ISO 42001 Experts in Germany

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

• Project manager for the analysis, implementation, and optimization of digital processes
• Concept, management, and optimization of comprehensive marketing campaigns for lead generation via Paid Social (incl. Meta Ads, TikTok Ads)
• Concept and implementation of content production and marketing activities
• Project management in omnichannel marketing and process automation
• Implementation of digital tools to improve customer acquisition and support
• Internal stakeholder management and coordination of external service providers

• Advise organizations on integrating AI into project and program management practices, delivering measurable productivity improvements
• Designed and implemented an AI agent to improve project communication, transparency, and reporting quality

• Design and global rollout of sensitivity labels (confidentiality labels) for automated classification and encryption of business-critical data.
• Definition and rollout of Data Loss Prevention (DLP) policies to protect IP and personal data across endpoints, Exchange, SharePoint, Teams, and non-Microsoft clouds.
• Setup of Insider Risk Management policies to detect and contain excessive data leaks and risky user behavior.
• Implementation of GDPR and retention requirements through automated retention policies and structured records management.
• Technical support for legal teams in internal and external investigations using eDiscovery (Standard/Premium) and Content Search.
• Continuous improvement of the security and compliance level by reviewing the Microsoft Compliance Manager and closing gaps (regulations such as ISO 27001, NIS-2)

Industry: Publishing, media Project management for the concept of a RAG-based archive access solution: a secure on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio and video archives. Use case evaluation and make-or-buy together with editorial team, archive, and legal department, taking into account copyright, broadcasting law, and the AI Act. Differentiator: practical LLM infrastructure experience from two own productive platforms combined with C-level program management in regulated industries.

• Led cloud and data engineering organization, defining architecture strategy for next-generation data platforms
• Designed and delivered an automotive fleet data management system including scalable ingestion pipelines, signal catalog management, and campaign processing workflows
• Built cloud-native microservices and streaming architectures supporting real-time vehicle data and AI-powered threat detection
• Established engineering standards for data quality, security, lineage, and governance in alignment with ISO/SAE 21434 and GDPR
• Managed engineering teams across data, backend, cloud, and AI functions, ensuring consistent delivery of high-quality, production-ready solutions

• Pioneered first enterprise AI-SAP integration at ALDI SÜD, deploying AI-driven automation within one of retail's largest SAP S/4HANA programs, eliminating 50% of manual pre-cycle validation time and establishing replicable automation framework across 11 countries
• Led end-to-end SAP project lifecycle management for implementations across SAP S/4HANA and Manhattan Systems, supporting 7,300+ ALDI SÜD locations globally across Europe and Australia
• Served as primary executive liaison to C-level stakeholders across 11 countries for strategic SAP transformation programs
• Orchestrated automation, performance, and volume testing for critical releases, maintaining 99.9% system SLA compliance during peak retail periods
• Managed cross-functional international teams of 15+ specialists, delivering projects 20% faster than industry benchmarks
• Standardized SAP processes across 11 countries as part of one of retail's largest SAP implementations
• Directly managed €2M budget with 98% allocation accuracy across 12 concurrent projects
• Reduced SAP S/4HANA migration costs by 18% through strategic vendor contract renegotiations and optimization

• Architect AI strategies and smart business processes for companies implementing AI initiatives.
• Focus on pragmatic and trustworthy AI integration delivering tangible operational value.

• Improvement of the Information Security Management System (ISMS) based on ISO 27001, NIS2, DORA, B3S, TISAX and BSI IT Baseline Protection
• Conducting comprehensive gap analyses to identify gaps and derive action plans according to the above standards and regulations; management and KPIs
• Data Loss Prevention strategy and implementation using MS Purview
• Vulnerability and patch management, security monitoring
• Risk analysis and threat modeling using the STRIDE methodology
• Development of vendor risk assessments, implementation of risk classifications, conducting supplier assessments and implementing technical monitoring solutions (e.g. Security ScoreCard)
• Securing cloud environments (AWS and Azure); expertise in CSPM/CNAPP (Wiz), cloud migration, secure CI/CD pipelines, container security and best practices in AWS, Azure and Office 365
• Application security: penetration testing, DevSecOps, OWASP, pre-commit hooks, key and secret management, IDE plugins, static source code analysis, dependency checks, container scanning, vulnerability management, CIS benchmarks and compliance
• Security assessment and hardening according to CIS benchmarks and cloud conformity in AWS, Office 365 and Azure

• Co-founded the German chapter of the International Women's Coffee Alliance, contributing to strategic vision development and organizational structuring for international development initiatives
• Optimized internal workflows and reduced administrative overhead through systematic process analysis and documentation
• Designed and implemented governance frameworks and data governance standards to support ESG compliance and transparency requirements for NGO operations
• Developed comprehensive data strategy to enhance data quality, transparency, and reporting capabilities across international stakeholder network

• Topics: Business Analysis, Data Privacy, Data Management, Stakeholder Management, Conceptualization
• This project focuses on developing and implementing a strategic approach for data deletion in SAP systems. The goal is to identify the relevant data and structures during system migration to ensure both data privacy and IT system efficiency. At the same time, downtime should be minimized and regulatory requirements met.
• Development of a comprehensive approach for data deletion in SAP systems, considering data privacy and business requirements.
• Ensuring efficient and structured data transfer to the new system.
• Optimizing system efficiency and reducing downtimes during migration.
• Creating functional and technical concepts to ensure compliant and sustainable data management.
• Topic preparation: Detailed study of the "data deletion" area to lay the foundation for a structured data migration.
• Definition of project structure: Setting roles, interfaces and the project's organizational structure.
• Regulatory requirements: Analysis of data privacy regulations and business requirements to define deletion criteria.
• Approach: Developing possible scenarios and methods for data cleansing and deletion.
• Deletion concepts: Creating functional and technical deletion concepts that structure the implementation and provide clear guidelines.
• Setting deletion criteria: Defining which data and structures to delete or transfer.
• Responsibilities: Clarifying responsibilities within the project team and among stakeholders.
• Analysis of ongoing activities: Identifying and collecting existing activities in the "data deletion" area.
• Effort, cost and timeline planning: Creating estimates for resources, effort and budget.
• Implementation initiatives: Developing and executing concrete measures to apply the defined deletion strategies.
• IT system efficiency: Analyzing the existing IT infrastructure to identify optimization potential for data deletion and transfer.
• Technology trends: Evaluating new technologies and tools that can support the data cleansing process.
• Cost-benefit analysis: Assessing the financial impact of data cleansing and the introduction of new solution approaches.
• Risk management: Identifying potential risks during implementation and developing appropriate mitigation measures.
• This project lays the foundation for a sustainable and compliant data transfer to a new SAP system. With a clear approach to data deletion, it meets data privacy requirements, reduces downtimes and increases the efficiency of the new system. The results and recommendations will help companies develop a future-proof data strategy that meets legal and business needs.

• Leading the product lifecycle for sovereign AI platform and operating system teams for enterprise & government clients and internal stakeholders (infra, solution delivery, support, revenue)
• Built and scaled the platform from a 200-user beta to a full rollout of 70K+ members at the Bundesagentur für Arbeit (BA), secured with ISO 42001 and EU AI Act compliance
• Architected the shift to a multi-tenant shared inference, increasing GPU cluster utilization from 20% to 85% and reducing infrastructure cost-to-serve by 40% for SaaS clients
• Shipped model quantization, allowing clients to run advanced LLMs on legacy hardware (A100s GPUs) instead of the H100s, saving upwards of 70% cost per enquiry
• Abstracted complex Helm configurations into a dynamic model manager, reducing the time to install or swap models by ~80%
• Killed an expensive move to build own dashboard service, pivoting to an API-first data strategy that clients can consume directly and saving €100Ks in opex and capex
• Built a safety-first agent marketplace and control plane lighthouse project for a Tier-1 bank, allowing internal teams to deploy autonomous agents within strict regulatory guardrails

• Leading and building integrated management systems (IMS) for quality (QMS), data protection and information security (ISMS), risk (GRC), and artificial intelligence (AI) in accordance with ISO 9001, ISO 27001, ISO 42001, ISO 21500, ISO 21502, ISO 37301, ISO 31000
• Governance, project, and transformation management nationally and internationally incl. enterprise and project governance
• Process development, optimization, and business process reengineering according to BPMN 2.0, Kaizen, IATF 16949, VDA, BPMN 2.0
• Compliance and risk management in the company and project context as well as connection to internal control systems (ICS) and Group Risk Compliance (GRC)
• Carrying out and leading internal audits and lead audits according to ISO 19011; audit management and test equipment / special equipment management
• Methodical and systemic coaching (IFS, Hakomi) as well as conflict moderation and change management
• Designing and delivering AI trainings, prompt engineering, and AI literacy workshops
• Advising on data protection impact assessments (DPIA), implementing EU GDPR, BDSG, and IT-SiG as well as NIS-2 and DORA
• Building and leading Program Management Offices (PMO) and introducing Project Management Office structures
• Contract management, clause-by-clause analyses, and project controlling according to PMI® standards incl. Earned Value Management
• Building knowledge, document, and content management systems (Confluence, SharePoint, EY iManage)

• AI Governance Expertise: Development of ethical AI standards and governance frameworks for organizations
• Responsible AI Expertise: Applying ethical impact and what-if analyses in Design Thinking workshops, bias auditing tools (IBM AIF360, Microsoft Fairlearn, Google’s What-If Tool), fairness metrics and risk management (e.g., via MIT risk repository)
• Regulations (EU, DE): Expertise on the EU AI Act, GDPR, ISO 42001, ISO 23894 and ethical standards