IT Service Management Experts in Berlin

Andreas Rühl

Principal Consultant Information Security

Last position:

Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting

Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations

Martina Büttner-Leibovici

UX Lead / Product Design Manager

Last position:

UX Designer and Consultant at Self Employed

As UX Manager and UX Team Lead, my focus is on creating the conditions for excellent UX design – not only by improving results, but also by investing in people, culture, and systems. I am convinced that sustainable UX design comes from a combination of autonomous teams, clear rituals, and a shared vision of product and user value.
My job is to enable successful UX design within a company. This includes setting up and growing the UX team, establishing a design system, designing design processes, defining and developing UX maturity and UX culture within the company, and developing strategies that combine business requirements and user experience design.
Consulting and conceptual support in UX and product topics (project-based)
Deepening strategic topics: UX Strategy, Organizational Design, UX Maturity
Market and role orientation with a focus on Head of UX / UX Leadership positions

Broder Feddersen

Project Management and Consulting

Last position:

Program Manager - IT Networks Service Management and Transition at Die Autobahn GmbH des Bundes

Managing the further development of IT network service management
Overall leadership of the transition, consulting on the transition of IT network services
IT coordination of a tender in the area of IT network services

For (3) Further development of IT network service management Managing follow-up work for the transition (including setup of issue management) Managing and monitoring the performance of external service providers Consulting and managing the further development of IT network service management (processes, procedures, organization, tools)

For (2) Transition of IT network services Overall leadership of the transition (transfer of operational responsibility for IT network services to an IT service provider) Definition and setup of transition governance Planning and tracking of milestones, dependencies and cutover windows Managing the preparation, achieving operational readiness & process/tool integration Carrying out service handovers (cutover, parallel run, stabilization) Ensuring risk management, progress tracking, steering committee and management reporting, stakeholder management

For (1) IT coordination of the IT network services tender Managing all IT work streams of an IT network tender Coordinating the creation of all service descriptions IT review / evaluation of offers IT representative in bidder talks/negotiations Creating presentations/decision papers

Bert Wagner

IT Consultant, Program / Project Manager, IT Architect

Last position:

IT Consultant, Program / Project Manager, IT Architect at Self-Employed

Consulting and project management in IT projects
Data and process analytics, evaluation, reporting, optimization, dashboards
Program leadership, project leadership
Strategic consulting
Rollout, cutover (design, automation, planning)
IT infrastructure, IT system architecture, ITIL
Process and application management
ITSM, IT security, data protection, IAM
BPNM
MDM

Yves Wullaert

Program Director, Project Manager

Last position:

Program Director, Project Manager

Senior program director and enterprise architect with nearly 30 years of operational experience in HR, ERP, security, risk management, finance, PLM and SLM.
Expertise in IT program and project management, engineering, process management and organizational development.
Experience working for the world leader in service management software, rail transportation and a leading tier 1 automotive supplier.
Subject matter expertise in finance, automation processes, logistics, ERP and PLM and integration, including related end-to-end lifecycle data management and enterprise architecture.
Specializes in managing large and complex engagements, programs and projects from demand, idea and strategy to operation, including stakeholder and change management.
Expertise areas: HR, ERP, SecOps, integrated risk management, supply chain and operations, finance, SLM, product strategy, lifecycle management, shared services, IT and PLM.
Industry experience in technology, tier 1 automotive, transportation and logistics, manufacturing, high technology and software industries, banking and insurance, and railway.
Experience with SecOps (security incident response and vulnerability management), digital portfolio management, integrated risk management, service portfolio management and business continuity planning.
Experience defining and designing integrated risk management including security and operations (response plans), CMDB initiatives and shared service implementations.
Implemented integrated risk management including digital business continuity plans, disaster recovery plans, digital maturity assessments and security risk registers.
Technology skills include SAP, HR, time and attendance, ERP, PLM, ALM, ITSM and CAD systems.
Experience with cloud-based services and master data management.
Familiar with TOGAF, IT4IT, SAFe and PPM.
Project client exposure to companies such as Siemens, BMW, Daimler, BASF, Bayer, Bosch, DHL, DB Schenker, ServiceNow, Bombardier, KION, Johnson Controls, Schaeffler, Deutsche Telekom, SAP, FEMSA, CEMEX, Nestlé, Heineken, Air France/KLM, Airbus, Vodafone, Majorel, Virgin Trains, Equinor, ASML and Volvo.
Holds a master’s degree in informatics and a bachelor’s degree in applied economics.

Björn Stark

Interim IT Director

Last position:

External IT Director SAP / IT Transformation Manager at Finanzministerium Berlin

IT infrastructure / SAP Grantor / SAP BTP transformation project at the Berlin Ministry of Finance to digitalize public funding programs. The goal was a clean-core-oriented SAP BTP solution architecture with CAP/RAP services, APIs, integrations, and operational readiness for run, AMO, and AMS structures.

Industry: Federal authority, FM Berlin
Budget 2026: 5 million EUR
Planned budget for 2027: 8.7 million EUR
Team size: 45 FTE

Paul Karnowka

Program Manager – Multi-Project Operational Stabilization (Operational Excellence)

Last position:

Program Manager – Multi-Project Operational Stabilization (Operational Excellence) at ITDZ - IT Dienstleistungszentrum Berlin

Overall leadership of multiple strategic operations projects focused on workplace services, SLA framework, access management, certificate management, e-learning, backup & recovery, test management, and capacity management, as well as implementing system monitoring and feasibility studies for a 24x7 operation, partly including ServiceNow implementation
Development of various ServiceNow operating concepts related to training, permissions, and emergency management as part of a new cloud-hosting initiative for the ServiceNow platform
Board reporting and leading steering committees within the framework of corporate strategic objectives, as well as establishing new balanced scorecards to measure KPIs for optimization-driven project results

Flamur Abdyli

Fractional Chief Information Security Officer

Last position:

Fractional Chief Information Security Officer at VR Smart Guide GmbH

Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
Implement continuous monitoring solutions to detect and respond to threats in real time.
Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
Collaborate with project teams to address findings and ensure that security risks are managed effectively.
Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
Facilitate a culture of security awareness throughout the organization through training and regular communication.
Lead security initiatives that align with the organization’s long-term strategic goals.
Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

Heiko Krain

SAP Development, Adobe Form Development

Last position:

SAP development, Adobe form development at Arvato SE

conversion of a function-group-based Adobe Interactive Forms framework to an object-oriented Adobe framework for documents in transport/logistics and dunning (FI)
Adobe Lifecycle Designer 11.0.1 for SAP
creating new and troubleshooting existing forms, function modules, programs, classes, and methods
maintaining Smart Forms
document printing, email sending, and file archiving
message control for deliveries, orders, invoices, proforma invoices, and transports
ticket system: Jira
communication: Microsoft Teams
migrating customers to a new SAP framework
handling incident and change request tickets
software: SAP ERP 6.0, SAP_ABA 7.5G, S4CORE 1.05

Konstantin Simonow

Head of Cyber Defense Unit

Last position:

Head of Cyber Defense Unit at Simonow Consulting GmbH

Established the Cyber Defense Unit following a major cybersecurity incident
Recruited a team of Cybersecurity Architects, Engineers and Senior Security Analysts
Managed the team’s resources and activities in defining and implementing a target cybersecurity architecture, monitoring the IT landscape, detecting and responding to security events and incidents, and consulting other IT stakeholders in their efforts to improve the organization’s cybersecurity posture (comparable to Technical CISO role)
Led the separation of Information Security (governance, risk, compliance) and Cyberdefense Unit (technical cybersecurity), in close collaboration with the CISO
Led the selection and onboarding of external Security Operations Center (MSSP)

Axel Schnell

Product Owner and Scrum Master ServiceNow

Last position:

Product Owner and Scrum Master ServiceNow at BARMER

Product Owner ServiceNow
Scrum Master and agile project management for the further development of ServiceNow and its IT interfaces
Coordination of requirements with all process/service owners and external providers (incident, problem, knowledge, change, service request, catalog, software asset/hardware asset/config management, financial management, SecOPS)
Management of internal and external software developers
Coordination of interfaces and catalogs of new IT providers

Damir Harbas

Founder and Senior Advisor

Last position:

Founder and Senior Advisor at Harbas & Company

Advisory for Bank-Verlag GmbH on establishing a risk management and compliance function by defining the DORA strategy, conducting a DORA gap analysis and developing all DORA-relevant policies, supporting the design and roll out of the risk management framework, and providing overall PMO support for all DORA-relevant streams
Ensured the conceptual and operational setup of a Cyber Defence Center for Vienna Insurance Group AG, including the implementation of regulatory requirements, development of the organizational, tax, and financial structure, including up- & downstream cost allocation model, DORA compliance, outsourcing, data protection, and works council requirements, gap analysis for contracts with regard to DORA, EIOPA, Solvency II and best practices and creation of policies in line with DORA
Definition of an IT security target operating model for Oldenburgische Landesbank, including definition of processes, responsibilities and interfaces for a new, DORA-compliant IT security operations area that can be integrated into the existing IT organization and that is to be established or expanded
Implementation of a service management readiness and maturity analysis according to ITIL for Ottobock Group, definition of an ITSM target operating model including processes, organization and governance, and derivation of measures to close identified gaps
Developed an overarching cloud strategy for the corporate segment of ThyssenKrupp AG, involving all business units and stakeholders while considering business unit specific requirements
Conducted an IT benchmark for a business unit of ThyssenKrupp AG, including structural analysis of the organizational structure and IT strategy
Introduced a company-wide business continuity management system for Krieger Group, including identification and assessment of potential crisis scenarios and risks, and establishment of structures
Developed an S/4HANA transformation strategy for Pfalzwerke AG, including a transformation plan and preliminary project
Developed a restructuring strategy for Pfalzwerke AG, including the future IT delivery model, transformation plans, and business cases for each scenario
Conducted an IT cost review for AMS-OSRAM AG, including analysis and optimization of IT costs and budget, as well as planning and implementing a strategy to reduce IT costs.

Mücahit Yilmaz

IT-Consultant & IT-Project Manager

Last position:

Managing Director & IT Freelancer at Tenero Digital UG

IT consulting and freelance IT project management
Projects in administrative support (process documentation, reporting & analysis)
Moderation of workshops for clients in the education sector

Matthias Steinmann

Senior Security Consultant (freelance)

Panketal

Last position:

Senior Security Consultant (freelance) at DVZ M-V

ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
Preparation for OWASP penetration test, incident response plan, risk analysis
DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM

Gunnar Menzer

Head of IT & Procurement