Microsoft 365 Experts in Hamburg

• Prepared and reviewed quarterly royalty settlements for licensors across music, publishing and media brands, including minimum guarantees, recoupment, returns reconciliation and process optimisation.
• Reconstructed historical licensing data for an external audit by a major US studio, covering music publishing and recorded music across ROW and AUS, and coordinated the resulting statements with the licensor.
• Supported the reconciliation of music royalties with the German collecting society and its international hub for 2018 to 2024.
• Assessed licensing data for accruals and provisions, and structured metadata for contract negotiations.
• Designed target processes and SOPs for a royalty automation tool and accompanied testing during rollout.

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

• Designed and moderated a NIS2 preparation workshop for RAS Reinhardt Maschinenbau GmbH and its IT service provider Catuno GmbH. Together with executive management and IT leadership, the current status was assessed, an initial GAP analysis was conducted and areas for action were prioritized based on ISO 27001.
• Developed an ISO-27001-based regulatory framework (ISMS) for NIS2 compliance, including a structured current/target GAP analysis, targeted improvement of the security maturity level and preparation of the organization for NIS2 audit readiness.

• End-to-end analysis and optimization of existing processes in campaign management, contract management and district heating construction/construction coordination
• Development of automated contract management and transformation scenarios, including software selection and integration
• Analysis of ERP, chat, RCS messaging, consent management and tracking
• Preparation of recommendations, decision proposals and presentations for the executive board
• Use of AI for process optimization
• Tools: Apple Office, Microsoft 365, Teams, Claude, ChatGPT

• Administration and further development of the M365 environment, including Teams, Exchange Online, Intune, and SharePoint Online
• Development of dashboards for performance monitoring with Microsoft Power BI
• Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
• Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
• Participation in daily stand-ups, sprint planning, sprint reviews, and retrospectives as the technical point of contact
• Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
• Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

• I help SMEs get VSME/VS-ready before their biggest customers come asking.
• Tailored SME Readiness Assessment and Implementation Road Map

Strategic development and operational execution of newsletter and content projects in a B2C environment. Working with reporting and performance data, deriving concrete optimization measures, and data-driven content optimization for more than 500,000 subscribers.

Rollout of printers and PCs

• Effective management of external service providers to ensure smooth operations.
• Planning and implementation of a global rollout for 150,000 clients.
• Carrying out a comprehensive risk analysis, including overall risk, site-specific risks, and security risks.
• Successful consolidation of two existing ServiceNow systems to optimize service management.
• Close coordination with program management to achieve the project goals.

• Optimization of business results and expansion of sales activities
• Responsible for personnel organization
• Introduction of a document management system (DMS)
• Introduction and optimization of the ERP, CMS and CRM landscape
• Introduction of digital signatures
• Increase in revenue, reduction in costs and increase in EBIT

• Communication strategist and consultant with many years of corporate and agency experience.
• Development and implementation of demonstrably successful brand and communication strategies for B2B and B2C brands such as RINGANA, NIVEA, O2 Business, Florena, thyssenKrupp, BENTELER, BMI Group, Lexware, MTM, Simplicity, Haufe and many others, including the creation of brand and design guidelines.
• Development of differentiating brand language concepts and naming strategies for Siemens, NIVEA, Vodafone, Deutsche Glasfaser, RINGANA, BENTELER, BVR, MTM and many others.
• Workshops, market research projects and innovation development.
• 8 successful Effie entries in B2B (2 Gold Effies and 6 Bronze Effies) as well as various other awards.
• Talent acquisition through active sourcing, brand and communication consulting, employer branding, project management, recruiting and other services for @Carola Wendt Personalberatung and FA Business Solutions (Fabs)

• Overall responsibility for IT, including the creation and implementation of the IT roadmap/IT strategy and the resulting measures in the organizational structure, processes and systems landscape

• Member of the Management Board

• Organizational development

• Development of the corporate strategy

• Introduction of a new SteerCo process for Germany in coordination with the Dutch group

• Restructuring and optimization of incident, problem and change management

• Moderation and execution of software and partner selection processes for the introduction of new systems/applications

• Initiation and negotiation of business relationships with external service providers and suppliers, including contract design

• Ensuring IT security and data protection in accordance with legal requirements and best practices

• Expansion of internal data centers and infrastructure to ensure SLAs for internal operations, including cloud services and cybersecurity

• Budget planning and control as well as resource management for the area of responsibility

• Privacy by Design and by Default
• Working with OneTrust: creating and managing records for requesters
• Interface role: mediation and communication between the DPO and the specialist departments, including clarifying data protection questions
• Handling data protection incidents: analysis, documentation, and coordination of measures
• General advice on data protection topics: support with data protection-related questions
• Process optimization: identifying room for improvement in processes and implementing changes
• Documentation & reporting: creating reports on data protection incidents or general data protection topics for the DPO and weekly reports for the line manager for presentation in the performance board
• Risk assessment & compliance: support in assessing data protection risks in new projects or processes
• Distribution and independent handling of email requests or requests from the DPO: all incoming tickets are divided among team members, with no specialization in the tasks. Tickets are created and tracked in Jira.

Approach/Methods:

• Stakeholder management
• Communication at C-level
• Timeline and implementation plan

• Planning, management and monitoring of the Corporate Responsibility Tech Enablement project for IT
• Design and implementation of the EUDR (EU Deforestation Regulation)
• Design and implementation of the Eco-Design Regulation
• Continuation of projects as part of the Corporate Responsibility strategy
• Definition and review of requirements (e.g. governance, success metrics) and, where necessary, analysis and resolution of problems
• Overall management, marketing, communication and quality assurance of the projects
• Creation of the project plan including timeline/roadmap, budget and resources
• Ensuring compliance with budget and deadlines
• Defining project management guidelines, methods and priorities
• Planning and tracking resources & efforts, also in cooperation with other IT departments
• Evaluation of projects and preparation of results (reporting to management)
• Identification and reduction of risks
• Regular communication with stakeholders
• Management of internal and external stakeholders and service providers (Jira, Confluence, backlog management, task tracking, Sharepoint, MS 365 Platform etc.)
• Development of standards and automation of processes
• Technical design and documentation of the Digital Product Passport
• Selection and evaluation of potential software providers
• Training and workshops on Osapiens

Label: Azure Cloud, Jira, Confluence, Power BI, SAP BW, AWS, Miro, Bee360, Draw.io, Sharepoint, MS 365 Platform, Trello, Osapiens, Naravero etc.

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.