ISO 9001 Experts in Germany

• Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
• Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
• Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
• Advised business units and IT on information security, security requirements, and risk-appropriate measures.
• Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
• Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
• Monitored and assessed current security advisories and security-related metrics (KPIs).
• Reviewed, assessed risks, and approved exception requests (Security Exceptions).
• Independently analyzed and handled Security Events and supported the handling of security incidents.
• Planned and supported awareness initiatives to strengthen security awareness.
• Created, implemented, and reviewed information security policies and standards.
• Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
• Defined and reviewed technical and organizational risk treatment measures.
• Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.

• Founder of CheironX: AI-supported GRC management (ISO 27001, BSI IT-Grundschutz, TISAX, DORA)
• Strategic focus on Agentic AI and GenAI for modern IT Governance, Risk & Compliance Management
• IT interim management and strategic consulting

Interim management and temporary leadership for industry and infrastructure. I step in where organizational change has stalled and leadership, structure and execution are needed at short notice.

Projects: AI and transformation strategy for a regional hospitality association (2026): analysis of problem areas and their interdependencies, two prioritized initiatives, metrics and roles for implementation. Result: clearly identified the core issue (the data foundation, not the technology) and delivered a practical plan. Two presentations for the Modell Hohenlohe business network (December 2026) on leadership, structure and effectiveness during periods of change. Preparing a pilot to stabilize leadership structures at a 1st-tier automotive supplier.

Management of data protection & IT security-related projects. Adjustments to knowledge management and consulting processes.

Activities:

• Data protection consulting
• Process optimization in in-house consulting
• Interface to specialist departments, IT security, development and management

• Monitor supplier performance, including KPI analysis and follow-up on actions
• Conduct supplier assessments & risk analyses
• Plan and conduct supplier and process audits (VDA 6.3, ISO 9001)
• Develop supplier-related processes and incoming goods strategies
• Support PPAP approvals, sampling, and initial sample inspections
• Analyze quality deviations and launch sustainable CAPA measures
• Prepare reports and analyses for management and customers
• Guide new suppliers through a structured onboarding process

• Overall leadership of several strategic operations projects focusing on Workplace Services, SLA Framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as the introduction of system monitoring and feasibility studies for 24x7 operations, in some cases including implementation in ServiceNow
• Creation of various ServiceNow operating concepts covering training, access rights, and emergency management as part of a new cloud hosting initiative for the ServiceNow platform
• Executive board reports and leadership of steering committees as part of company-wide strategic objectives, as well as the establishment of new balanced scorecards for measuring KPIs related to optimization-driven project results

• Strategic planning, detailed technical preparation and operational management of an email gateway migration in a security-critical government environment.
• Preparation of the technical specification and development of technical concepts and migration approaches in line with BSI requirements.
• Technical requirements management with business units, information security and operations.
• Coordination of external service providers, integrators and implementation partners; maintenance of project plans, milestones, resources, risks and dependencies.
• Regular reporting to project management, the program environment and internal stakeholders.

Assignment focus: Leading digital restructuring in a highly regulated Defence and Aerospace environment. Focus areas: improving data flows and data quality, introducing paperless data collection in production, integrating machine data for automatic SPC calculation and process control, as well as cybersecurity analyses.

Main objectives:

• Analyze, structure and improve data flows and data quality in production
• Introduce paperless data collection in manufacturing areas
• Integrate machine data for automatic SPC data calculation and process control
• Implement digital restructuring while meeting regulatory requirements in the Defence environment

Measures and results:

• Analyzed and structured existing production data flows as a basis for control and reporting
• Established mechanisms to ensure data quality and availability across manufacturing areas
• Introduced paperless data collection in production — replacing manual and paper-based processes
• Integrated machine data for automatic SPC data calculation (control charts, Cp/Cpk) and real-time process control
• Conducted cybersecurity analyses in the production and IT environments

Area of responsibility: Project management for digital restructuring, paperless production, data management and data quality in a highly regulated Defence and Aerospace environment.

• PMO Lead Security Clearance 2 (SÜ2) verified
• Reporting to the GMN sub-program management
• System maintenance 25+
• Functional management and coordination of the Jira setup
• Preparation of decision papers (e.g. project planning, governance model, communication plans, controlling models, roles and responsibilities matrices)
• Development of program-wide knowledge management using Confluence, creation of Jira concept
• Development of an access concept for all project tools
• Analysis of existing processes, identification of improvement potential, and design of solutions to increase efficiency and effectiveness
• Development of a concept for introducing automation approaches into existing tools
• Creation of intranet articles for project marketing
• Responsible for project governance through reporting and resource planning in the sub-program
• Agile development of the project methodology
• Gathering customer requirements (Requirements Engineering)
• Preparation and support of contract negotiations (7-year term, 500+ million budget)

As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account  Ensuring end-to-end control of all IAM-related technical services  Establishing clear responsibilities and accountabilities across the IAM landscape  Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security  Introducing and monitoring governance policies to ensure compliance and security  Continuously improving IAM processes and systems through regular audits and service reviews  Taking part in external process audits as part of official audits against ISO standards  Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments  Conceptually developing the KPI system for measuring process quality

• Conduct comprehensive assessments of operational processes to ensure alignment with ASPICE standards.
• Develop and implement quality assurance frameworks that enhance product and process quality.
• Collaborate with cross-functional teams to drive continuous improvement initiatives and foster a culture of quality.
• Provide training and support to teams on ASPICE requirements and best practices.
• Facilitate audits and assessments to identify non-compliance issues and develop corrective action plans.

• Led the hardware development and validation of a safety-critical 400-V battery management system (BMS) for the TOGG SUV program; performed system architecture reviews, schematic validations, EMC and reliability tests, and root cause analyses in compliance with relevant automotive standards (ECE-R10, CISPR25, ISO-26262). Coordinated cross-country EU engineering teams, customer reviews, and technical documentation to deliver a production-ready, validated system.

• Architected and integrated 22 state-of-the-art ADAS validation vehicles for BMW ADCAM and LIDAR programs at Magna Electronics; synchronized up to 26 heterogeneous sensors (LIDAR, RADAR, cameras, GNSS/INS) using PTP-based timing architectures. Defined the system architecture, HW/SW interfaces for hardware-in-the-loop (HIL) rework, sensor integration strategies, and data acquisition frameworks. This enabled scalable vehicle-level validation, improved validation efficiency by 25%, and reduced project costs by €1.45 million.

• End-to-end validation and integration of automotive radar platforms for a Daimler project at Continental. Developed automated open-loop hardware-in-the-loop (HIL) environments to accurately test target tracking KPIs, field-of-view limits, and thermal and voltage-related ECU state machines. Skilled use of a highly complex toolchain consisting of CANoe, Lauterbach Trace32, RADAR target simulators, and EMC shielding chambers for RF and system validation. Synchronized global, interdisciplinary teams to speed up troubleshooting and close critical technical gaps.

• Reconstructed and validated the product architecture of an electromechanical e-bike by integrating and troubleshooting critical subsystems (BMS, motor control, sensors, HMI, electronic locking systems). Built a comprehensive system-level test bench for functional testing, fault reproduction, and performance analysis; coordinated suppliers and implemented corrective actions to improve reliability and traceability.

• Defined the system architecture and validation strategy for a LIDAR platform developed in cooperation with Elmos Semiconductor; evaluated optical measurement concepts, SPAD detector integration, and system requirements, and created technical recommendations for product development and verification.

• Developed LabVIEW-based automation and verification software for a high-precision hydraulic and electromechanical test system for FTE Automotive; integrated NI DAQ hardware for high-frequency real-time capture of physical measurements. Developed automated test sequences, programmable endurance tests, troubleshooting routines, data logging, and analysis tools to improve test efficiency and traceability.

• Successfully delivered full engineering life cycles for well-known industrial customers (Magna, Continental, Farasis, FTE Automotive, BMW, Daimler, TOGG) – from requirements engineering and proof of concept to system integration and validation, technical documentation, supplier coordination, and user training.

Support for Transformation Projects:

• Expert CTO advisory and enterprise architecture consulting for several short-term transformation projects, ensuring measurable improvements in project outcomes and technical business alignment.
• Supporting strategic IT initiatives for diverse clients, driving digital transformation and optimizing technology operations to increase business value and operational efficiency.

Managing Director | Omnia Kassel UG

Corporate management, international business development, technology and innovation management

• Corporate management and international business development: Strategic and operational management of a technology-oriented consulting company. International B2B business development, development of new business areas, and establishment and maintenance of industrial, technology, and procurement partnerships.

• Technology and innovation management: Identification and evaluation of new technologies with regard to technical feasibility, commercial potential, and practical applications. Development of innovative business models, technology transfer, and support for demanding innovation projects.

• Development and project management: Design, planning, and management of technical development, procurement, and customer projects. Technical specifications, international supplier selection, coordination of external development partners, and evaluation and implementation of customer-specific solutions.

• AI research, systems development, and technology evaluation: Early recognition of the fundamental technological change brought about by generative AI. For around four years, self-initiated, almost daily intensive research, development, and testing work with leading language models, multimodal AI systems, and different model generations. Independent design and testing of around 200 complex AI workflows, multi-agent methods, and book, proposal, and evaluation agents.

• AI-supported customer projects and multimodal production: Practical implementation of proprietary and confidential customer assignments in technical design, project development, proposal preparation, specialist texts, and comprehensive documentation. Development and production of texts, images, animations, videos, speech, and avatar applications. A total of around 750 productive work results from various AI-supported projects.

• AI quality assurance, process development, and efficiency improvement: Development of multi-stage, cross-model testing and correction procedures with source comparison, independent review, and systematic error analysis. In own task-specific comparative measurements, reduced selected processing times from eight hours to one hour and improved measured accuracy from about 95 % to up to 99 %. Transfer of the findings into productive work processes and commercially usable customer solutions.

Project-based activity and availability: The entrepreneurial activities are organized on a project basis and are not connected with permanent full-time operational utilization. Therefore, there is substantial time available for external consulting, development, and management assignments, including projects with a high workload.