Microsoft 365 Experts

• Launched a new digital product in the Chinese market as part of a global growth strategy.

• Served as the link and coordinating interface between central product management, local Chinese teams and international stakeholders.

• Managed the overall program to coordinate complex digital projects.

• Successfully launched a digital product in China (including successful certification for the Chinese market).

• Balanced local requirements with global priorities while taking tax and regulatory requirements into account.

• Introduced a new way of working to improve collaboration and coordination across locations.

• Developed and implemented a scaling strategy for the digital business model in China.

• Used Jira, Confluence, Miro, Scrum, Agile ways of working, SAFe.

• Project language: English.

• Merging several systems, consulting for SAP Finance / Controlling overall, FI/CO, DRC, F2R, R2R, incoming and outgoing invoice mapping and target postings of contracts and BP from source systems. CAMt53, creation of the technical concept for the migration of various business areas, creation of migration templates and FMD Files, support with data migration, consolidations and data entry, test management for the SAP part, test support, training of end users in all FI and CO areas, FI-AA

• Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
• Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
• Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
• Advised business units and IT on information security, security requirements, and risk-appropriate measures.
• Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
• Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
• Monitored and assessed current security advisories and security-related metrics (KPIs).
• Reviewed, assessed risks, and approved exception requests (Security Exceptions).
• Independently analyzed and handled Security Events and supported the handling of security incidents.
• Planned and supported awareness initiatives to strengthen security awareness.
• Created, implemented, and reviewed information security policies and standards.
• Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
• Defined and reviewed technical and organizational risk treatment measures.
• Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.

Financial reporting as an MVP. Follow-up assignment.

• Reports on profit and loss, balance sheet and cash flow
• Budget and personnel metrics (FTE)
• Implementation as an MVP with a fixed scope

• Founder of CheironX: AI-supported GRC management (ISO 27001, BSI IT-Grundschutz, TISAX, DORA)
• Strategic focus on Agentic AI and GenAI for modern IT Governance, Risk & Compliance Management
• IT interim management and strategic consulting

Agile Transformation: introducing agile principles and transforming traditional IT departments into Scrum and Kanban teams

IT Operating Model: redesigning the IT organization and introducing modern delivery structures and roles

Flight Levels: building up Flight Levels practices within IT to align strategy, coordination and operational execution

Leadership & Coaching: recruiting Agile Coaches and coaching Scrum Masters and IT leaders

ERP Operations: acting as Interim Product Owner for the existing ERP landscape and ensuring business continuity

ERP Transformation: reorganizing and supporting the ERP migration as a Project Manager; Phase 1 (financial accounting) live since October 2025

Operational Core (ERP): establishing dedicated teams for ERP Support, Feature Development, and ERP Migration

Modern Workplace: initiating the transition towards a Microsoft 365-based cloud workplace environment

Integration: establishing a dedicated team to drive integration and connectivity initiatives

Warehouse Operations: building a cross-functional team to support logistics and warehouse-related capabilities

Maintenance & Operations (M&O): introducing a dedicated team for system engineering, security, stable operations and continuous improvement

AI Initiatives: identifying and promoting practical Artificial Intelligence use cases across the IT department

As Interim Head of IT for a German medium-sized industrial distributor, I am responsible for 31 IT employees and lead the digital and organizational transformation, reporting directly to executive leadership. I took over an IT department with almost no basic structures – no clear roles, processes, documentation or ticket system – and with significant technical debt that tied up most of its capacity. Introduced agile principles and ways of working in the IT organization and transformed the traditionally structured IT department into cross-functional Scrum and Kanban teams focused on transparency, collaboration, and customer value delivery.

Redesigned the entire IT organization by establishing a modern operating model, introducing new roles such as Product Owner, Scrum Master and Solution Architect and strengthening the organization through strategic hiring and targeted capability development. Recruited and onboarded Agile Coaches to accelerate the transformation and personally managed and coached Scrum Masters as well as IT department leaders to foster servant leadership, self-management and a culture of continuous improvement.

Aligned IT-internal planning across eight teams to three Flight Levels based on Klaus Leopold (strategy, coordination, team), laying the foundation for later company-wide portfolio management. Consolidated the backlog of more than 10 workstreams and prioritized it by business value and cost of delay. Introduced a ticketing system to increase transparency and enable data-driven decision-making, flow-based work management, and greater accountability at all levels.

Established and supported multiple cross-functional teams, including the Operational Core (ERP) domain with dedicated streams for Support, Feature Development and ERP Migration, as well as teams responsible for Warehouse Operations, Maintenance & Operations (M&O) including system engineering and security, Modern Workplace, Data Quality and integration initiatives. Worked closely with Agile Coaches to support team development, remove impediments, and continuously improve delivery effectiveness.

Acted as Interim Product Owner for the operation and enhancement of the existing ERP landscape while supporting the ERP migration as a Project Manager. Reorganized the project organization and had the already negotiated contract with the implementation partner realigned with a focus on approach and overall responsibility; Phase 1 (financial accounting) has been live since October 2025. Collaborated with the selected implementation partner to design and establish the project organization and target operating model for the ERP transformation, introducing agile delivery structures and ways of working. Facilitated the alignment between business, IT and the external vendor and played a key role in negotiating the contractual framework and delivery model to ensure a sustainable foundation for the transformation program.

Initiated the strategic modernization of the workplace environment through the adoption of Microsoft 365 cloud capabilities, establishing the foundation for enhanced collaboration, scalability and future digital services.

Launched AI initiatives to identify practical business use cases and promote the responsible adoption of Artificial Intelligence across the IT department. Encouraged self-management and empowered teams to take ownership of decisions, delivery and continuous improvement.

Project: Digital Sovereignty – Toll Collect

Workshop: Digital Sovereignty Recognize dependencies, reduce risks, remain capable of acting

Format

• One-day practical seminar

Target group

• Executive management
• IT managers
• Data protection officers
• Compliance functions

Content and objectives

• Systematic analysis of digital dependencies
• Assessment of legal and operational risks
• Development of a concrete plan to increase digital sovereignty
• Mapping of the entire IT infrastructure by participants
• Identification of critical dependencies on non-European providers
• Creation of a prioritized risk matrix based on:
• GDPR
• NIS2
• EU AI Act
• Joint development of options for action – from a hybrid model to complete migration to European solutions
• Development of an individual sovereignty roadmap with:
• Responsibilities
• Milestones
• Budget framework

Agenda

• Preliminary self-assessment (current infrastructure)
• Digital sovereignty? Nothing but an illusion
• Digital sovereignty 2026 – Germany’s dangerous dependency in focus
• Digital sovereignty & open source
• What is digital sovereignty?
• Three questions raised by digital sovereignty
• Reflection: Digital sovereignty in your own life
• Why is digital sovereignty existential now?
• Practical examples of digital sovereignty
• Schleswig-Holstein initiative
• Benefits of digital sovereignty for your company
• Assessing strategy options (cost-benefit matrix)
• Sovereign provider? 10 questions
• What does digital sovereignty specifically mean for your company?
• How do you shape digital sovereignty?
• Digital sovereignty and psychological safety
• Psychological safety: The key to high-performing teams
• Why psychological safety in your company?
• Benefits of psychological safety
• Invitation to group work: PsySafety Check (PS-C)
• The “Braintrust” experiment
• Creating a risk matrix
• Creating a roadmap & project plan
• European alternatives to US Big Tech
• 10-point plans:
• NIS2
• EU AI Act
• GDPR
• ISO 27001

Banking & Invest – Replacement of digital application journeys

Shared product responsibility for the digital application journeys (accounts, investment accounts, home financing) of a large financial services provider working with three partner banks – from the prioritized backlog and partner bank integrations to regulatory requirements (WpHG, ESMA, BFSG); contributed to the introduction of MS Copilot and AI use cases.

Result: Continued to develop the platform reliably across around 30 releases over 2.5 years; launched two new partner processes and met regulatory deadlines.

• Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
• Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
• Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
• Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
• Prepare security and compliance to support Microsoft 365 Copilot.
• Implement information protection and data loss prevention by using Microsoft Purview.
• Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
• Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
• Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
• Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

CXO AI OS is an agent system made up of six components. Instead of using AI as a chat window, it creates a system that understands a company’s context, makes decisions according to its rules, and acts on its behalf.

• For mid-sized companies: a guided sprint followed by ongoing operations for a team, department or prioritized cluster, based on an AI assessment
• For self-employed professionals: a program where participants build their own agent system
• Sequence in the company: assessment, prioritization, sprint, operations
• Implementation in Claude Cowork or ChatGPT Work, without coding
• Architecture: Chief of Staff, Goals, Advisors, Agents, Context, Catalog

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

• Integrated highly regulated countries such as China and South Korea into a company-wide M365 tenant.

• Technical point of contact for integrating specific requirements for the board and German subsidiaries subject to BaFin compliance requirements.

• Subproject management.

• Coordinated requirements as part of the overall architecture.

• Designed the use of DLP features from Microsoft Purview.

• Designed special access restrictions using Entra Id Conditional Access.

• Supported the design of provisioning Teams teams and SharePoint sites with enhanced compliance requirements.

• Provided technical support for implementing information classification with Sensitivity Labels for SharePoint Online and Teams.

• Provided technical support to the subproject for introducing CoPilot for M365.

• Skills: M365, Purview, DLP, Entra Id, Sensitivity Labels, CoPilot, Teams, SharePoint Online.

• Instructor for an AZAV-certified AI training program for working professionals; designed in February 2026, with five cohorts each running for one month from March 2026
• Designed and created all modules and learning materials
• Topics: AI fundamentals, prompting, use cases in communication, analysis, and processes, agents and workflows, the EU AI Act, and GDPR
• Taught small groups of 3 to 9 participants from different professional fields and levels of seniority
• Provided individual learning support throughout each course
• Result: completed five cohorts with around 500 hours of live instruction

AI phone assistant platform

Claude Code, Google AI Studio, Python, LLM / Voice-AI, PostgreSQL

• Designed and hands-on developed an AI-powered phone assistant platform (Voice-AI / LLM)—from idea and architecture through to MVP/product.
• Built agentic workflows and end-to-end automations with Claude Code and Google AI Studio.
• Also supported AI-powered delivery in client engagements: using Claude Code for governance documentation, requirements drafts, and automations.