KRITIS Experts in Frankfurt

• Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
• Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
• Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
• Preparing projects for works council information and project closeout communication
• Optimization of resource management (tracking, allocation, prioritization)
• Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
• Supporting the hiring of external project managers
• Optimization of meeting structure, project controlling (KPIs), change and demand management
• Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
• Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
• Design and implementation of a Business Value Complexity Scoring
• Building a strategic PMO with a sister department and optimizing cross-functional teams
• Reporting, communication and escalation at management level
• Leadership coaching for several future leaders (short-time assignment)
• Development of the concepts "PPM as a Service" and "Internal Customer Approach"
• Development and review of a concept "AI Data Governance" including roles and processes
• Selection and onboarding of the successor

• Built and successfully certified the Information Security Management System (ISMS) according to ISO 27001 in seven country organizations (Ghana, India, Bangladesh, Uzbekistan, Serbia, Kosovo, Albania).
• Full implementation of the ISMS from kick-off phase to certification, including defining the governance structure and process landscape.
• Developed and delivered target-group-specific trainings, workshops, and coaching sessions for local responsible persons on the basics of information security and ISMS operations.
• Designed and continuously improved training concepts and content to increase understanding and acceptance.
• Identified and implemented improvements in processes and tools, including risk management for international projects.
• Optimized central ISMS core processes from the idea through pilot operation and fine-tuning to global rollout.
• Optimized knowledge management, as well as work aids and methods for the global ISMS team.
• Built and moderated cross-functional coordination with key interfaces to the ISMS.
• Microsoft Teams, Excel, SharePoint Lists, Power Apps.

• Project management
• Coordination of the rollout of 148 firewalls (Palo Alto) for 74 buildings at more than 14 locations in EMEA
• Management of the team (8 employees)
• Communication with senior management (local) and site managers (EMEA)
• Ensuring work packages were completed on time and according to requirements, including formal acceptance
• Extensive use of the relevant Microsoft tools
• Wrike (project management)

• Recognition of national notified bodies
• Preparation of cybersecurity competency reports
• EU Radio Equipment Directive

• Project manager controlling the update to ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022) including gap analysis, project planning, preparation of internal and external audits, and creation and maintenance of required documentation.
• Coordination of adjusting existing measures and implementing new measures according to the new standard’s requirements, as well as continuous monitoring and adjustment of these measures.
• Regular reporting to management on progress and risks.
• Senior consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including resolving findings, creating and updating evidence documents, and amending provider contracts.
• Senior consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of over 1500 deliverables & obligations (D&O), setup of a D&O tracker (claim register), and joint expert review with service owners for various service descriptions (e.g. IT service management, workplace and print services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification, distribution).
• Senior consultant adjusting service scopes in existing service descriptions to enable end-to-end service responsibility of the provider, including identification and analysis of use cases, process analysis and optimization (incident, problem, change), as well as recording and documenting all software products in LeanIX and documenting the contract change.
• Focused services: managed software service, application and desktop service, workplace and print services, web server service, container service, M365, SAP/Oscare, output management systems (OMS), telephony and omnichannel management service.
• Project manager steering a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and client, review of benchmark results, and preparation and conduct of price negotiations with the IT provider.

Overall responsibility for managing a clinical digitization project in a regulated hospital environment.

Design and implementation of a patient call and management system (PASO) for the orthopedics department of a large hospital.

• Project management, planning, and control
• Process analysis and optimization, and managing implementation and rollout
• Coordination with clinical departments, IT, and external service providers
• Ensuring integration into existing IT and process landscapes

Project scope: 310 person-days, team size: 21 members.

• The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.

• The internal audit is meant to ensure the company's quality standards.

• GDPR

• ISO 27001 ff.

• BSI

• DORA

• Patient data regulations

• Host / Cloud / S3 / Container / highly scalable / Nuxeo

• Budget: 50,000

• Team: 1

• Ensuring stable operation of business-critical applications in the energy environment (KRITIS-adjacent systems), coordinating with IT operations on certificates, permissions, and security-relevant logging
• Continuous monitoring of interfaces, processes, and system states including analysis of deviations and performance issues
• Development and setup of secure interfaces including authentication and access concepts
• Incident management: prioritization, root cause analysis, coordination of issue resolution with IT operations, business units, and external service providers
• Change and release management including coordination, test coordination, go-live, and post-live support
• Product owner for operational systems in day-to-day operations (forecasts, schedule management, market data import and export, contract management, regulatory reporting)
• Documentation of operational processes, changes, and incidents to ensure traceability and auditability
• Automation and digitization of operational processes
• Introduction and use of AI-supported analysis and monitoring approaches and agents with Microsoft 365 Copilot

• Auditing CIS evidence of the SOC providers T-Systems Austria and Cancom GmbH
• Mapping of VAIT, ISO:IEC 27002 and CIS 7.0 requirements for the IT realignment strategy of the German subsidiaries in threat intelligence and zero trust
• Reviewing SIEM evidence, reporting, incident management and security breaches
• Reviewing IT asset management regarding ITSCM and BCM processes
• Employee awareness and compliance training focused on CEO fraud
• Advising the chief information security officer

• Modernised post-merger regulated payment-processing infrastructure (KRITIS).
• Established cloud-enabled platform and ensured PCI and regulatory compliance.