IT Service Management Experts in Berlin

• Development and implementation of tailored information security strategies

• Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

• Risk management and creation of security concepts

• Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

• Building and improving security organizations

• Creation and implementation of guidelines, policies, work instructions, and process descriptions

• Audit support and certification preparation

• Conducting trainings, workshops, and awareness campaigns

• Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

• Conducting penetration tests and vulnerability analyses

• Consulting on the selection, integration, and management of security architectures in complex IT environments

• Consulting on ITSM and managed security services and SOC

• Leading and managing complex projects to improve information security

• Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

• Introduction and quality assurance of management, documentation, and knowledge management systems

• Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

• Development and implementation of risk analysis procedures

• Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

• Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

• Awareness campaigns to promote security culture in companies

• Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

• Simulations and exercises to prepare for information security incidents

• Interim management for leading information security projects or IT security organizations

• Taking on the role of an external CISO (Chief Information Security Officer)

• Support in developing and implementing IT security and corporate strategies

• Coaching and mentoring of managers in the field of information security

• Building and leading security departments as well as recruiting and qualifying employees

• Temporary assumption of management responsibility in critical situations

• As UX Manager and UX Team Lead, my focus is on creating the conditions for excellent UX design – not only by improving results, but also by investing in people, culture, and systems. I am convinced that sustainable UX design comes from a combination of autonomous teams, clear rituals, and a shared vision of product and user value.

• My job is to enable successful UX design within a company. This includes setting up and growing the UX team, establishing a design system, designing design processes, defining and developing UX maturity and UX culture within the company, and developing strategies that combine business requirements and user experience design.

• Consulting and conceptual support in UX and product topics (project-based)

• Deepening strategic topics: UX Strategy, Organizational Design, UX Maturity

• Market and role orientation with a focus on Head of UX / UX Leadership positions

• Consulting and project management in IT projects
• Data and process analytics, evaluation, reporting, optimization, dashboards
• Program leadership, project leadership
• Strategic consulting
• Rollout, cutover (design, automation, planning)
• IT infrastructure, IT system architecture, ITIL
• Process and application management
• ITSM, IT security, data protection, IAM
• BPNM
• MDM

• Senior program director and enterprise architect with nearly 30 years of operational experience in HR, ERP, security, risk management, finance, PLM and SLM.
• Expertise in IT program and project management, engineering, process management and organizational development.
• Experience working for the world leader in service management software, rail transportation and a leading tier 1 automotive supplier.
• Subject matter expertise in finance, automation processes, logistics, ERP and PLM and integration, including related end-to-end lifecycle data management and enterprise architecture.
• Specializes in managing large and complex engagements, programs and projects from demand, idea and strategy to operation, including stakeholder and change management.
• Expertise areas: HR, ERP, SecOps, integrated risk management, supply chain and operations, finance, SLM, product strategy, lifecycle management, shared services, IT and PLM.
• Industry experience in technology, tier 1 automotive, transportation and logistics, manufacturing, high technology and software industries, banking and insurance, and railway.
• Experience with SecOps (security incident response and vulnerability management), digital portfolio management, integrated risk management, service portfolio management and business continuity planning.
• Experience defining and designing integrated risk management including security and operations (response plans), CMDB initiatives and shared service implementations.
• Implemented integrated risk management including digital business continuity plans, disaster recovery plans, digital maturity assessments and security risk registers.
• Technology skills include SAP, HR, time and attendance, ERP, PLM, ALM, ITSM and CAD systems.
• Experience with cloud-based services and master data management.
• Familiar with TOGAF, IT4IT, SAFe and PPM.
• Project client exposure to companies such as Siemens, BMW, Daimler, BASF, Bayer, Bosch, DHL, DB Schenker, ServiceNow, Bombardier, KION, Johnson Controls, Schaeffler, Deutsche Telekom, SAP, FEMSA, CEMEX, Nestlé, Heineken, Air France/KLM, Airbus, Vodafone, Majorel, Virgin Trains, Equinor, ASML and Volvo.
• Holds a master’s degree in informatics and a bachelor’s degree in applied economics.

IT infrastructure / SAP Grantor / SAP BTP transformation project at the Berlin Ministry of Finance to digitalize public funding programs. The goal was a clean-core-oriented SAP BTP solution architecture with CAP/RAP services, APIs, integrations, and operational readiness for run, AMO, and AMS structures.

• Industry: Federal authority, FM Berlin
• Budget 2026: 5 million EUR
• Planned budget for 2027: 8.7 million EUR
• Team size: 45 FTE

• Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
• Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
• Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
• Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
• Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
• Implement continuous monitoring solutions to detect and respond to threats in real time.
• Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
• Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
• Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
• Collaborate with project teams to address findings and ensure that security risks are managed effectively.
• Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
• Facilitate a culture of security awareness throughout the organization through training and regular communication.
• Lead security initiatives that align with the organization’s long-term strategic goals.
• Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
• Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.

• Managing the further development of IT network service management

• Overall leadership of the transition, consulting on the transition of IT network services

• IT coordination of a tender in the area of IT network services

For (3) Further development of IT network service management Managing follow-up work for the transition (including setup of issue management) Managing and monitoring the performance of external service providers Consulting and managing the further development of IT network service management (processes, procedures, organization, tools)

For (2) Transition of IT network services Overall leadership of the transition (transfer of operational responsibility for IT network services to an IT service provider) Definition and setup of transition governance Planning and tracking of milestones, dependencies and cutover windows Managing the preparation, achieving operational readiness & process/tool integration Carrying out service handovers (cutover, parallel run, stabilization) Ensuring risk management, progress tracking, steering committee and management reporting, stakeholder management

For (1) IT coordination of the IT network services tender Managing all IT work streams of an IT network tender Coordinating the creation of all service descriptions IT review / evaluation of offers IT representative in bidder talks/negotiations Creating presentations/decision papers

• Designed, managed, and implemented the company’s operational, compliance, procurement, and financial strategy, ensuring alignment with rapid scaling and regulatory objectives.
• Built and scaled operational infrastructure across IT, HR, Finance, Procurement, and Compliance, supporting growth from 4 to 20 team members in 6 months.
• Oversaw financial management of OPEX, including budgeting, monitoring, and cost optimization to sustain high-growth operations.
• Developed and executed a procurement strategy, including vendor selection, negotiation, and performance oversight.
• Procured and managed external consultants (compliance, quality, regulatory experts) and orchestrated collaboration across internal teams and external partners to meet milestones.
• Implemented policies, SOPs, and business systems (compliance tracking, eQMS, payroll, vendor management, data governance) to support regulatory compliance and scalability.
• Managed and actively oversaw regulatory and compliance programs, embedding GDPR, HIPAA, SOC 2, ISO 27001, and ISO 27701 requirements into day-to-day operations.
• Directed the rollout of a Quality Management System (QMS) aligned with ISO 13485 to prepare for medical device and AI regulatory certifications.
• Led people and culture development, establishing onboarding, performance management, and cross-functional collaboration structures to scale the organization effectively.
• Established risk management and business continuity frameworks, including security controls, risk registers, and compliance safeguards.
• Engaged executive leadership, board, and investors to align operational strategy with corporate goals and market expansion.
• Enabled technology-driven operations, selecting and implementing digital systems (e.g., Drata, Qualio) to ensure compliance and efficiency.
• Scaled StratifAI’s operational backbone to support rapid growth and international market readiness.
• Achieved ISO 27001, ISO 27701, SOC 2, GDPR, and HIPAA compliance within 6 months, enabling enterprise and healthcare partnerships.
• Implemented a QMS system aligned with ISO 13485, paving the way for regulatory approvals and positioning for upcoming ISO 13485 certification, CE-IVDR marking, and FDA clearance within 12 months.
• Designed and executed governance, procurement, and financial controls, ensuring efficient resource allocation and sustainable compliance.
• Established a culture of structured growth, integrating people, processes, and compliance frameworks to maintain operational excellence.
• Enabled StratifAI to confidently enter regulated US and EU markets, building the foundation for long-term expansion.

• Delivering AI training and workshops for enterprises on Generative AI, CCaaS & CRM platforms
• Advisory on digital transformation, process optimization and AI-driven automation in CX and operations environments
• Interim executive leadership roles in customer care and operations excellence at C-level / Director level

• conversion of a function-group-based Adobe Interactive Forms framework to an object-oriented Adobe framework for documents in transport/logistics and dunning (FI)
• Adobe Lifecycle Designer 11.0.1 for SAP
• creating new and troubleshooting existing forms, function modules, programs, classes, and methods
• maintaining Smart Forms
• document printing, email sending, and file archiving
• message control for deliveries, orders, invoices, proforma invoices, and transports
• ticket system: Jira
• communication: Microsoft Teams
• migrating customers to a new SAP framework
• handling incident and change request tickets
• software: SAP ERP 6.0, SAP_ABA 7.5G, S4CORE 1.05

• Established the Cyber Defense Unit following a major cybersecurity incident
• Recruited a team of Cybersecurity Architects, Engineers and Senior Security Analysts
• Managed the team’s resources and activities in defining and implementing a target cybersecurity architecture, monitoring the IT landscape, detecting and responding to security events and incidents, and consulting other IT stakeholders in their efforts to improve the organization’s cybersecurity posture (comparable to Technical CISO role)
• Led the separation of Information Security (governance, risk, compliance) and Cyberdefense Unit (technical cybersecurity), in close collaboration with the CISO
• Led the selection and onboarding of external Security Operations Center (MSSP)

• Leasing, lifecycle and process management for Apple iPhones, maintenance and expansion of the MDM system, coordination of leasing, device integration into DEP and MDM, followed by a rollout and hardware swap process, plus a BYOD and Android option
• Migration of the IT ticket system from ManageEngine ServiceDesk Plus to Atlassian Jira Service Management: project management, definition of ticket types, seamless execution according to a detailed timeline, user communication, decommissioning of the old system
• Project lead: SAP interface in workforce management to automate reading of working hours
• Sub-project lead for inventory software EZO AssetSonar: demand management, software selection, procurement

• Product Owner ServiceNow
• Scrum Master and agile project management for the further development of ServiceNow and its IT interfaces
• Coordination of requirements with all process/service owners and external providers (incident, problem, knowledge, change, service request, catalog, software asset/hardware asset/config management, financial management, SecOPS)
• Management of internal and external software developers
• Coordination of interfaces and catalogs of new IT providers

• Advisory for Bank-Verlag GmbH on establishing a risk management and compliance function by defining the DORA strategy, conducting a DORA gap analysis and developing all DORA-relevant policies, supporting the design and roll out of the risk management framework, and providing overall PMO support for all DORA-relevant streams
• Ensured the conceptual and operational setup of a Cyber Defence Center for Vienna Insurance Group AG, including the implementation of regulatory requirements, development of the organizational, tax, and financial structure, including up- & downstream cost allocation model, DORA compliance, outsourcing, data protection, and works council requirements, gap analysis for contracts with regard to DORA, EIOPA, Solvency II and best practices and creation of policies in line with DORA
• Definition of an IT security target operating model for Oldenburgische Landesbank, including definition of processes, responsibilities and interfaces for a new, DORA-compliant IT security operations area that can be integrated into the existing IT organization and that is to be established or expanded
• Implementation of a service management readiness and maturity analysis according to ITIL for Ottobock Group, definition of an ITSM target operating model including processes, organization and governance, and derivation of measures to close identified gaps
• Developed an overarching cloud strategy for the corporate segment of ThyssenKrupp AG, involving all business units and stakeholders while considering business unit specific requirements
• Conducted an IT benchmark for a business unit of ThyssenKrupp AG, including structural analysis of the organizational structure and IT strategy
• Introduced a company-wide business continuity management system for Krieger Group, including identification and assessment of potential crisis scenarios and risks, and establishment of structures
• Developed an S/4HANA transformation strategy for Pfalzwerke AG, including a transformation plan and preliminary project
• Developed a restructuring strategy for Pfalzwerke AG, including the future IT delivery model, transformation plans, and business cases for each scenario
• Conducted an IT cost review for AMS-OSRAM AG, including analysis and optimization of IT costs and budget, as well as planning and implementing a strategy to reduce IT costs.