ISO 27701 Experts in Germany

• Support in building and further developing the information security management system
• Cooperation with external consultants in the certification team for the support structure
• Involvement in project planning, identification, and implementation of the necessary measures according to BSI IT baseline protection
• Professional support for in-house subject matter experts in creating the documents required for certifications
• Carrying out the work according to BSI 200-2

As the only large integrated energy company in Germany, EnBW covers the entire value chain - from energy production through distribution to customers. It expands its renewable energy sources, advocates for a socially responsible coal exit, and drives key technologies like green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developed and implemented a holistic process view covering both technical and organizational aspects  Ensured end-to-end control of all IAM-related technical services  Established clear responsibilities and accountabilities within the IAM landscape  Collaborated with different departments to identify and optimize a holistic architecture and act as Single Point of Contact (SPoC) for Information Security  Introduced and monitored governance policies to ensure compliance and security  Continuously improved IAM processes and systems through regular audits and evaluations  Participated in external audits of the process as part of official ISO audits  Further developed the policy for setting administrative requirements and procedures and aligned it with administrative units  Conceptually advanced the KPI system to measure process quality

• Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
• Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
• Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
• Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
• Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
• Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
• Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
• Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
• Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
• Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
• Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
• Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
• Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
• Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
• Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
• Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
• Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
• Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

• Leading and building integrated management systems (IMS) for quality (QMS), data protection and information security (ISMS), risk (GRC), and artificial intelligence (AI) in accordance with ISO 9001, ISO 27001, ISO 42001, ISO 21500, ISO 21502, ISO 37301, ISO 31000
• Governance, project, and transformation management nationally and internationally incl. enterprise and project governance
• Process development, optimization, and business process reengineering according to BPMN 2.0, Kaizen, IATF 16949, VDA, BPMN 2.0
• Compliance and risk management in the company and project context as well as connection to internal control systems (ICS) and Group Risk Compliance (GRC)
• Carrying out and leading internal audits and lead audits according to ISO 19011; audit management and test equipment / special equipment management
• Methodical and systemic coaching (IFS, Hakomi) as well as conflict moderation and change management
• Designing and delivering AI trainings, prompt engineering, and AI literacy workshops
• Advising on data protection impact assessments (DPIA), implementing EU GDPR, BDSG, and IT-SiG as well as NIS-2 and DORA
• Building and leading Program Management Offices (PMO) and introducing Project Management Office structures
• Contract management, clause-by-clause analyses, and project controlling according to PMI® standards incl. Earned Value Management
• Building knowledge, document, and content management systems (Confluence, SharePoint, EY iManage)