PSD2 Experts in Germany

• Create a tracking concept for Google Tag Manager and Google Analytics, including the data layer, events, triggers, and reporting
• Manage the project team (developers, designers, performance)
• Communication interface between stakeholders and digital specialist departments

• Hands-on development of AI-native product prototypes with specialized AI agents for research, requirements, business logic, UX/flow design, test case generation and quality assurance.
• Structured use and orchestration of AI agents through clearly defined roles, inputs/outputs and handover points; breaking down complex product tasks into verifiable work packages and iterative prototyping cycles.
• Establishment of human-in-the-loop quality gates to validate AI-generated results for functional correctness, consistency, completeness and feasibility; targeted rework cycles in case of deviations.
• Development of a regulatory GenAI/rules prototype for CRD VI with a structured decision flow, web UI, rule-based validation and automated test cases; iteration of the business logic through to a pilot-ready POC.
• Design of an AI-to-Action banking prototype: AI intent → consent → bank/product logic → conversion including admin console; translating the product idea into MVP scope, role model, user flows and clickable prototypes.

Establishment of Compliance Department & DORA Operationalization

• Establishment of a complete compliance organization in accordance with DORA
• Development and operationalization of the SfO
• Use of AI agents for automation:
• Evaluation of due diligence questionnaires including risk classification
• AI-supported contract analysis (DORA/MaRisk compliance)
• Monitoring of external data sources (cyber incidents, newsfeeds)
• Establishment of a decentralized risk and action register
• Preparation of GAP analyses and derivation of measures
• Establishment and maintenance of the Outsourcing Information Register
• Use of proprietary TPRM frameworks, checklists and process models

Establishment of Compliance Department & DORA Operationalization

• Establishment of a complete compliance organization in accordance with DORA
• Development and operationalization of the SfO
• Use of AI agents for automation:
• Evaluation of due diligence questionnaires including risk classification
• AI-supported contract analysis (DORA/MaRisk compliance)
• Monitoring of external data sources (cyber incidents, newsfeeds)
• Establishment of a decentralized risk and action register
• Preparation of GAP analyses and derivation of measures
• Establishment and maintenance of the Outsourcing Information Register
• Use of proprietary TPRM frameworks, checklists and process models
• Project controlling - presentation and structured measurement of project goals achieved as part of management reporting.
• Overall responsibility for establishing a Compliance, Governance and Risk organization
• Establishment of an integrated GRC model and executive reporting for the Management Board.

• Own company for Interim Executive Manager mandates; sole shareholder-managing director Denis Dlouhy.
• Positioning: Transformation, Post-Merger Integration, portfolio steering, HR for international corporations and hidden champions.

• Spearheaded the transformation of Telefonica Germany’s cloud journey into a self-service, automated marketplace by leading process analysis and design efforts; facilitated UX/UI collaboration and served as Scrum Master for cross-functional agile teams to ensure timely and quality delivery
• Designed, launched, and managed an enterprise-wide Learning & Development program focused on cloud-native skills, upskilling over 1,500 employees; undertook full vendor management including sourcing, tendering, contract negotiation, and ongoing partnership to ensure curriculum alignment with evolving organizational needs
• Implemented cloud migration processes aligned with corporate compliance and process governance; improved process transparency and audit readiness while reducing operational risks
• Architected and led a cross-divisional communication strategy to enhance organizational engagement; developed multiple channels including newsletters and intranet content, acting as single point of contact for all departmental communications to ensure consistency and alignment

• Objective/Motivation: PAYONE urgently needs a 360° view of its customers. So far, PAYONE has had no company-wide master data strategy. It is not possible to identify customers across all relevant systems.

The organization is to be enabled to identify customers across all relevant systems. Establishing the basis for master data management at PAYONE

• Challenge: Due to company acquisitions, the system landscape is very heterogeneous. The company is highly dynamic and burdened with many system harmonization and integration projects, meaning that resource bottlenecks and changes in project priorities repeatedly create an almost impossible task.

Due to BaFin findings, the project has a central task and role. The first focus is the migration of all customers, including their AML/KYC data, from the master data backend systems to Salesforce. This is intended to resolve one of the largest findings and establish the corresponding ODD/EDD processes.

In addition, customer data must be harmonized in Salesforce. Previous migrations resulted in duplicate customer records in some cases. The aim is therefore to maintain only one customer in Salesforce and, using the relevant information from the backend systems, also be able to identify which products the customer uses and in which processing systems the customer obtains PAYONE services.

Project: ONE Customer

Budget: €1.5 million

Team: 10/30 employees (full-time/part-time); 4 vendors/providers

Integration: 8 (subsystems/interfaces)

Applications: Salesforce; SAP S4/HANA; in-house developments

Tools: MS Office; Jira, Confluence, SharePoint

Methods: Hands-on; Agile (SAFe); Prince2

CRM and revenue platform managing billing and subscription workflows.

• Scaled payments infrastructure across data products, direct debit expansion and automated abuse prevention, generating $416K in annualized operational savings ($8K/week) by eliminating redundant gateway calls.
• Owned backlog and sprint execution for autonomous checkout abuse detection pipelines, designing real-time risk guardrails and velocity heuristics that blocked card testing attacks.
• Architected enterprise billing migrator user stories and data reconciliation mechanisms, achieving zero-downtime subscription state transitions and cutting $60K in infrastructure overhead.
• Expanded European direct debit (SEPA) payment capabilities, managing cross-squad API dependencies and automated webhook error-handling to eliminate checkout friction.

• Definition of features
• Authorization Mastercard and Visa
• Usage of ISO protocols and norms
• Mastercard Fast Funds
• Feature analysis Girocard 4.0
• Scoping EPI

Methodology: Agile project management

Goal: Digitization and implementation of CCD2 requirements within the Consumer Finance systems.

Analysis, identification, and assessment of business requirements, as well as their transfer into technical implementation requirements. Coordination and status reporting of the various requirements. Documentation and process management using UML and BMPN. Cross-functional stakeholder management, UAT testing, data management, API architecture management.

Tools: Jira, Confluence, Visual Code, Sql Developer, Enterprise Architect, MsOffice, Bruno, ALM, Camunda, Figma

• Lead Product Owner role for the BFSG pilot journey “Search and Book” across web and app, focusing on digital accessibility, UX, conversion, and regulatory implementation.
• Created and prioritized the product backlog; derived user stories and acceptance criteria from legal standards (BFSG, WCAG 2.1)
• Developed a product vision that combines digital accessibility, user-centered UX, and conversion optimization for the booking journey
• Cross-stream release management and quality assurance across the entire web and app area, including go/no-go decisions, rollout, and user acceptance tests
• Coordinated and prioritized with Legal, Compliance, external BFSG consultants, UX, Development, Marketing, and Management
• Conducted user research as well as usability and accessibility tests (including screen readers and keyboard navigation) and prototyping with UX/UI
• Defined KPIs to measure accessibility, conversion, and user guidance
• BFSG pilot journey “Search and Book” successfully delivered: first accessible features rolled out and the foundation for a long-term BFSG-compliant booking journey established
• Established sustainable process integration through close collaboration with consulting partners and internal teams

• Linux server migrations: Planning and implementation of the migration with SLES Linux Deployment of VMs in VMware 8.0
• Guiding colleagues in configuring Linux VMs in vSphere Auto Deploy
• Application operations: Ensuring the smooth operation of applications on the migrated servers
• Operations manuals: Revising existing operations manuals, adding to them and creating new ones when required
• Reviewing service offerings: Adjusting and optimizing the service offering of external service providers
• Logistics SW, RedHat Linux, Ansible, Confluence / Jira

Carve-out project: Creation of certification strategy, implementation and requirements plans across several standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz and BSI TR- RESISCAN

• Cross-standard assessment of the current state and risk evaluation
• Coordination with stakeholders across departments: ISB, management, certification bodies, legal and data protection
• Consulting in the areas of information security, GRC and IT auditing

• Designing and optimizing the end-to-end supply chain for a newly established restaurant, covering fresh produce, dry goods, beverages, and kitchen essentials
• Setting up ordering cycles, ensuring food-safety compliant logistics, and aligning delivery schedules with kitchen operations to maintain product quality and reduce waste
• Building procurement frameworks and vendor relationships with major importers and wholesalers in Germany; structuring agreements to secure competitive food pricing, negotiating minimum order quantities, and establishing reliable delivery commitments
• Defining structured processes for supplier evaluation, contract negotiation, and delivery scheduling to reduce risks such as delayed deliveries, inconsistent product quality, or stock shortages; introducing clear evaluation criteria, establishing communication protocols with vendors, and setting escalation procedures for supply disruptions

AI Assistance and Target Vision for Partially Autonomous Energy Portfolio Management

Building an AI control layer directly on the up-to-date daily live portfolio of a large energy provider — not as an isolated pilot, but as an operational extension of the existing DB1 and portfolio management. The goal is the gradual development from assistance through monitoring/alerting to analysis agents with Human-in-the-Loop approvals, supplemented by a role-specific System of Engagement alongside the BI System of Record. At the same time, the business case, target vision and management pitch compared with static monthly reporting are being developed.

• AI control layer: Design and build on the existing live portfolio data product (several million contracts) — development stages assistance → monitoring/alerting → agents with Human-in-the-Loop approvals.
• LLM-supported data analysis: Semantic queries, SQL/tool integration and additional RAG components based on portfolio, plan-versus-actual and data quality data (Azure OpenAI, Snowflake), with drill-downs to individual contract level.
• Analysis agents: Multi-stage agents for variance and driver analyses of churn, price adjustments, volumes and procurement costs.
• Views concept: Role-specific interfaces for business units, management and C-level as a System of Engagement alongside the BI System of Record.
• Business case & pitch: Target vision and cost-benefit argumentation compared with static monthly reporting.
• LLM setup (privacy & security): Coordination with IT Security and Data Protection — EU region, data separation and approval processes.
• Agent architecture: Multi-stage agent pipelines (analysis → validation → summary) with documented data sources, tool calls, review steps and source references for each statement.
• Data foundation: Built on the up-to-date daily DB1 data product (Snowflake, dbt) — portfolio, plan-versus-actual and data quality metrics as the common basis for all AI analyses.
• Guardrails & evaluation: Evaluation and approval processes for LLM responses relating to management-relevant statements — test sets, metrics and human review.
• Prototyping & validation: Iterative validation of agent responses with the business unit — test question catalogue, feedback loops and response quality for each release.
• Roadmap & development stages: Detailed stages from assistance → monitoring/alerting → partially autonomous management, including transition criteria and governance for each stage.
• Integration: Integration into the existing BI and data landscape — BI remains the System of Record, while the AI layer provides interactive drill-down paths as the System of Engagement.
• Enablement: Enablement of business users — prompting guides, training and an operating model for ongoing use.
• Management: Coordination of business units, Data Engineering, IT Security and Data Protection.
• Change Management: Communication and expectation management with business units and management throughout the development stages.

Results:

• Built on an existing up-to-date daily data product with several million contracts
• Established an LLM setup coordinated with Data Protection and IT Security in the EU region, including data separation and approvals
• Defined three development stages through to partially autonomous management
• Designed role-specific views for business units, management and C-level
• Developed the business case and management pitch for the development stages
• Established an iterative response-quality validation process with the business unit
• Designed the operating model for assistance operations and initiated validation

Stack: Azure OpenAI, Azure AI Foundry, Snowflake, dbt, React, TypeScript, Entra ID, RAG, Agentic AI, analysis agents, Human-in-the-Loop, Prompt Engineering, LLM Evaluation, LLMOps, GDPR / EU region, Azure DevOps, Python, SQL, Change Management