Industrial Control System Experts in Germany

• Independent planning, coordination and operational counting of fixed asset inventories at SGS sites across Germany
• During the count, clarification of differences and booking of the new inventory in the fixed assets of the respective site and company

Compliance department setup & DORA operationalization

• Setup of a complete compliance organization according to DORA
• Development and operationalization of SfO
• Use of AI agents for automation:
• Evaluation of due diligence questionnaires including risk classification
• AI-supported contract analysis (DORA/MaRisk compliance)
• Monitoring of external data sources (cyber incidents, news feeds)
• Setup of a decentralized risk and action register
• Creation of gap analyses and derivation of actions
• Setup and maintenance of the outsourcing information register
• Use of own TPRM frameworks, checklists and process models

Compliance department setup & DORA operationalization

• Setup of a complete compliance organization according to DORA
• Development and operationalization of SfO
• Use of AI agents for automation:
• Evaluation of due diligence questionnaires including risk classification
• AI-supported contract analysis (DORA/MaRisk compliance)
• Monitoring of external data sources (cyber incidents, news feeds)
• Setup of a decentralized risk and action register
• Creation of gap analyses and derivation of actions
• Setup and maintenance of the outsourcing information register
• Use of own TPRM frameworks, checklists and process models
• Project controlling - presentation and structured measurement of achieved project goals within management reporting.

(parallel to freelance work)

• Setup and leadership of ESG, Internal Audit, and Risk Management for a listed company
• Setup and leadership of a CSRD / EU Taxonomy project including sustainability reporting
• Analysis and implementation of all relevant ESG product compliance regulations, including the introduction of ESG software
• Introduction of enterprise risk management and an internal audit system

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

• Ensure closing and audit of group financial statements
• Improve closing and audit structures & processes
• Transformation of finance & accounting structures
• Lead tax, finance & accounting teams (25-30 FTEs)
• Leading role initiating business transformation
• Support redesign of HR and payroll processes

• Project manager controlling the update to ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022) including gap analysis, project planning, preparation of internal and external audits, and creation and maintenance of required documentation.
• Coordination of adjusting existing measures and implementing new measures according to the new standard’s requirements, as well as continuous monitoring and adjustment of these measures.
• Regular reporting to management on progress and risks.
• Senior consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including resolving findings, creating and updating evidence documents, and amending provider contracts.
• Senior consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of over 1500 deliverables & obligations (D&O), setup of a D&O tracker (claim register), and joint expert review with service owners for various service descriptions (e.g. IT service management, workplace and print services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification, distribution).
• Senior consultant adjusting service scopes in existing service descriptions to enable end-to-end service responsibility of the provider, including identification and analysis of use cases, process analysis and optimization (incident, problem, change), as well as recording and documenting all software products in LeanIX and documenting the contract change.
• Focused services: managed software service, application and desktop service, workplace and print services, web server service, container service, M365, SAP/Oscare, output management systems (OMS), telephony and omnichannel management service.
• Project manager steering a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and client, review of benchmark results, and preparation and conduct of price negotiations with the IT provider.

• Managing projects of around 500 PDs
• Allocating and planning resources for the project tasks
• Technical Architect for Trade Enrichment System (TESYS)
• Application performance optimization & process optimization
• Acting as a bridge between business analysts team, software development team, IT support team, testing & release team
• Infrastructure migration and optimization
• Handling L3 support of TESYS application
• Analyzing and producing RCAs for P1 & P2 issues for TESYS application
• Preparing technical specifications, performing code review, performing TD review, conducting technical review meetings, maintaining project documents in RTC, conducting knowledge sharing sessions within offshore team
• Interaction with users & BA for requirements
• Work orders tracking
• Escalation management
• Environment / Platform: Java/J2EE, Spring, Eclipse, Tomcat, WAS, Oracle 10g/11g, DB2, COBOL, SVN, CVS, RTC, ICS, WebMethods, Jenkins, Sonar, MQ Series

• Led end-to-end tape-out and photomask preparation for a 300mm automotive semiconductor program, ensuring manufacturability, data integrity, and compliance with automotive quality standards, frame generation, multi-die placement
• Identified and mitigated manufacturing-readiness risks during technology transfer (TI / TSMC 45nm) by implementing reticle, kerf, and alignment optimizations, reducing re-spin exposure, creating alignment, overlay markers, metrology targets, CD-control features, PDM cell
• Coordinated cross-functional stakeholders across design, lithography, manufacturing, and mask vendors to deliver a production-ready mask set under strict schedule constraints
• Performed and calibrated model-based OPC for the 110 nm node, leveraging RET strategies in collaboration with the photolithography modeling team
• Impact: Enabled on-time production release of a safety-critical automotive semiconductor by mitigating tape-out and manufacturability risks under strict quality and yield

• Financial accounting: daily general ledger entries and month-end closing

• Preparation of FY 2024 financial group statements (subunits KF, KNL, KAU, KCH)

• Preparation of physical inventory for KF with inventory instructions for Logistic

• Further development of ERP Finance processes integration with MS Dynamics BC 14

• Implementation of electronic invoice verification and Multi Cash banking software

• Expansion of sales and e-commerce controlling toolbox and processes

• Preparation of budgets 2026, 2027, 2028, including investment plan, cost accounting

• Preparation and commentary on monthly reports for sub-units and Group

• Preparation of weekly financial plans, cash flow and liquidity plans

• Further development of sales controlling, focusing on margins & product profitability

• Creation and integration of accounting workflows for MS Dynamics

• Leadership focus: Stabilization of the finance team and clear scope of work responsibility

• Communication with banks, auditors, tax advisors, and tax authorities

• Complete and accurate monthly reporting for each business unit and the KF Group

• Preparation 2024 financial statements for KF Germany, KNL, KAU, and KNL with audit opinion

• Detailed setup and preparation of the KF 2026 budget for the management and shareholders

• Weekly cash flow planning coordinated with the management and shareholders

• Turnaround in net sales and EBIT from September 2025 onwards – stable growth

• Leadership & change through consistent, data-driven KPIs

• Project planning and resource planning
• Requirements definition and technology selection
• Data migration and risk management
• Monitoring up to go-live
• Tools: Office365, Jira XRAY, Strato, Onboarding App

• Structuring and handling identified high-risk topics for the executive board.
• Handling various ad-hoc topics as part of the company-wide restructuring, especially in the finance, controlling, and procurement departments.
• Developing strategic concepts to increase the level of digitization in central controlling, finance, procurement, and logistics functions.
• Stakeholder management (supervisory board, works council, city of Düsseldorf).
• Coordinating and conducting due diligence as well as subsequent purchase price negotiations related to the land acquisition for a new depot (volume >80 million EUR).
• Participation as a permanent member in various steering committees.

• Design, implementation, and testing of internal control systems / US SOX
• Consulting and compliance

• Consulting on effort estimation for VDA ISA / TISAX certification
• Conducting a 2-day workshop including preparation and follow-up
• Skills: TISAX 5.1, ISO 27001:2022, auditing, information security, consulting, facilitation, presentation

• Baseline compliance verification against MAS audit findings
• Building technical architecture concept for 30 technologies to build hardening standard artifacts
• Identifying and building automation possibilities for given technologies based on CIS
• Building the standard baseline configuration based on internal security standard
• Responsible for building Cloud Native Application Protection Platform (CNAPP) architecture artifacts based on Azure cloud platform
• Responsible for RFQ and RFP for different CNAPP solutions (Qualys Total Cloud, CrowdStrike, Azure Security Center)
• Supporting compliance verification and validation via automated scripts for a sample population of IT devices and instances
• Responsible for complete vulnerability management lifecycle using Nexpose, remediation, reporting and integration of results with Splunk, HPSM and Tableau
• Audit support for MAS