GwG Experts in Germany

The online service "Special Use of Streets and No-Parking Zone" was in a partially completed state. The following tasks had to be carried out to reach final completion:

• Preparation of an expert report on the status of the online service, and recommendations for action
• Ensuring that all LEIKAS to be used are available (service catalog / service descriptions of the authorities)
• Creating and aligning concepts for complex IT projects (business/IT concepts, architecture, interfaces, roadmaps)
• Requirements management
• Multi-project management with 3 stakeholders (Police, Dataport, development company)
• Determining resource needs
• Coordination to identify technical requirements through the IT architects
• Creating use cases and test cases
• Creating action items
• Managing external IT service providers
• Coordination and management of all activities
• Conflict resolution / business mediation
• User Acceptance Test (UAT) and acceptance by Hamburg Police (Traffic Directorate, Policy Department, Central Road Traffic Authority)

Technical environment: .NET, EfA minimum requirements, Leikas, Administrative Procedure Act (VwVfG), HWG (Hamburg Roads Act), Atlassian Jira, Confluence, MS Office

• Founding and development of an asset management company (KVG), particularly for real asset funds and investments.
• Responsibility for the portfolio management division, including system administration, stakeholder management, processes and corporate services.

Implementation of anti-money laundering requirements under AMLA/KYC for an international major bank in Munich

Services provided:

• Clarification of the assignment and definition of the work package structure for the AMLA/KYC implementation project
• AI-supported project planning using a custom AI workflow for project management
• Preparation of the project management plan
• Resource and capacity planning
• Development of collaboration structures between the IT service provider and the bank client
• Agreement on responsibilities (RACI matrix)
• Management of 5 project members (core team)
• Project control, project monitoring, project reporting
• Communications management
• Escalation management
• Stakeholder management (11 stakeholders)
• Permanent member of the Steering Committee
• Project representation internally and externally
• Project reporting and management of decision-making bodies
• Project volume: 506 person-days (development effort)
• Risk management
• Quality management
• Organization and delivery of workshops

Methods: PMI PMBOK, EVM, GWG, DORA, BAIT, KANBAN, AML, AMLR, AMLA, GWG, KYC

IT environment: JIRA, Confluence, Sharepoint, Kantata Kimble, AI LLM Copilot, ChatGPT, anti-money laundering systems (custom-developed and SMARAGD)

• Integrating system architecture, business analysis, requirements engineering, and process consulting
• Managing business unit needs toward IT and implementation
• Capturing requirements in JIRA and breaking them down into epics
• Overseeing internal projects and programs, including stakeholder management and reporting
• Handling requirements from traditional IT developments to IoT integrations and SAP subsystem replacements
• Implementing current legal regulations (MAKO, EnWG, EEG, GWG, StromGVV, GasGVV, StromNEV, GasNEV)
• Applying agile methods (Agile, SAFe, ITIL, Scrum, Kanban, DDD, IaC, CI/CD, DevOps, automation, ETL, OOA, OOD, MDA, BPMN, BPM, UML, marketing automation, data science, ML, AI, GenAI, LLMs)
• Using tools like JIRA, SharePoint, MS Office, MS Project, MS Dyn CRM, VMware ESX/ESXi, BSI IT-Grundschutz, BSI C5, NIST, MS Azure, Typo3, mail automation, Docker, Kubernetes, OpenStack, OpenShift, Terraform, Ansible, SQL, REST, SOAP, Git, GitLab, LoRaWAN, SAP IS-U, S/4HANA, USU, KUGU, AbSys, sensors, MQTT

Organizational and technical process development and design of the digitization and online use of bank mandates. Responsible for accurately capturing requirements in Epics and User Stories, including backlog management, MVP, implementation support, and end-to-end testing of the implementation according to the SAFe Agile Framework methodology, creating process and interface documentation, and sprint demos. Established a knowledge management system based on Confluence and SharePoint, including employee training and workshops.

• Designing the information security process based on ITIL 4
• Designing the ITIL 4 incident and change management processes
• Creating information security policies for the bank
• Support in the project for internal audit findings
• Advising on the setup of the bank's internal control systems (ICS)
• Advising on setting up ICS processes
• Advising and supporting security architecture and risk analysis of the existing IT landscape, including IT security architecture, data management, data compliance & physical security
• Advising and project leadership for the security concept of the bank's assets
• Advising and support in contracts with external service providers to meet the bank's regulatory (BAIT; MaRisk; DORA; NIS2; GDPR) and information security requirements
• Support in planning and implementing a SOC/SIEM and risk management
• Support for the spam email team in analyzing and handling incidents

• Jul 2024 – Feb 2025 Transformation (NDA – Clients)

• Implementation of the value creation plan in a private equity-backed industrial company

• Served as Interim Transformation Officer; responsibilities: central project management including timeline, budget, resources, reporting, risks

• Oct 2023 – Apr 2024 Sourcing, Regulation (Retail Bank DE)

• Change Lead for the implementation of a regulation (CESOP), responsible for project governance, project controlling (budget, resources) and project reporting, stakeholder management, timeline and project risks

• Drafted SLAs and aligned with relevant 2nd lines (Legal, Compliance, Tax, Third Party Risk – MaRisk BAIT, ORM) for sourced services; aligned on the Statement of Work

• Apr 2023 – Aug 2023 IT Program Management (Retail Bank DE)

• Local coordinator for the rollout of a project management software combining program and agile backlog management views

• Responsible for migration preparation, communication of changes and new logic in Germany, stakeholder management

• Oct 2022 – Aug 2023 Regulation (Retail Bank DE)

• Local lead of the global program; combined 4 local projects (retail/wholesale banking) to implement the next generation messaging standard (ISO 20022)

• Implemented local project governance, communicated progress, aligned and managed stakeholders with global HQ

• Jul 2022 – Mar 2023 Digitalization, Data Management (Retail Bank DE)

• Change Lead aligning the local retail data model to the global standard and its implications for internal data providers and consumers

• Designed and aligned a detailed implementation plan with global and local stakeholders

• Project management: set up new project governance and routines, reviewed progress in weekly meetings with product owners, chaired SteerCo meetings, documentation

• May 2022 – Apr 2023 KYC Regulation, Process Management (Retail Bank DE)

• Built a highly automated customer offboarding process for retail clients due to non-compliance

• Change Lead in development, testing and implementation in an agile environment with a 40-FTE project team

• Project management: held SteerCo meetings, accountable for the business case, project risk management, stakeholder management

• Jan 2022 – Mar 2022 Strategy, Product Development (NDA - Exchange)

• Coordinator in the concept phase for developing a cryptocurrency certificate with an external investment bank

• Orchestrated 5 workstreams, provided overarching PMO and stakeholder management

• Created the business case and aligned strategic options

• Oct 2020 – Oct 2021 Business Transformation, Sourcing (Largest German Bank)

• Implemented the organizational target operating model for KYC Germany as project manager

• Managed staffing and location setup (hired 250 FTE, logistics for new site)

• Built the KYC competence center for German large caps (department, team, roles) process-wise and organizationally

• Advised on contract negotiations with procurement for sourcing an external KYC provider

• Jan 2020 – Sep 2020 Digitalization, KYC Regulation (Largest German Bank)

• Germany coordinator (project manager) in an agile project to introduce an AMLD-5 compliant KYC software (MVP)

• Stakeholder management as nexus between local staff and management (back & front office), global project management, product owners, IT

• Incident management (capture, prioritization, tracking) with JIRA

• Jan 2018 – Jun 2019 Business Transformation, Tax Evasion Prevention Act Regulation (Largest German Bank)

• Led the implementation of the Tax Evasion Prevention Act in the global Corporate & Investment Banking division

• Analyzed legal requirements and developed a control concept in alignment with business and infrastructure units

• Successfully implemented IT and process solutions within budget and timeline; prepared initial regulatory reporting to the Federal Central Tax Office

• Project management: initiation, chaired SteerCo meetings, communication

• Dec 2016 – Dec 2017 Business Transformation, Banking Separation Act Regulation (Largest German Bank)

• Led the implementation of the Banking Separation Act in the global Global Transaction Banking (GTB) division

• Developed target operating model and process design (control concept) in coordination with IT and 2nd lines (Legal, Compliance)

• Successfully implemented changes in business units and IT per regulatory requirements

• PMO and represented the internal GTB project management in committees

• Jul 2015 Project Management (Largest German Bank – Asset Management)

• Implemented an asset management front-office system

• Interim head of the global PMO (Frankfurt, New York) with 4 staff

• Planned milestones, budget, regular reporting

• Prepared, attended and followed up on senior governance meetings

• Apr 2015 – Jun 2015 M&A Consulting – Due Diligence (NDA – Asset Management)

• Led a European operational due diligence (buy side) for a European asset manager back-office provider

• Produced red flag reports: screened data rooms, assessed organizational structure, identified risks in acquisitions

• Designed operating model scenarios for operations including business case

• Jan 2015 – Feb 2015 Target Operating Model (Largest German Bank)

• Conducted market and competitor analysis to realign multiple securities processing units (private & corporate clients)

• Ran a strategy workshop to develop a new target operating model for securities processing

• Jan 2014 – Dec 2014 M&A Consulting – Post Merger Integration (Largest German Bank)

• Organizational restructuring and group integration during the post-merger integration phase

• Deputy project manager leading 4 staff in the Integration Management Office (status reporting, attended sponsor meetings with senior management)

• Advised workstreams on cost reduction, synergy realization and business case controlling across 11 subprojects

• Feb 2013 – Dec 2013 Sourcing (State-owned Resolution Agency)

• Coordinated sourcing activities for the bankwide service-level agreement (SLA) creation with an external service provider

• Checked SLAs for completeness and consistency, facilitated cross-functional alignment within the bank

• Advised on preparing negotiation positions and participated in discussions with service providers and senior management

• Jun 2012 – Jan 2013 Sourcing (State-owned Resolution Agency)

• Developed site strategy: scenario analysis for European locations and created business case

• Advised and prepared tender and contract documents per EU procurement rules for outsourcing portfolio management services

• Led a team in drafting portfolio management service-level agreements

• Mar 2012 – Jun 2012 M&A Consulting – Carve-Out (Largest German Bank – Asset Management)

• Global carve-out of the institutional asset management business to a US investor

• Led the global operations workstream focusing on 3rd-party contract review, portfolio analysis, drafting and negotiating transitional service agreements

• Oct 2011 – Feb 2012 Regulation (various banks)

• Central support for FATCA project teams with technical work and Deloitte position papers

• Conducted client workshops for a cooperative bank on FATCA strategy for foreign financial institutions

• Process redesign and advisory support during implementation

• Jul 2011 – Oct 2011 M&A Consulting – Carve-Out (Life Insurance)

• Planned and prepared an M&A carve-out transaction

• Analyzed existing processes and defined target processes; facilitated cross-functional workshops and created day-1 checklists

• Operationally led the PMO with 3 staff for the carve-out (prepared and participated in steering committee, developed project plan)

• Feb 2011 – Jul 2011 Project Management (Life Insurance)

• Operational leadership of the PMO, project risk management

• Prepared post-merger integration steering committee at C-level

• Project reporting, stakeholder management, project and budget controlling

• Nov 2010 – Jan 2011 Securities Processing (Landesbank)

• Created data processing and business concepts for securities trading

• Designed test cases for IT interfaces

• Independently coordinated test execution with business requirements

• Sep 2010 – Oct 2010 Project Management (Asset Manager)

• PMO for introducing an independent P&L

• Budget tracking, prepared and documented steering committee

• Acting as the central point of contact for data protection matters within the organization.
• Coordinating the implementation of privacy policies, standards, and procedures across business functions.
• Supporting the Data Protection Officer (DPO) in operational and organizational privacy activities.
• Monitoring compliance with internal data protection requirements and regulatory obligations, especially TDDDG.
• Maintaining records of processing activities (RoPA) and coordinating updates from business units.
• Reviewing new projects, products, and business initiatives for potential privacy implications.
• Coordinating Data Protection Impact Assessments (DPIAs) and tracking mitigation measures.
• Supporting third-party risk management and the review of data processing agreements (DPAs).
• Maintaining an inventory of processors, sub-processors, and data-sharing arrangements.
• Conducting privacy-related audits and assessments, and monitoring the implementation of corrective actions arising from them.
• Providing guidance to business departments on practical privacy compliance requirements.
• Facilitating communication between business units, IT, Legal, Compliance, Information Security, and the DPO.
• Assisting with the development and maintenance of privacy notices, consent mechanisms, and internal policies.
• Supporting cross-border data transfer assessments and related documentation requirements.