HIPAA Experts in Germany

• Led discovery phase and POC for Shopware to Shopify Plus migration across EMEA markets, evaluating platform suitability, technical architecture, and multi-brand/multi-country capabilities against business requirements.
• Designed reference architecture for Shopify Plus implementation incorporating headless front-end patterns (Vue.js, Nuxt.js), CMS integration (Magnolia), and Azure middleware (APIM, Functions, Logic Apps, Service Bus) for 11 EMEA markets.
• Defined migration strategy analyzing data mapping, cutover approach, and zero-downtime deployment patterns using Varnish caching, GitOps pipelines, and CI/CD orchestration across six vendor teams.
• Architected multi-tenant Shopify Plus governance model with centralized admin, localized storefront customization, and compliance controls (GDPR, data residency).
• Prototyped AI-driven search optimization (LLM.txt, JSON-LD) for product discoverability in Google AI results, demonstrating post-launch performance opportunities.
• Defined EMEA expansion roadmap for 15+ markets through C-level strategic workshops, identifying phased rollout, market-specific configurations, and resource requirements.
• Tech Stack: React, Nuxt.js, Vue.js, Magnolia CMS, Shopware, Shopify Plus, Azure (APIM, Functions, Logic Apps, Service Bus, Front Door), Varnish, SAP, MS Dynamics, Docker, Kubernetes, GitHub Actions, PostgreSQL, Kafka

Conversational AI assistant for cloud infrastructure and security queries

• Designed FastAPI backend with multi-turn conversation handler, token budgeting, and context window management.
• Integrated Amazon Bedrock (Claude 3 Sonnet/Haiku); built RAG pipeline with MongoDB chat history and semantic search.
• Implemented Factory Pattern for modular LLM provider switching; reduced model onboarding effort by 60%.
• Reduced LLM inference cost by 35% through model tiering (Haiku vs Sonnet) and prompt/entity consolidation.

Tech: Python, FastAPI, Amazon Bedrock, MongoDB, Streamlit, Pydantic.

• PRISMA project
• Ansible automation
• Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019

Through Sourcegarden GmbH, ongoing engagement. Transitioning software development to agentic development in phases, from setup and pilots through transformation and handover.

• The customer is undergoing a comprehensive transformation. All SAP ECC landscapes worldwide are being migrated to SAP S/4HANA, with the goal of introducing a standard template worldwide.

• The program also includes the “RISE with SAP” migration and modernization program, which may involve migrating the landscapes of selected country installations to the SAP Private Cloud.

• On the stakeholder side, the program reporting line extends to the company’s executive board and that of the implementation partner.

• Fiserv Germany’s ERP landscape currently includes several non-standard SAP tools and applications that extend the functionality of the ECC environment and can often be integrated into downstream systems. As part of the transition to SAP S/4HANA, it is essential to assess the core functionality, integration points and future viability of these applications in order to determine their alignment with the target architecture.

• The focus of the work is on providing expert advice and assessment to define the scope, strategy and roadmap for transitioning Fiserv Germany’s SAP ECC system to SAP S/4HANA.

• The recommended best practices from SAP are followed and a structured approach is used to ensure a smooth transition with minimal disruption while maximizing business value.

• This assessment forms the basis for a successful SAP S/4HANA transformation and ensures alignment with industry best practices, regulatory compliance and future scalability.

• Migration Strategy Definition – assessment of available transition approaches based on business objectives, technical feasibility and SAP Best Practices.

• Technical Readiness Assessment – conducting a system analysis to assess compatibility, custom code impact, data volume management, integration points and infrastructure readiness for SAP S/4HANA.

• Business Process Impact Analysis – reviewing the latest business process documentation to define the scope and effort required to implement the necessary functions in SAP S/4HANA and to identify opportunities for process optimization.

• Roadmap for Non-SAP Systems and Applications – assessment of third-party and legacy applications regarding their integration with SAP S/4HANA and recommendation of consolidation, migration or replacement strategies.

• Deployment & Implementation Planning – defining a phased approach for implementation, including project schedules, risk mitigation strategies and key milestones aligned with business priorities.

• This transformation takes place in phases: the Discovery phase leads to the Explore phase, which is followed by the Design phase and finally implementation.

• Program management

• Change management

• Requirements management

• Transition management

• Stakeholder management

• Risk management

• Comprehensive coordination

• Planning, managing and implementing IT security projects with a focus on Palo Alto solutions (e.g. next-generation firewalls, Prisma Access, Cortex, SASE, Zero Trust)
• Coordinating interdisciplinary teams and resources across all project phases
• Managing project scope, schedule, budget and quality in line with customer objectives
• Active stakeholder management and ensuring transparency and communication
• Risk management: identifying, assessing and managing project-related risks
• Creating and maintaining project plans, budget overviews and reports
• Ensuring customer satisfaction through high-quality project and relationship management
• Applying established project management methods such as PMI, PRINCE2 or SCRUM for structured project implementation

• Designed an open clinical framework for digitalization in pharma and clinical software development.
• Developed a minimum viable product (MVP) for the framework, applying agile methodologies and rapid prototyping best practices while ensuring GxP validation and HIPAA compliance.

• Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
• Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
• Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
• Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
• Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
• Implement continuous monitoring solutions to detect and respond to threats in real time.
• Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
• Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
• Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
• Collaborate with project teams to address findings and ensure that security risks are managed effectively.
• Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
• Facilitate a culture of security awareness throughout the organization through training and regular communication.
• Lead security initiatives that align with the organization’s long-term strategic goals.
• Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
• Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

• Generated synthetic datasets for CXR, mammography, and distal radius fracture detection using GANs and diffusion, creating >50k synthetic images for benchmarking.
• Ensured GDPR-compliant workflows and reproducibility, enabling dataset adoption for internal validation and academic collaboration.
• Project highlighted in MedTank’s internal R&D showcase as a flagship synthetic data initiative.

• Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
• Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
• Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
• Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
• Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
• Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
• Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
• Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
• Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
• Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
• Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
• Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
• Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
• Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
• Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
• Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
• Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
• Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

Leading Jefferies’ DORA-driven operational resilience programme by strengthening ICT risk governance, control design, and regulatory readiness across key technology and outsourcing domains. Partnering with senior stakeholders to translate regulatory requirements into pragmatic governance, reporting, and assurance processes suitable for a global investment banking environment.

• Developed the Enterprise Register of Information (DORA Art. 28.3) to align with regulatory requirements.
• Defined and embedded ICT Risk Appetite and tolerance levels aligned to the Global Operational Risk Framework, strengthening decision-making and risk acceptance governance.
• Drove audit readiness by reviewing and re-drafting 50+ IT & Information Security policies, improving clarity, ownership, and control alignment.
• Oversaw the Operational Resilience Testing Programme (including penetration testing) and tracked remediation to closure, strengthening control assurance and reducing open findings.
• Aligned 10+ intra-group agreements with DORA regulatory standards.
• Enhanced executive-level decision-making with an enterprise ICT Risk Dashboard featuring KPIs/KRIs.

• Configure and customize Salesforce Marketing Cloud, Braze, and Data Cloud to meet client-specific requirements, ensuring seamless deployment and scalability
• Develop and maintain custom APIs, automation workflows, SQL queries, Liquid Script, AMP script, and SSJS scripts for data processing, personalization, and dynamic content
• Design and implement multi-channel campaigns and customer journeys across email, SMS, push notifications, and in-app messaging
• Build and maintain integrations with CRM systems, analytics platforms, data warehouses, and third-party tools using REST/SOAP APIs and connectors
• Develop data models, ETL processes, and pipelines to synchronize data across systems, enabling a unified customer view and real-time engagement
• Optimize platform performance by implementing error handling, logging, and monitoring mechanisms
• Provide development support for campaign setup, deployment, and monitoring
• Optimize customer journeys and automation workflows using Journey Builder, Audience Builder, and Automation Studio
• Conduct A/B testing, performance analysis, and reporting to enhance campaign effectiveness and ensure maximum ROI
• Design and maintain data extensions, segmentation strategies, and audience targeting rules for effective customer communication
• Leverage Data Cloud capabilities to unify customer profiles, enable predictive analytics, and personalize customer interactions
• Act as a technical SME, providing support for complex issues related to platform configuration, integrations, and campaign execution
• Troubleshoot API integrations, scripting errors, automation failures, and data synchronization issues
• Collaborate with vendors and internal teams to resolve critical issues and deploy fixes
• Establish development standards, reusable templates, and best practices to ensure consistency and scalability
• Document technical designs, workflows, configurations, and troubleshooting guides
• Conduct training sessions and knowledge transfers to empower internal teams and clients
• Develop custom dashboards and performance reports to track campaign metrics and data trends
• Stay updated with Salesforce Marketing Cloud, Braze, and Data Cloud releases and industry trends
• Evaluate and implement new tools and AI-powered solutions for predictive analytics, segmentation, and personalization

• Conduct data management and statistical analysis for clinical studies on behalf of CROs.
• Guest lecturer at Ivancity University, Paris, specializing in data anonymization techniques and statistical disclosure control.
• Provide scientific and medical writing services for pharmaceutical companies.
• Perform optical mapping data analysis and develop software tools with a focus on algorithm optimization and technical support.

• Developing an AI-enabled platform that summarizes YouTube channels into daily digests with article and podcast formats.
• Built scalable backend in Node.js integrating OpenAI Whisper for transcription and GPT for summarization.
• Implemented frontend in React with TypeScript, ensuring responsive design and accessibility.
• Set up automated deployment pipelines and CI/CD with Docker & GitHub Actions.