MaRisk Experts in Frankfurt

2nd LoD/Change the Bank (CtB)

• CtB: External consultant and workstream lead for rectifying findings by BaFin following a special IT audit in the 2nd LoD, management of the work package for revising the ICT Risk Management & ICT Asset Classification in accordance with DORA Chapter 2, the processes for structural analysis, protection requirements, and control assessments (4 FTEs).

Project, Strategic Consulting – building the Data Strategy and Data Governance Policy for the German branch, client (private bank Julius Bär, headquarters Zurich), March 2026 – present

• Design and negotiation of the data strategy with key stakeholders, including obtaining board sign-off (strategic consulting) – in this context, regulatory advice on data regulations in the EU and specifically for Germany. The data strategy includes: Data Lifecycle Management: data capture, data storage, data usage, data retention policy, data quality incident management
• Definition of milestones and technical feasibility for implementing TOM for the data strategy, data quality checks, metrics, and a metadata inventory to ensure the bank’s compliance with DORA, BCBS239, and MaRisk requirements.

Core project data change, client: (ING Bank, Frankfurt am Main), March – December 2025

• Concept development and solution design for new end-to-end processes including technical interfaces
• Definition of synchronization logic and data flows between legacy and target systems (decommissioning of legacy systems)
• Analysis and validation of data models
• Stakeholder communication with product owners, feature engineers, UX designers, and operational teams for decision-making
• Analytics and impact assessments, e.g. to assess downstream effects and regulatory requirements
• Documentation and comments on technical and business requirements to support implementation in agile squads

Project digitalization of a user group, client: (ING Bank, Frankfurt am Main), as Interim Product Owner, Jan 2025 – present

• Co-shaping key decisions on data architecture and process logic in the context of historized data and user login functionality
• Development of business solution concepts for migration to the target system, including system integration and data flows
• Support with analytics and impact analyses, especially regarding the ability to provide information to law enforcement authorities
• Active coordination with stakeholders from different squads to support decision-making and ensure regulatory requirements are met
• Creation of test scenarios for operational teams and backend systems in the area of API management using Postman and Bruno.

• Platform established and running stably; deliberately reducing my involvement to refocus on an engineering mandate in the financial sector.
• Built an own SaaS learning platform from the ground up and scaled it to over 20,000 users (over 6,000 courses sold, B2C and B2B); end-to-end ownership from development through infrastructure to operations.
• Built a lab environment that provisions an isolated Linux container per user (Docker, Traefik, Go), including automatic provisioning and a dedicated subdomain per user.
• Integrated LLM features into the product and accelerated development end-to-end with AI-assisted workflows (Claude Code, Codex); CI/CD with automated tests.

• Management and optimization of a portfolio of about 100 projects (launches, in-field solutions, data & analytics, digital solutions, digital products)
• Optimization of the existing project standard (playbook) and alignment with the European and global organization (USA)
• Coaching project managers on setup, planning, cooperation with business, GDPR, GxP, data security and launches
• Preparing projects for works council information and project closeout communication
• Optimization of resource management (tracking, allocation, prioritization)
• Taking over individual project leads (off-/transboarding, event management, checking whether WhatsApp is allowed on a business smartphone)
• Supporting the hiring of external project managers
• Optimization of meeting structure, project controlling (KPIs), change and demand management
• Optimization of risk, issue, dependency and quality management and support during internal audits (GxP)
• Optimization of the portfolio steering tool (Smartsheet) on national, European and global level
• Design and implementation of a Business Value Complexity Scoring
• Building a strategic PMO with a sister department and optimizing cross-functional teams
• Reporting, communication and escalation at management level
• Leadership coaching for several future leaders (short-time assignment)
• Development of the concepts "PPM as a Service" and "Internal Customer Approach"
• Development and review of a concept "AI Data Governance" including roles and processes
• Selection and onboarding of the successor

• Supported the International Web Presence project of the Federal Employment Agency (IntWeb) in quality management, taking on responsibility for the quality of processes and project deliverables while adhering to BA standards. The project's main goals are to give professionals abroad a quick overview of their chances to move to Germany and to enable them to take the necessary steps in a consistently digital way.

• Set the fundamental guidelines using the QA handbook

• Summarized test results in QA reports for PLA

• Analyzed project outcomes for improvement opportunities

• Quality management of requirements analysis (especially processes, methods and tools)

• Ensured compliance with SERA guidelines

• Created a cross-project test concept

• Agreed on sprint completion reports

• Conducted formal reviews of deliverables according to guidelines and/or project plan

• Acted as contact person for internal audit and external audits by auditors or the Federal Audit Office (BRH)

• Technologies: JIRA, Confluence, MS Office, GitLab, Kubernetes

• Managing TPA Manager and a team of 10 Claims Operation Assistants.

• Designing and implementing processes and workstreams using Guidewire from the ground up with European claims teams across all lines of business.

• Establishing service level agreements (SLAs) and detailed key performance indicators (KPIs) with new business intelligence (BI) reporting, payment and performance analysis.

• Developing, steering and analysing 50+ strategic, operational and IT initiatives, driving digital change and AI automation in payments while meeting DORA, GDPR, ACM and BAIT MaRisk regulatory compliance.

• Increasing customer satisfaction scores by 80%.

• Attracting and mentoring market-leading operational and TPA talent.

• Demonstrating strong stakeholder leadership and swift decisional influence.

• Project manager controlling the update to ISO 27001:2022 (certification from ISO 27002:2013 to ISO 27002:2022) including gap analysis, project planning, preparation of internal and external audits, and creation and maintenance of required documentation.
• Coordination of adjusting existing measures and implementing new measures according to the new standard’s requirements, as well as continuous monitoring and adjustment of these measures.
• Regular reporting to management on progress and risks.
• Senior consultant supporting audit reviews with a focus on critical infrastructures (KRITIS), including resolving findings, creating and updating evidence documents, and amending provider contracts.
• Senior consultant reviewing all deliverables and responsibilities of the IT provider according to the existing contract: identification of over 1500 deliverables & obligations (D&O), setup of a D&O tracker (claim register), and joint expert review with service owners for various service descriptions (e.g. IT service management, workplace and print services, application and desktop services, endpoint management, email including archiving, file services, software packaging, certification, distribution).
• Senior consultant adjusting service scopes in existing service descriptions to enable end-to-end service responsibility of the provider, including identification and analysis of use cases, process analysis and optimization (incident, problem, change), as well as recording and documenting all software products in LeanIX and documenting the contract change.
• Focused services: managed software service, application and desktop service, workplace and print services, web server service, container service, M365, SAP/Oscare, output management systems (OMS), telephony and omnichannel management service.
• Project manager steering a benchmark based on the existing IT contract, including coordination of the entire benchmark process between the benchmarker, IT provider and client, review of benchmark results, and preparation and conduct of price negotiations with the IT provider.

Leading Jefferies’ DORA-driven operational resilience programme by strengthening ICT risk governance, control design, and regulatory readiness across key technology and outsourcing domains. Partnering with senior stakeholders to translate regulatory requirements into pragmatic governance, reporting, and assurance processes suitable for a global investment banking environment.

• Developed the Enterprise Register of Information (DORA Art. 28.3) to align with regulatory requirements.
• Defined and embedded ICT Risk Appetite and tolerance levels aligned to the Global Operational Risk Framework, strengthening decision-making and risk acceptance governance.
• Drove audit readiness by reviewing and re-drafting 50+ IT & Information Security policies, improving clarity, ownership, and control alignment.
• Oversaw the Operational Resilience Testing Programme (including penetration testing) and tracked remediation to closure, strengthening control assurance and reducing open findings.
• Aligned 10+ intra-group agreements with DORA regulatory standards.
• Enhanced executive-level decision-making with an enterprise ICT Risk Dashboard featuring KPIs/KRIs.

• The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.

• The internal audit is meant to ensure the company's quality standards.

• GDPR

• ISO 27001 ff.

• BSI

• DORA

• Patient data regulations

• Host / Cloud / S3 / Container / highly scalable / Nuxeo

• Budget: 50,000

• Team: 1

• Close collaboration with development teams to ensure alignment with project goals
• Assessment of in-scope assets, requirements definition and support of the public tender process up to vendor selection
• Creation and maintenance of UML sequence diagrams to document system interactions
• Intensive use of Agile/Scrum methodology and the Spotify model
• Development and implementation of cutover and rehearsal plans together with the application managers

• Support for a global systemically important "Brexit Bank" in applying for a banking license and implementing regulatory requirements in IT and outsourcing, as well as implementing DORA

• Local implementation of DORA as part of a group-wide DORA program, focusing on third-party risk management, incident/problem management, and information register

• Aligning the regulatory IT requirements of MaRisk/BAIT with the requirements of the "Brexit Bank" group, closing gaps and addressing all IT audit findings

• Interim project manager and requirements engineer in various client projects

• Final preparation for the defense to graduate with a Master's in Computer Science for the PhD

Internal audit at two credit institutions in the cooperative sector: MaRisk, risk management/overall bank management, accounting according to HGB, reporting requirements, CRR, anti-money laundering, outsourcing, compliance, KWG, capital gains tax, payment transactions, credit examination (system and individual case reviews with collateral valuation), internal control system, institutional compensation regulation, balance reconciliation, electronic banking, data protection, membership matters, account openings, personnel, associated business, inheritance regulations, special matters, goods trading, CSRD/taxonomy regulation/ESRS/sustainability, problem loans and intensive support.

Internal audit at an asset management company: outsourcing, risk management, collective fund management, anti-money laundering, institutional compensation regulation, InvMaRisk, IFRS (2023-2025).

Internal audit at a CRR credit institution including risk management, liability umbrella, procurement: MiFID II conduct of business rules according to §§ 63 ff. WpHG, KWG, HGB, WpHG, WpHG compliance, WpHGMaAnzV, EBA, BaFin (2023-2025).

External report review for financial statements of securities institutions and crypto companies: Securities Institution Act (WpIG), KWG, IFRS, appendix, management report, MaRisk, risk management/overall bank management, accounting according to HGB, reporting requirements, CRR, anti-money laundering, outsourcing, compliance, system and individual case reviews with collateral valuation, internal control system (2025).

Internal audit at a credit institution in the cooperative sector (2023-2024): MaRisk, risk management/overall bank management, accounting according to HGB, reporting requirements, CRR, anti-money laundering, outsourcing, compliance, KWG, capital gains tax, payment transactions, credit examination, internal control system, institutional compensation regulation, balance reconciliation, electronic banking, data protection, membership matters, account openings, personnel, associated business, inheritance regulations, special matters, intensive support and problem loans.

Audit of open-ended investment funds (04/2024-05/2024): AIF, KAGB, OGAW, UCITS, SICAV, management company.

Annual financial statement audit at a leasing institution (2023-2024): KWG, HGB, leasing regulations, appendix, management report, reporting requirements, compliance, anti-money laundering, outsourcing, internal audit.

Audit of regulatory requirements at securities institution according to WpIG, MaRisk, anti-money laundering (2024).

IFRS financial statement preparation for investment funds (07/2019-05/2023): HGB to IFRS conversion, appendix, hedge accounting, provisions, equity, price review, subfunds, poolfunds, SICAV, FCP, IFRS 37, IAS 32, 39, IFRS 7, IFRS 9.

Audit of reporting requirements (banking supervision law) at PIE institution (securities trading bank) (02/2023).

Workstream lead for migration of accounting for closed-end funds including closed-end funds accounting/valuation (real estate, aircraft, infrastructure including hedge accounting), particularly multi-level fund structures at overall fund level as well as individual company financial statements within funds (SPVs) according to HGB/KAGB/IFRS, fund administration (consolidation, NAV calculation, regulatory reporting, asset management, particularly fund accounting of tangible assets such as system expansion, system change, setting up new closed-end funds in existing accounting systems), preparation of decision templates from a business perspective and presentation in a steering committee, board-level communication, interface management between IT and the business department, interim assumption of coordination and continuation of VAT reporting at an asset servicing bank (11/2022-02/2023).

Advisory and support for funding applications at a funding institution (11/2022-01/2023).

Conducting annual financial statement audits for a financial holding, credit institution and securities institution according to HGB and WpIG including banking supervision law review (internal audit, anti-money laundering, compliance, MaRisk, CRR, institutional compensation regulation) (03/2022-07/2022).

Annual financial statement audit of a credit institution with a focus on crypto business/crypto trading according to HGB and WpIG including banking supervision law review (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation, CRR, compliance, anti-money laundering, outsourcing) (03/2022-07/2022).

Conducting annual financial statement audits for a financial holding, credit institution and securities institution according to HGB and WpIG including banking supervision law review (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation) (03/2022-07/2022).

Support of internal audit at a credit institution (02/2022-04/2022).

Project-related quality assurance (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation, accounting according to commercial law) and report review during annual financial statement audit of a securities trading bank (10/2021-03/2022).

Project-related quality assurance and report review during annual financial statement audit (including banking supervision law including problem loans and intensive support and executed corporate actions) of a commercial bank (10/2021-03/2022).

IFRS conversion of SPACs (05/2021-08/2021).

Advisory and support for funding applications at a funding institution (04/2021-06/2021).

Support of internal audit at a credit institution (02/2021-04/2021).

Project-related quality assurance (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation, accounting according to commercial law) and report review during annual financial statement audit of a securities trading bank (10/2020-03/2021).

Project-related quality assurance and report review during annual financial statement audit (including banking supervision law and executed corporate actions) of a commercial bank (10/2020-03/2021).

Training in IFRS 17 topics (01/2021).

Annual financial statement audit according to HGB (including banking supervision law and corporate actions) at a factoring company (09/2020-11/2020).

Support in preparation of consolidated financial statement at a real estate leasing company according to HGB (08/2020).

Final audit of 4 leasing companies including banking supervision law and executed corporate actions (04/2020-08/2020).

Project-related quality assurance (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation, accounting according to commercial law) and report review during annual financial statement audit of a securities trading bank (12/2019-06/2020).

Project-related quality assurance and report review during annual financial statement audit of a commercial bank (12/2019-04/2020).

Functional quality assurance during preparation of annual financial statement according to HGB and answering technical questions (management report, notes) regarding accounting according to HGB at a commercial bank specializing in project and aircraft financing (11/2019-02/2020).

Support of "Accounting Principles" department at a commercial bank with focus on "consumer credit business" particularly on IFRS 9 (hedge accounting, deferred taxes HGB and IFRS) and IFRS 16 (12/2018-06/2019).

Preparation of model audit report and critical review of fund reports for an audit firm.

Preparation of checklists for WpHG audits (12/2018-03/2019).

Project-related quality assurance and report review during annual financial statement audit of a commercial bank (12/2018-03/2019).

Project-related quality assurance (internal audit, anti-money laundering, compliance, MaRisk, institutional compensation regulation, accounting according to commercial law including executed corporate actions) and report review during annual financial statement audit of a securities trading bank (12/2018-03/2019).

Interim management at an international bank with focus on wealth management: advisory on classification of financial instruments under HGB and IFRS, ensuring IFRS reporting preparation, monitoring and derivation of measures to ensure annual financial statement according to HGB considering Brexit changes, ensuring and documenting expert concepts and process descriptions, advisory on technical questions regarding BFA 2, BFA 3, IAS 39, IFRS 9 (06/2018-11/2018).

Internal inspection (04/2018-05/2018).

Project-related quality assurance during execution of annual financial statement audit (with corporate actions) at a securities trading bank and commercial bank (01/2018-03/2018).

Internal audit at an asset management company (anti-money laundering, KAMaRisk, MAD, MIFIR, PRIIP regulation, WpHG) (12/2017-01/2018).

Participation in monthly reconciliations and plausibility checks of derivative results according to HGB and IFRS including executed corporate actions (IAS 39 and IFRS 9), preparation of reports on development and analysis of derivative results, regular preparation of IFRS reporting package, support of commercial law annual financial statement preparation (appendix, management report), support in SAP Fin introduction relating to derivatives including testing of financial instruments in SAP Bank Analyzer for correct posting and support in basic work and basic questions at a public-law development bank in Frankfurt (11/2016-11/2017).

Report review for WpHG audit at a securities trading bank (10/2017).

Project-related quality assurance during execution of annual financial statement audit at a securities trading bank by a mid-size audit firm (01/2017-04/2017).

Preparation of technical IT concept IFRS 9 for loans and answering technical questions IAS 39, IFRS 9 for loans, treasury, hedge accounting and fair value (05/2016-10/2016).

Audit of consolidated package according to IFRS (01/2016).

Participation in development of a group-wide chart of accounts (including representation of corporate actions) according to HGB and IFRS (07/2014-03/2016).

Participation in preparation of a cross-functional (risk management, controlling, accounting, tax) valid new product hierarchy - financial instruments in the group (07/2014-03/2016).

ECB audit: Asset Quality Review Phase 2 PPA (spring 2014).

Audit according to WpHG and deposit law (including MiFID) (spring 2014).

Audit of annual financial statement of a credit institution (including FinRep) (11/2013-03/2014).

Preparation of annual financial statement at a leasing company (accounting according to HGB) including substance value calculations according to HGB and IFRS (10/2012-11/2013).

Preparation of (consolidated) financial statements of credit institutions, clearing and exchange companies (accounting according to HGB and IFRS), preparation of notes according to HGB and IFRS and comparison of annual financial statement information with FINREP criteria and considering MiFID requirements (11/2010-06/2012).

Management of internal audit at an investment stock corporation and securities trading bank (2012).

Additional topics: WpHG compliance audit, anti-money laundering and notification requirements, risk management systems (MaRisk and InvMaRisk), compliance, contingency plan, outsourcing, trading book – investment book, trading and settlement, investment limits, management fees and performance calculations, accounting topics particularly financial instruments including hedge accounting, fair value measurement, pensions, disposal of business segments, interest effects on long-term provisions and liabilities, deferred taxes, subsidiary and associated companies, impairment, foreign currency translation, support of accounting during planned merger of two exchange companies, support of accounting during implementation of full banking license requirements, support of accounting during integration of a majority-owned company into group chart of accounts, risk management audit, audit of processes for restructuring and workout loans, portfolio audit according to WpHG, technical project responsibility for central price provision project for securities/active market, organization and management of meetings and preparation of decisions on this project, development/preparation of IFRS expert concepts considering accounting modernization law on equity-debt, impairment, market price use according to IAS 39/active market considering exposure draft fair value measurement, deferred taxes, operational support in determination of notes according to HGB in a securities and loans group, technical contact person for IFRS questions in the Financial Instruments department, preparation of seminar materials on foreign currency translation according to BilMoG, ad hoc special investigations.