GDPR Experts in Germany

• Overall leadership of several strategic operations projects focusing on Workplace Services, SLA Framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as the introduction of system monitoring and feasibility studies for 24x7 operations, in some cases including implementation in ServiceNow
• Creation of various ServiceNow operating concepts covering training, access rights, and emergency management as part of a new cloud hosting initiative for the ServiceNow platform
• Executive board reports and leadership of steering committees as part of company-wide strategic objectives, as well as the establishment of new balanced scorecards for measuring KPIs related to optimization-driven project results

• Generative AI products for corporate clients, owned from strategy through specification to production.
• Central strategy, local configuration: multi-tenant AI assistant for occupational pension schemes (bAV), delivered as an interactive avatar with text and voice path. Three tenants run on one codebase, each with its own conversation guide, while the knowledge base, guardrails and escalation paths stay central
• Versioned, AI-ready knowledge base composed into a tenant-agnostic voice context and tenant-specific text prompts — the configuration layer that keeps local adaptation from forking the product
• Conversational design: answer limits, scope and off-topic handling, anti-hallucination rules, escalation and lead handover to human advisors
• Five eval suites as a quality gate before any prompt or model change (anti-hallucination, LLM-as-judge failure modes, multi-turn consistency, voice KPIs, action vocabulary with confusion matrix); user test with 10 testers (Hamburg, 07/2026) drove the rework from alpha to beta
• Coordinated external developers, compliance and client stakeholders; GDPR-compliant EU stack, IDD-compliant, EU AI Act classification documented
• Second product line: white-label social media generator for consultancy chilli mind (CH/DE) — one codebase, per-client branding and configuration
• Results: 239+ deployments and a pilot with corporate customers · 108+ deployments for the white-label product · repeatable pattern for multi-tenant AI products in a regulated environment

• Requirements management, process planning, interface function, ISMS setup, and documentation
• Setup and establishment of an ISMS according to ISO 27001 and establishment of emergency management / ITSCM
• Coordination of the circumstances with the public-sector IT service provider
• Consideration of KRITIS relevance within the scope and implementation of a B3S
• Development of requirements for document control and the continuous improvement process
• Preparation of relevant project documents
• Analysis of existing processes and preparation of guidelines
• Requirements gathering for ISMS and ITSCM and coordination with the IT service provider, including definition of interfaces
• Analysis of communication processes and escalation paths
• Review of documents for risk management, ISMS, emergency preparedness, and emergency response
• Redesign of the complete documentation and preparation of new relevant documents
• Development of necessary rules, policies, and concepts
• Interface between customer and service provider to ensure document quality
• Coordination of protection needs with specialist departments, particularly regarding KRITIS relevance, and planning of resulting measures
• Development of preventive measures to minimize the risk of data center outages in scenarios such as pandemics or ransomware attacks
• Definition of the test strategy for IT emergency exercises
• Initiation of necessary awareness training measures for specialist departments
• External Information Security Officer
• Introduction of document control

• Built a scalable nearshore IT developer hub (Croatia, Czech Republic, Poland) as an independent company through a BOT model (Build – Operate – Transfer)
• Identified, selected, and managed full-service agencies; introduced management and control mechanisms, including KPIs, SLAs, and regular service reviews
• Prepared and reviewed data processing agreements and framework contracts in coordination with Legal & Compliance; integrated regulatory requirements (including KRITIS) into process design
• Advised on cloud vs. on-premise strategies, data storage, and authorization concepts; supported Procurement with tendering and service provider evaluations
• Managed change and process harmonization between internal teams and nearshore partners; reported to executive management, CFO, and CIO

Result: Scalable IT developer hub with an audit-ready governance model, reduced operating costs, and accelerated product development.

• Repaired a broken “ScrumBan” process, then established a pure Kanban system; increased output in the Kanban flow by 22% within four weeks

• Increased team autonomy and decision-making ability by implementing new decision strategies; resulting in up to 25% better outcomes

• Redesigned retrospectives (including one-to-one coaching and workshops), which led to consistent implementation of the resulting action items

• Intensive coaching of Product Owners (POs) to develop and support “Empowered Teams”, alongside leadership development to place agile frameworks and methods in a realistic context (“de-illusioning”)

• Supported change management processes to promote an agile company culture among management and teams, improving internal communication to increase transparency and effectiveness in agile processes

• New development and further development of the existing MS Dynamics CRM

IT systems: Microsoft Dynamics Customer Service, SharePoint, DevOps, SAP IS-U

• CRM implementation / further development
• Taking over from the previous service provider
• Business process analysis
• Agile project organization
• Business analysis / requirements engineering with AI support
• Use of AI in development
• Analysis of master data processes
• CRM customer data management
• Requirements documentation
• Stakeholder management
• Workshop moderation

Project: Defect Generation on Test-Bench Images of Metal Surfaces Environment: Automated Visual Inspection (AVI), Metallurgy & Manufacturing

• Objective & Implementation: Designed, architected, and trained Generative Adversarial Networks (Pix2PixHD / SPADE) for image-to-image transformation. Targeted generation of synthetic material defects (e.g., cracks, inclusions, scale) on rough metal surfaces under real test-bench lighting conditions for privacy-compliant and efficient dataset expansion (data augmentation).
• Technical Design: Implemented robust Generative AI and computer vision pipelines in Python and PyTorch. Used semantic segmentation approaches for mask-controlled defect synthesis and subsequent evaluation with EfficientDet object detection models.
• Business Impact: Massive dataset upscaling (10x) without time-consuming and costly physical test-bench runs, while significantly improving the detection performance of automated inspection systems.

Technologies & Skills Used: Python | PyTorch | SPADE | Pix2PixHD | EfficientDet | Machine Learning | Semantic Segmentation | Computer Vision

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

Stabilization of an Azure/.NET landscape in live operation.

• Architecture, DevOps, and operational readiness; technical decisions under time pressure
• Azure DevOps, monitoring, ETL/ELT, cloud security, FinOps, and data-mesh-related topics

Technologies: Azure DevOps, .NET, CI/CD, monitoring, FinOps

• Conclusion of partner agreements with OnePlan (portfolio management) and ForProject/EVMS (project controlling); ongoing qualification and implementation of both tools.
• Project management for the relaunch of [link] with a new focus on integrated PM/PPM toolchains.
• Development and implementation of approx. 60 PM standard methods (PMSP, CMSP, QMSP) according to ICB4 & PMBoK8 as a database application on MS Power Automate / M365 / MS Project, with a planned cloud launch in 2025.
• Deployment and cut-over standard process defined as Quality Gate QG07: go-live plan, cut-over plan, communication package, production launch, smoke test in production, hypercare team, incident and SLA management, confirmation of production stability and operational handover.
• Development of a classification and retrieval system (TOC) for ChatGPT projects to enable immediate cross-application object activation.

Tools: LinkedIn, Claude, ChatGPT, Gemini, Infinity, MS Copilot, OnePlan, EVMS/ForProject, Power Automate, SQL DB, O365, MS Project, MS Cloud, ICB4, PMBoK7, M365, Teams

• Planned and developed a CPU monitoring application for monitoring system performance and resource utilization.
• Designed and implemented a Spring Boot backend providing a REST API for processing and exposing monitoring data.
• Developed the React frontend for presenting monitoring information in a clear and user-friendly interface.
• Integrated PostgreSQL for persistent storage and management of application data.
• Containerized the application and its services using Docker Compose.
• Automated infrastructure provisioning and deployment using Terraform on AWS.
• Structured the application as a modern, maintainable system using REST-based communication between frontend and backend.
• Designed and developed a secure, scalable CPU monitoring architecture (cpu-watcher) with a dedicated collector application that streams monitoring data to the backend, reducing direct exposure of system resources.
• Designed a secure cloud infrastructure with the database isolated within a private network and OIDC-based authentication.
• Implemented Infrastructure as Code with Terraform and integrated version-controlled CI/CD pipelines to automate testing, infrastructure changes, and application deployments.
• Designed and implemented the frontend delivery architecture using AWS CloudFront.

Stack: Spring Boot · React · PostgreSQL · REST API · Docker Compose · Terraform · AWS

• Transformation and global scaling (listed in the MDAX)
• Stabilization and professionalization of the ongoing value creation program
• Consistent challenging of the workstreams regarding content, target achievement, and progress, as well as realization of the defined value drivers
• Identification and removal of implementation blockers to ensure execution speed
• Reporting to the Executive Board and Supervisory Board

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

Remote freelance role focused on Agentic AI strategy, secure application patterns, and reusable agentic workflows for a government agency.

• Development and implementation of an open source Agentic AI strategy for a government agency, with a focus on GDPR, security, and self hosted solutions
• Development of reusable agentic workflows and mini applications that enable non technical employees to solve business problems independently
• Implementation of internal business applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Implementation of nine mini applications with Single Sign On (SSO) and Azure PostgreSQL integration on Hetzner Linux servers
• Techstack: Python, Nextjs, Typescript, Streamlit, Anthropic SDK (Claude), Azure, Linux Ubuntu, PostgreSQL, MS SQL, Angular, Authentik