Experts in Frankfurt

2nd LoD/Change the Bank (CtB)

• CtB: External consultant and workstream lead for rectifying findings by BaFin following a special IT audit in the 2nd LoD, management of the work package for revising the ICT Risk Management & ICT Asset Classification in accordance with DORA Chapter 2, the processes for structural analysis, protection requirements, and control assessments (4 FTEs).

• Create a tracking concept for Google Tag Manager and Google Analytics including data layer, events, triggers, and reporting
• Manage the project team (developers, designers, performance specialists)
• Serve as communication interface between stakeholders and digital departments

Europe-wide re-platforming & centralization

• Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
• Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
• Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
• Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
• Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
• Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
• Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
• Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

• Conceptual design and implementation of modular AI assistants for sales and business processes in the Microsoft ecosystem (Agentic AI, Copilot extensions)
• Frontend architecture and development with React + TypeScript for embedded chat and assistant surfaces (streaming UI, hooks, React Query, OpenAPI clients)
• Enterprise-level agent development: reusable skill/agent library, MCP server, review and compliance gates
• LLM integration into the user experience: Anthropic (Claude), OpenAI, tool use, RAG pipelines, prompt engineering, guardrails
• Architecture and code review consulting as well as mentoring in the AI development team
• Integration with Microsoft Graph, Power Platform, and Azure services
• Technologies: React, TypeScript, Anthropic Claude, OpenAI, MCP, RAG, Microsoft Graph, Power Platform, Azure

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

Further development & digitalization of key sales and application processes in a regulated banking environment, including requirements structuring, roadmap development and AI-supported use case assessment

Responsibilities & Impact:

• Management of existing digital products to ensure stable operations (Keep the lights on) amid growing regulatory complexity
• Product vision and development of a consistent, implementable roadmap
• Strategic backlog prioritization based on business goals, dependencies and technical feasibility
• Coordination of release planning, backlog, quality assurance and go-live readiness with business departments, IT, implementation teams and management
• Identification, structuring and assessment of AI-supported use cases at the interface of business departments, IT and the regulatory environment
• Analysis, structuring and translation of complex business requirements into epics and user stories
• Facilitation of team, stakeholder & alignment formats to ensure clarity of objectives, collaboration and decision-making ability
• Transparency on capacities, dependencies, delivery status and KPI/status aspects as a basis for product & management decisions
• Compliance with transparent structures and documentation (LeanIX, application profiles, runbooks)

Contribution to results:

Stabilization and further development of key financial processes under high regulatory and technical complexity. Improved transparency, decision-making ability and implementability through structured requirements, auditable documentation and AI-supported ways of working.

• Analysis of the existing reporting platform including processes and governance topics with stakeholders from sales and marketing.

• Detailed analysis and evaluation of client-defined requirements for existing reporting and new dashboards.

• Supporting stakeholders in managing sales processes and early detection of KPI trends.

• Use of Microsoft Power BI as central analysis and reporting platform.

• Developing a proposal for the necessary evolution of processes and the Power BI platform.

• Gathering current business processes and defining company-wide KPIs in coordination with stakeholders.

• Analysis and inventory of the client's Power BI platform.

• Analysis of processes and data governance.

• Recording and documenting current business processes.

• Developing recommendations for process and reporting platform improvements.

• Designing and implementing dashboards in Power BI.

• Defining company-wide KPIs and aligning them with stakeholders.

• Microsoft Power BI.

• Data analytics.

• KPI definition and reporting.

• Dashboard design and data visualization.

• Stakeholder management and requirements management.

Lead project manager for live seminars and hybrid implementation. Creation of the run-of-show, definition of all on-site designs in line with corporate identity, and optimization of the digital setup. On-site show direction.

• Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
• Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
• Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
• Preparing projects for works council information and project closeout communication
• Optimization of resource management (tracking, allocation, prioritization)
• Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
• Supporting the hiring of external project managers
• Optimization of meeting structure, project controlling (KPIs), change and demand management
• Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
• Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
• Design and implementation of a Business Value Complexity Scoring
• Building a strategic PMO with a sister department and optimizing cross-functional teams
• Reporting, communication and escalation at management level
• Leadership coaching for several future leaders (short-time assignment)
• Development of the concepts "PPM as a Service" and "Internal Customer Approach"
• Development and review of a concept "AI Data Governance" including roles and processes
• Selection and onboarding of the successor

• Led business requirements workshops and interactive prototyping sessions across global workstreams, translating complex HR needs into functional specifications and updated implementation workbooks.
• Partnered with cross-functional project managers, business analysts, and third-party implementation partners to drive strategic digital HR transformation and enhance end-user experience across matrixed organizations.
• Participated in gathering Business requirements through Walk through work sessions and prototyping business solutions helping business in updating the workbooks.
• Maintained and optimized the Workday HCM suite to ensure peak system performance.
• Implemented Absence,Time Tracking,HCM Core support for countries like US, Philippines, Germany, Portugal, Chile, Mexico, Azerbaijan etc.,
• Create new time off plans, accruals. Implemented Time and Absence for Created/updated Time Offs, Time Off Plans, Time Off Accruals, Leave of Absences.
• Create advanced reports using calculated fields.
• Managed and Implemented new Application Tracking system GreenHouse Implementation.
• Acted as SPOC and configurator for Greenhouse Implementation.
• Evaluate Workday release items, test and implement the new features.
• Engineered and optimized complex Workday Business Processes (BPs) with advanced condition rules, dynamic approval routing, and step delay logic to streamline the entire worker lifecycle (Hire, Job Change).
• Executed large-scale bulk data loads using Enterprise Interface Builders (EIBs) for global worker data updates, maintaining 100% data integrity, audit readiness, and strict GDPR compliance.
• Served as the functional SME for Core HCM, collaborating closely with upstream/downstream module owners (Time Tracking, Absence, Compensation, Payroll) to ensure seamless data flows and zero-downtime hypercare support.

• Design and global rollout of sensitivity labels (confidentiality labels) for automated classification and encryption of business-critical data.
• Definition and rollout of Data Loss Prevention (DLP) policies to protect IP and personal data across endpoints, Exchange, SharePoint, Teams, and non-Microsoft clouds.
• Setup of Insider Risk Management policies to detect and contain excessive data leaks and risky user behavior.
• Implementation of GDPR and retention requirements through automated retention policies and structured records management.
• Technical support for legal teams in internal and external investigations using eDiscovery (Standard/Premium) and Content Search.
• Continuous improvement of the security and compliance level by reviewing the Microsoft Compliance Manager and closing gaps (regulations such as ISO 27001, NIS-2)

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Led a transformation program in corporate finance & procurement across 25+ countries
• Managed end-to-end implementation of SAP S/4HANA and Coupa for 60 regional entities
• Handled post-acquisition integrations including financial reporting, HR systems, and governance
• Directed cross-functional teams, change management, and stakeholder engagement
• Coordinated post-merger integration with the works council for IT system rollouts and GDPR compliance

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control