ISO 27001 Experts in Berlin

Support for Transformation Projects:

• Expert CTO advisory and enterprise architecture consulting for several short-term transformation projects, ensuring measurable improvements in project outcomes and technical business alignment.
• Supporting strategic IT initiatives for diverse clients, driving digital transformation and optimizing technology operations to increase business value and operational efficiency.

• Architected and deployed private cloud data platform on VMware vSphere, integrating Greenplum MPP, Apache Kafka, Kubernetes, and Apache Solr, and developed real-time ingestion pipelines with Kafka Connect and Schema Registry.
• Led Oracle Exadata to Greenplum migration, rearchitected data models, optimized storage, implemented RabbitMQ with Debezium for CDC, and deployed VectorDB for Generative AI.
• Designed and executed multi-cloud migration PoC across AWS, Azure, and GCP, defined KPIs for throughput, latency, and cost efficiency, executed bulk data transfers, validated analytics and streaming workloads, and delivered full-scale architecture recommendations.
• Assessed legacy on-premises infrastructure and designed modern cloud-native data platforms using Greenplum and containerized microservices, advising on scalability, disaster recovery, and high-availability.

• Led marketing and corporate communications team (8 FTE) with budget and team responsibility to 250+ clinic customers and 150K patients, managing all aspects of marketing, brand messaging and public relations
• Led development of multi-channel demand gen and partner marketing with Sales and CSM (LinkedIn, webinars, email, field marketing, medical briefings in orthopedics, neurology, long-covid, oncology), achieving +180% leads, +120% webinar signups, +35% MQL conversion
• Architected new PLG/app marketing playbook with Product and Data to streamline and leverage product launches, achieving +150% 5-star app reviews from patients and +10 NPS
• Launched ingredient branding strategy, securing two major clinic chain partnerships and patient testimonials. Led proactive PR media and KOL campaigns (+20% sentiment)
• Introduced MarTech AI for marketing automation and campaign efficiency (SFDC, ActiveCampaign, Plausible, Figma), aligned with Legal on GDPR, PDSG, ISO:27001 compliance

Through Sourcegarden GmbH, ongoing engagement. Transitioning software development to agentic development in phases, from setup and pilots through transformation and handover.

• Codebase Evaluation & Problem Design: Designed and stress-tested complex software engineering problems against large open-source Python codebases (including pandas), requiring deep context acquisition and architectural understanding to produce well-scoped, realistic problem statements aligned to strict correctness guidelines.
• Agent Failure Analysis: Assessed LLM coding agent solutions for correctness and completeness, identifying meaningful failures across edge case handling, dtype behaviour, and multi-column NaN propagation logic; documented findings with precision for downstream evaluation use.
• Programmatic Test Suite Development: Authored comprehensive pytest suites to programmatically verify agent-generated solutions against defined requirements, with deliberate coverage of boundary conditions and failure modes not caught by naive implementations.
• Containerised Environment Engineering: Built and debugged Docker environments for reproducible agent execution, including git-based repository provisioning, dependency pinning with npm ci, and multi-stage Dockerfile authoring across Linux-based containers.

• Supporting companies in building organisational excellence and resilience through strong People functions, strategy integration and business partnering to the management
• Mapping of the people processes and strategy in the HRIS Personio for an AI consulting company

• Project management in agile IT projects
• Executive coaching
• Product Owner & Business Analyst

• Creating guidelines
• Conducting Business Impact Analyses (BIA), assessing risks, and identifying time-critical business processes
• Process management
• Creating emergency plans and crisis management plans, including cyber response and IT emergency plans with special consideration of a cyberattack
• Conducting awareness trainings
• Planning and carrying out tests and exercises
• Developing tailor-made solutions to reduce risks and ensure business continuity

• Insurance service provider*

Challenge: Business-critical documents were processed through external OCR providers, with ongoing costs, dependency, and data privacy risks for sensitive insurance data.

Implementation:

• Architecture and production implementation of an on-premise OCR solution with full data ownership
• Methods for recognizing document structures as the basis for automated further processing
• ML-, NLP-, and LLM/VLM-based information extraction, especially from invoices and quotations

Success: Replaced external providers: full data ownership, GDPR-compliant processing, and 75% lower recurring OCR costs per year

Used technologies: Python, Docker, Microservices, FastAPI, PyTorch, Torchvision, MongoDB, MySQL

• Conducting cybersecurity readiness checks based on an in-house assessment methodology
• Analyzing the external attack surface using the Graydaxe EASM platform
• Assessing maturity levels and deriving prioritized recommendations for action

• Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
• Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
• Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
• Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
• Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
• Implement continuous monitoring solutions to detect and respond to threats in real time.
• Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
• Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
• Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
• Collaborate with project teams to address findings and ensure that security risks are managed effectively.
• Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
• Facilitate a culture of security awareness throughout the organization through training and regular communication.
• Lead security initiatives that align with the organization’s long-term strategic goals.
• Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
• Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

• Building a full-stack e-commerce product using AI-assisted development, deliberately returning to hands-on engineering to validate how AI changes software development workflows and team dynamics.
• Exploring VP Technology, Head of Engineering, and Director of Engineering opportunities where hands-on AI experience meets organisational scaling expertise.
• Open to advisory conversations on AI-augmented engineering teams, technology strategy, platform architecture, and organizational design.
• No registered business. No commercial activity.

• Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
• Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
• Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
• Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
• Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
• Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
• Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
• Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
• Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
• Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
• Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
• Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
• Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
• Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
• Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
• Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
• Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
• Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

Consulting on the development of comp structure

Review and development of salary bands and market benchmarking

Supporting Figures configuration