ServiceNow Experts in Essen

• Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
• Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units

• QA Lead for end-to-end quality assurance of the Sparkasse & Sparkasse Business banking apps (iOS/Android); design and implementation of the Test Strategy including functional testing, regression testing, and UAT for eID, Push Notifications, and white-label components
• Creation and maintenance of test concepts and test plans in TestRail; structured Defect Management and error analysis; stakeholder management and risk management for the early identification of critical quality risks
• Accessibility Testing according to WCAG 2.1 (iOS/Android); coordination of AI-supported test automation and optimization of test processes to shorten release cycles
• Release Management: planning, management, and coordination of all test activities; status reporting to management and stakeholders; quality assessment of releases and release recommendations in an Agile/Scrum environment
• Challenge: Highly complex build and release process across several Sparkasse institutions; close coordination with the DevOps team to stabilize the CI/CD pipeline and ensure reproducible test builds before every release.

Tools: Jira, Confluence, TestRail, Android Studio, Xcode, Firebase, Jenkins, GA4

• Success: Successful launch of the eID authentication process - quality assurance ensured for 50+ Sparkasse institutions

• Created data pipelines and visualization tools to support sustainable energy decision-making
• Developed insights that could optimize renewable energy deployment and grid integration strategies

NIS2 Implementation Project and ISMS Development Based on IT-Grundschutz

Municipal utilities, public-law institution

• Analysis of the current compliance status regarding the requirements of the NIS Directive (NIS-2, EU 2022/2555).
• Identification of critical infrastructures and processes within the organization.
• Development of an action plan to meet NIS requirements.
• Conducting a risk analysis in accordance with BSI Standard 200-3 as the basis for the security concept.
• Preparation of an individual security concept including technical and organizational measures according to BSI IT-Grundschutz.
• Preparatory support for an optional certification according to BSI IT-Grundschutz.
• Adaptation of existing security policies and development of new ones for access controls, incident management and data protection.
• Consideration of municipality-specific requirements and integration of the measures into the existing IT infrastructure.
• Documentation of the results and preparation of audit-ready evidence for audits.

Tools, languages and frameworks used: MS Office, Verinice, IT-Grundschutz (200-x), NIS-2 (EU 2022/2555), ISMS, AI-Act (EU 2024/1989)

• Support with the transition to the provider
• Quality assurance during the preparation of operating manuals
• Operational performance management of the provider

• CHG Meridian AG is a financial company focused on leasing in the areas of IT technology, logistics and medical technology and is regulated by BaFin. One part of the company is Return to Remarketing, where devices delivered to the technology center (notebooks, smartphones, tablets, etc.) are prepared for resale. The project I supported was responsible for enabling damage assessment of returned lease devices, documenting them visually in the form of pictures, enabling invoicing for the customer, and making the pictures available via the in-house customer platform. This was achieved through a combination of in-house development within the internal development department and the use of SaaS products. The second project was the transition of SaaS tendering software, purchased by the business unit, into the operations of the CHG IT department. Evaluation of security questions in relation to BaFin requirements, development of an authorization concept, implementation of single sign-on, documentation of the application in the CHG systems (CMDB, iKnow, etc.) and handover into operations.

Used technologies and methods: NIS2, DORA, agile software development, Scrum, Kanban, ServiceNow, SaaS, MS Teams, MS SharePoint, Active Directory, Entra ID, CMDB, incident management, change management, request management, service level agreement

• Led the subproject for implementing Vulnerability Response as part of DORA
• Documented the current processes in compliance, risk & security
• Created the functional design for introducing application, infrastructure, and cloud vulnerabilities
• Agile management of the integration service provider, the technical department, and the company's cross-functional teams
• Integrated the V scanners Tenable, Qualys and Defender, as well as NVD and CISA/KEV
• Integrated GitLab Ultimate for importing and processing SBOMs
• Developed automation rules to match scan results with CIs in the CMDB, assign vulnerabilities and remediation tasks, handle approvals (false positives, exceptions) and closures
• Calculated multiple risk scores and priorities
• Defined dashboards and reports (Workspaces, Performance Analytics)
• Aligned the new processes, especially to improve the CMDB data quality (according to CSDM)

• SAP Basis operations for complex SAP system landscapes (ABAP and Java stacks)
• Administration, monitoring, and optimization of SAP systems with regard to availability, performance, and stability
• Planning and execution of data center moves as well as migrations of SAP systems and databases
• Handling of incidents, changes, and problems according to ITIL processes, including root cause analyses
• Creation of technical concepts, operations documentation, and implementation plans

Technologies: SAP NetWeaver, ITIL processes, technical migrations

• Responsible for service management and change management within the ITZ-Bund network.
• Creating, tracking, and modifying change requests for applications and infrastructure at ITZ-Bund.
• Adapting and extending change management processes.
• Ensuring required technical functionality of specific applications (beBPo Web, Governikus Multi Messenger GMM).
• Project management activities for individual projects within the ITZ-Bund network.
• Managing and ensuring availability of external service providers (Governikus, Materna).
• Participation in an FMS audit (documentation description, processes, quality) for individual agencies of ITZ-Bund.
• Monitoring deadlines and milestones, reporting project progress to various stakeholders.
• Single point of contact (SPOC) for various departments, weekly fixed meetings with clients and status meetings.
• Creating and planning infrastructure G2X maps, monitoring, and status reporting to clients and external service providers.
• Participation in certificate requests and certificate exchange for customer-specific infrastructure and applications.
• Planning, coordinating, and executing communication for announcing, carrying out, and following up on planned activities.
• Monitoring effort and developing improvement suggestions.
• Skills/Tools: ITIL, Prince 2, Windows 10, Microsoft Office, Governikus products, Materna products, Confluence, Jira, BMC Remedy, Smart IT

• Provided expert level consulting for lifecycle, upgrades and refresh activities
• Used Remedy for effort recording and billing to customers
• Used ServiceNow for service management and workflow
• Used Jira for project management with agile/Scrum methods
• Used Confluence for documentation
• Worked with customer-specific software tools
• Worked with customer-provided and secured hardware suitable for IT security operations infrastructure setup for customers
• Built firewall rule sets and handed over to service owner and delivery teams
• Environment: Cisco ASA, Cisco Firepower, CSM, Cisco AnyConnect, Cisco ISE, Check Point VSX and gateways

• Enterprise application packaging and deployment for Allianz's global Windows migration programs across Europe, North America, and APAC
• Migrated hundreds of enterprise applications from Windows 10 VDI to Microsoft Azure Windows 365 (Windows 11)
• Created software packages in MSI/MST, FlexApp, PSADT 3/4, and App-V according to enterprise packaging standards
• Developed an ASP.NET packaging automation platform with MongoDB, SQL Server, SharePoint, and Outlook integration
• Built PowerShell modules for automated quality checks of MSI and FlexApp packages
• Developed a release conflict detection module in PowerShell to identify potential deployment issues before production
• Created WDAC monitoring scripts for automated policy oversight and incident response
• Implemented MSGraph API calls in PowerShell for Azure AD and Intune operations
• Created Citrix oData scripts for historical usage analysis (BYOD, VDI, fat clients)
• Developed an Intune Win32 app 'Do Not Disturb' deployment routine for an optimal user experience
• First point of contact for troubleshooting production incidents with packaged applications
• Coordinated application owner, UAT, and release testing for hundreds of deployments
• Administered Microsoft Intune, Citrix environments, and SQL Server security
• Created and tested WDAC policies in Intune; managed configuration policies and Win32 app deployments
• Primary packaging resource for Allianz France since 2019

• Restoring backups using the Netbackup, MS-Excel, and MS-Access applications
• Programming scripts and executing console commands in the Linux environment
• Performing consistency checks in the event of errors
• Categorizing restore errors and handing them over to the engineering units
• Creating regular restore reports

• Transforming complex AI use cases into practical solutions
• Analyzing IT/telecom end-to-end business processes from requirements to order (RACI), modeling with IBO Prometheus
• Risk management
• Assessing digitalization potential, AI, and strategic supplier analysis against the IT target picture
• Optimizing offer and cost calculation bases in strategic and operational IT procurement
• Optimizing supplier strategy (DSGV and financial institutions)
• Exploring various approaches to cost optimization and simplifying supplier management
• Optimizing contracts and licensing management (e.g., SAP, Microsoft, IBM, Cisco, BMC, etc.)
• Desk and field expediting with external partners
• Possible outsourcing and consolidation of services with fewer suppliers
• On-time handover of work packages within agreed time and budget

• Analysis of the One Identity Manager installation on enterprise systems
• Database consistency check
• Error analysis of database integrity and consistency
• Data analysis
• Creating recommendations based on the collected data and errors
• Designing an update strategy