HIPAA Experts in Germany

Andreas Rühl

Principal Consultant Information Security

Last position:

Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting

Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations

Kyra Cole

Technical Consultant

Niedernhausen

Last position:

Founder at C/C++ Consultancy for Pharma and Clinical Software Development and Digitalization Support

Designed an open clinical framework for digitalization in pharma and clinical software development.
Developed a minimum viable product (MVP) for the framework, applying agile methodologies and rapid prototyping best practices while ensuring GxP validation and HIPAA compliance.

Sumalatha Bhuchupalle

Senior Python Developer & AI Engineer | Team Leader

Senden

Last position:

Copilot Cloud Security Chatbot | AI / LLM at Banyan Cloud

Conversational AI assistant for cloud infrastructure and security queries

Designed FastAPI backend with multi-turn conversation handler, token budgeting, and context window management.
Integrated Amazon Bedrock (Claude 3 Sonnet/Haiku); built RAG pipeline with MongoDB chat history and semantic search.
Implemented Factory Pattern for modular LLM provider switching; reduced model onboarding effort by 60%.
Reduced LLM inference cost by 35% through model tiering (Haiku vs Sonnet) and prompt/entity consolidation.

Tech: Python, FastAPI, Amazon Bedrock, MongoDB, Streamlit, Pydantic.

Prasad Tilloo

Solution Architect / Senior Manager – DTC E-Commerce Platform

Frankfurt

Last position:

Solution Architect / Senior Manager – DTC E-Commerce Platform at BRITA

Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

Vladimir Mildenberger

IT & Cybersecurity Project Manager

Bad Soden-Salmünster

Last position:

IT & Cybersecurity Project Manager at Technology company / IT security solutions

Planning, directing, and implementing IT security projects focused on Palo Alto solutions (e.g., Next-Gen Firewalls, Prisma Access, Cortex, SASE, Zero Trust)
Coordinating interdisciplinary teams and resources throughout all project phases
Managing project scope, schedule, budget, and quality according to client goals
Active stakeholder management and ensuring transparency and communication
Risk management: identifying, assessing, and controlling project-related risks
Creating and maintaining project plans, budget overviews, and reports
Ensuring customer satisfaction through high-quality project and relationship management
Applying established project management methods such as PMI, PRINCE2, or SCRUM for structured project execution

Flamur Abdyli

Fractional Chief Information Security Officer

Last position:

Fractional Chief Information Security Officer at VR Smart Guide GmbH

Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
Implement continuous monitoring solutions to detect and respond to threats in real time.
Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
Collaborate with project teams to address findings and ensure that security risks are managed effectively.
Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
Facilitate a culture of security awareness throughout the organization through training and regular communication.
Lead security initiatives that align with the organization’s long-term strategic goals.
Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

Dmitrii Shatov

IT Regulatory Compliance & GRC (BCM, IT Risk, DORA, ISO 22301, Outsourcing)

Frankfurt

Last position:

IT Risk & Compliance | DORA | IT Regulatory & Operational Resilience Senior Consultant at Jefferies GmbH

Leading Jefferies’ DORA-driven operational resilience programme by strengthening ICT risk governance, control design, and regulatory readiness across key technology and outsourcing domains. Partnering with senior stakeholders to translate regulatory requirements into pragmatic governance, reporting, and assurance processes suitable for a global investment banking environment.

Developed the Enterprise Register of Information (DORA Art. 28.3) to align with regulatory requirements.
Defined and embedded ICT Risk Appetite and tolerance levels aligned to the Global Operational Risk Framework, strengthening decision-making and risk acceptance governance.
Drove audit readiness by reviewing and re-drafting 50+ IT & Information Security policies, improving clarity, ownership, and control alignment.
Oversaw the Operational Resilience Testing Programme (including penetration testing) and tracked remediation to closure, strengthening control assurance and reducing open findings.
Aligned 10+ intra-group agreements with DORA regulatory standards.
Enhanced executive-level decision-making with an enterprise ICT Risk Dashboard featuring KPIs/KRIs.

Patricia Afonso Alemany

Head of Operations

Last position:

Head of Operations at StratifAI GmbH

Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

Luca Pacor

ERP Program Manager

Hofheim in Unterfranken

Last position:

ERP Program Manager at Fiserv

The client is undergoing a comprehensive transformation. All SAP ECC landscapes worldwide are being migrated to SAP S/4HANA, with the goal of introducing a global standard template.
The program also includes the migration and modernization initiative "RISE with SAP", which may involve migrating selected country installations to the SAP Private Cloud.
On the stakeholder side, the program's reporting line extends up to the company's board and the implementation partner's board.
Fiserv Germany's ERP landscape currently includes several non-standard SAP tools and applications that extend the ECC environment's functionality and often integrate with downstream systems. As part of the move to SAP S/4HANA, it is essential to assess the core functionality, integration points, and future viability of these applications to determine their alignment with the target architecture.
The focus of the role is to provide expert advice and assessment to define the scope, strategy, and roadmap for migrating Fiserv Germany's SAP ECC system to SAP S/4HANA.
SAP's recommended best practices are followed, and a structured approach is used to ensure a smooth transition with minimal disruption while maximizing business value.
This assessment forms the basis for a successful SAP S/4HANA transformation, ensuring alignment with industry best practices, regulatory compliance, and future scalability.
Migration strategy definition – evaluating available transition approaches based on business objectives, technical feasibility, and SAP best practices.
Technical readiness assessment – conducting a system analysis to assess compatibility, custom code impact, data volume management, integration points, and infrastructure readiness for SAP S/4HANA.
Business process impact analysis – reviewing the latest business process documentation to define the scope and effort needed to implement required functions in SAP S/4HANA and identify process optimization opportunities.
Roadmap for non-SAP systems and applications – evaluating third-party and legacy applications for SAP S/4HANA integration and recommending consolidation, migration, or replacement strategies.
Deployment & implementation planning – defining a phased rollout approach, including project timelines, risk mitigation strategies, and key milestones aligned with business priorities.
The transformation is carried out in phases: the discovery phase leads to the explore phase, which then leads to the design phase and finally to the implementation phase.
Program management
Change management
Requirements management
Transition management
Stakeholder management
Risk management
Comprehensive coordination

Bhanu Prakash Avula

CRM and MarTech Expert

Poing

Last position:

CRM and MarTech Expert at Merkle DACH

Configure and customize Salesforce Marketing Cloud, Braze, and Data Cloud to meet client-specific requirements, ensuring seamless deployment and scalability
Develop and maintain custom APIs, automation workflows, SQL queries, Liquid Script, AMP script, and SSJS scripts for data processing, personalization, and dynamic content
Design and implement multi-channel campaigns and customer journeys across email, SMS, push notifications, and in-app messaging
Build and maintain integrations with CRM systems, analytics platforms, data warehouses, and third-party tools using REST/SOAP APIs and connectors
Develop data models, ETL processes, and pipelines to synchronize data across systems, enabling a unified customer view and real-time engagement
Optimize platform performance by implementing error handling, logging, and monitoring mechanisms
Provide development support for campaign setup, deployment, and monitoring
Optimize customer journeys and automation workflows using Journey Builder, Audience Builder, and Automation Studio
Conduct A/B testing, performance analysis, and reporting to enhance campaign effectiveness and ensure maximum ROI
Design and maintain data extensions, segmentation strategies, and audience targeting rules for effective customer communication
Leverage Data Cloud capabilities to unify customer profiles, enable predictive analytics, and personalize customer interactions
Act as a technical SME, providing support for complex issues related to platform configuration, integrations, and campaign execution
Troubleshoot API integrations, scripting errors, automation failures, and data synchronization issues
Collaborate with vendors and internal teams to resolve critical issues and deploy fixes
Establish development standards, reusable templates, and best practices to ensure consistency and scalability
Document technical designs, workflows, configurations, and troubleshooting guides
Conduct training sessions and knowledge transfers to empower internal teams and clients
Develop custom dashboards and performance reports to track campaign metrics and data trends
Stay updated with Salesforce Marketing Cloud, Braze, and Data Cloud releases and industry trends
Evaluate and implement new tools and AI-powered solutions for predictive analytics, segmentation, and personalization

Ehsan Amin

Clinical Data Scientist

Kaarst

Last position:

Clinical Data Scientist at Freelance

Conduct data management and statistical analysis for clinical studies on behalf of CROs.
Guest lecturer at Ivancity University, Paris, specializing in data anonymization techniques and statistical disclosure control.
Provide scientific and medical writing services for pharmaceutical companies.
Perform optical mapping data analysis and develop software tools with a focus on algorithm optimization and technical support.

Pierre Gronau

Ansible Automation, Windows Third Level Support

Cologne

Last position:

Ansible Automation, Windows Third Level Support at DB InfraGO AG

PRISMA project
Ansible automation
Windows third level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

Jan Schulz

Fullstack Developer

Last position:

Fullstack Developer at Summify.News

Developing an AI-enabled platform that summarizes YouTube channels into daily digests with article and podcast formats.
Built scalable backend in Node.js integrating OpenAI Whisper for transcription and GPT for summarization.
Implemented frontend in React with TypeScript, ensuring responsive design and accessibility.
Set up automated deployment pipelines and CI/CD with Docker & GitHub Actions.

Caner Karaoğlu

Synthetic Medical Dataset (MedGym)

Munich

Last position:

Synthetic Medical Dataset (MedGym) at MedTank

Generated synthetic datasets for CXR, mammography, and distal radius fracture detection using GANs and diffusion, creating >50k synthetic images for benchmarking.
Ensured GDPR-compliant workflows and reproducibility, enabling dataset adoption for internal validation and academic collaboration.
Project highlighted in MedTank’s internal R&D showcase as a flagship synthetic data initiative.

Dean Rakic