ServiceNow Experts in Hamburg

Mahmoud Q.

Information Security & GRC Expert

Last position:

Information Security & GRC Expert at GLG (Gerson Lehrman Group)

As a Council Member at GLG (Gerson Lehrman Group), the world’s leading expert network, I provide organizations, investment firms, and consulting companies with expert discussions on demand – wherever specialized knowledge in information security, IT governance, and regulatory compliance is needed.

My assessments are based on many years of practical experience in highly regulated industries: from building and implementing information security management systems (ISMS according to ISO 27001), IT risk and vulnerability management, and business continuity (ISO 22301) to the practical implementation of European regulations such as DORA, NIS2, BAIT, and the Cyber Resilience Act (CRA).

The cooperation is project- and discussion-based. I provide decision-makers with a practical perspective gained from real-world experience on cyber risks, security governance, and operational resilience – exactly when it is needed.

Michael S.

Interim CIO, CRO / Head of Compliance & Risk / Head of Governance

Last position:

Establishment of Compliance/TPRM at Haftpflichtkasse

Establishment of Compliance Department & DORA Operationalization

Establishment of a complete compliance organization in accordance with DORA
Development and operationalization of the SfO
Use of AI agents for automation:
Evaluation of due diligence questionnaires including risk classification
AI-supported contract analysis (DORA/MaRisk compliance)
Monitoring of external data sources (cyber incidents, newsfeeds)
Establishment of a decentralized risk and action register
Preparation of GAP analyses and derivation of measures
Establishment and maintenance of the Outsourcing Information Register
Use of proprietary TPRM frameworks, checklists and process models

Establishment of Compliance Department & DORA Operationalization

Establishment of a complete compliance organization in accordance with DORA
Development and operationalization of the SfO
Use of AI agents for automation:
Evaluation of due diligence questionnaires including risk classification
AI-supported contract analysis (DORA/MaRisk compliance)
Monitoring of external data sources (cyber incidents, newsfeeds)
Establishment of a decentralized risk and action register
Preparation of GAP analyses and derivation of measures
Establishment and maintenance of the Outsourcing Information Register
Use of proprietary TPRM frameworks, checklists and process models
Project controlling - presentation and structured measurement of project goals achieved as part of management reporting.
Overall responsibility for establishing a Compliance, Governance and Risk organization
Establishment of an integrated GRC model and executive reporting for the Management Board.

Guido B.

Self-employed Management Consultant and Interim Manager

Last position:

Self-employed Management Consultant and Interim Manager at BCTC Unternehmensberatung Guido Bäcker

Consulting, training and coaching in the financial sector on strategy, organization and IT topics
MorgenFund: Advising the operator of a fund platform on software selection for a sub-ledger "Cash Accounts" based on virtual IBANs (VIBAN)
Structuring requirements, market screening, preparing RfIs, communicating with vendors and conducting the selection process
UniCredit/HypoVereinsbank: Workstream Lead "Booking and Customer Reporting" in the payment transformation project "PULS"
Business analysis, preparing business requirements and coordinating the solution items as part of the functional specification with the bank's IT service providers
Business analysis of SEPA CT and SWIFT MX (.camt-, .pain- and .pacs- formats), change management, team leadership for a virtual team of fifteen line experts and stakeholder management
equensWorldline Germany: Program management for three projects of the SWIFT Service Bureau (CBPR+, ESMIG and Euro1Step1 migration) as part of the SWIFT MX migration
Managing individual project leads with regard to cross-project goals and requirements; reporting to internal and external committees and stakeholders; coordination with dependent projects and programs
Project management/PMO: Interim project management, deputizing for project leads, resource planning, budget and cost management, general PMO activities

Huy N.

Modern Workplace & Dynamics 365 Consultant

Last position:

Modern Workplace & Dynamics 365 Consultant at Thinformatics

Administration and further development of the M365 environment, including Teams, Exchange Online, Intune, and SharePoint Online
Development of dashboards for performance monitoring with Microsoft Power BI
Implementation of user requirements and processes with low-code/no-code technologies (Power Apps, Power Automate)
Use of Jira and Azure DevOps to plan and implement user stories in an agile project context
Participation in daily stand-ups, sprint planning, sprint reviews, and retrospectives as the technical point of contact
Planning and implementation of security policies using Azure Conditional Access and multi-factor authentication
Configuration and deployment of clients and applications via MECM (SCCM) and Baramundi

Christian F.

IT Project Implementer (Problem Solver)

Buxtehude

Last position:

Department Head (Interim) at Municipal utilities and transport company

Defined and established the areas of responsibility
Built a governance model for the department and its areas of responsibility
IT strategy, project management, process management, and quality and sustainability management
Developed a communications strategy for the group
Created the IT strategy
Designed templates, guidelines, and processes for consistent ways of working
Recorded strategic guidelines and grouped ongoing projects – derived a roadmap for strategic planning
Reviewed ongoing projects
Prepared staffing calculations and capacity planning
Defined job profiles

Udo N.

Managing Director

Last position:

Project Manager / Rollout Coordinator at BWI

Rollout of printers and PCs

Effective management of external service providers to ensure smooth operations.
Planning and implementation of a global rollout for 150,000 clients.
Carrying out a comprehensive risk analysis, including overall risk, site-specific risks, and security risks.
Successful consolidation of two existing ServiceNow systems to optimize service management.
Close coordination with program management to achieve the project goals.

Vinod G.

SAP MDG Consultant

Moorrege

Last position:

Freelancer: SAP MDG Consultant at Logistics service provider

Support for one of the largest logistics service providers in handling ServiceNow tickets in the areas of SAP MDG, Business Partner (BP), customer and supplier master data
Technical analysis and resolution of tickets through in-depth review of various database tables
Creation and maintenance of accounting clerks in the system
Deactivation of company codes using transports
Carrying out mass changes with LSMW (Legacy System Migration Workbench)

Michael S.

Project Manager – Business Analyst – Demand Manager

Schenefeld

Last position:

Project Manager – Business Analyst – Demand Manager at Rheinmetall AG

Gathering, evaluating, and prioritizing strategic demands from the Electronics and Power Systems business units
Supporting the digitalization of business processes for Electronics and Power Systems
Process digitalization and IT architecture planning, including network infrastructure
Reviewing demands with regard to existing solutions in coordination with IT and business departments
Designing and implementing possible business architectures
Planning implementation projects, in particular supporting import control through the introduction of SAP GTS
Acting as the interface between business departments and IT
Creating and implementing concepts for IT security, compliance, data protection, and the protection of classified information
Conducting workshops, process analyses, and training sessions
Stakeholder management and change management
Technologies used: SAP GTS, SAP MM, SAP SD, MS Office 2016, MS SharePoint, ServiceNow, SharePoint

Alex O.

Contractor

Last position:

Contractor at Telefonica Germany GmbH & Co. OHG

Data-analysis, Preparation, gathering and coordination of business requirements for retrieval of monthly- and long term (CLV – relevant) cost- and revenue-components per contract for a customer–base–grouping project (HUB–Project) for B2C-Postpaid-Controlling
Concept and Implementation of cost- and revenue-KPIs calculation and corresponding CLV–reports (Oracle, Perl, SVN, MS SQL Server, MS Power BI, Serviceware Performance Analytics)
Operational support of the HUB-Project – various ad-hoc reports, deployments, job-scheduling etc. (Oracle, SVN, BICSuite–Scheduler, DWSODA etc.)
Analysis, implementation, retrieval and reporting of various physical and financial KPIs for B2P-Prepaid Business on an existing data-mart (Oracle, Perl)

Enrique G.

Data Security

Last position:

Security Architect at Capgemini

I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.

Stephan L.

IT Generalist

Last position:

IT Generalist at SThree

Software packaging and distribution with SCCM/MECM
Application responsibility and support (50–100 applications)
Documentation via ticket system
User management via AD console
Software updates and distribution
Maintenance and updating of software packages
Customizing scripts with PowerShell
Rolling out and implementing new software
Supporting IT security and compliance

Tools and software: Confluence, M365, Active Directory, Intune, Endpoint Management, SCCM/MECM, PowerShell, VMware Hardware: Lenovo, Cherry, Plantronics, Jabra + peripherals

Gunnar W.

IT-Consultant

Last position:

IT-Consultant at Independent Freelancer

Enterprise and IT strategy
Digital transformation
Process and portfolio management
Interim IT management

Charles J.

Network Architect

Last position:

Network Architect at RedGlobal GmbH

Configuration of Dell switches, routers, and access points.
Troubleshooting and issue resolution.
Extreme, Cisco and Dell switches and routers environment, Extreme A3 NAC, Extreme CloudIQ.

Habib M.

ELO Architect/Admin, NAV Admin & M365 Engineer

Last position:

ELO Architect/Admin, NAV Admin & M365 Engineer at KHK (CST Shipping & Marine Services) Group

Enterprise Content Management (ELO ECM) & Process Automation:

Multi-Tenant System Architecture & Tenants: Designed, deployed, and maintained the ELO infrastructure for over 7080 legal entities (shipping and land-based companies with a total of 150+ active users in onshore/offshore operations).
User & Group Administration: Full administration of ELO users, creation and maintenance of ELO groups, and implementation of granular, role-based access controls (RBAC).
Dynamic Workflow Architecture: Designed, programmed, and implemented complex, dynamic approval workflows with hierarchical and cross-departmental approval levels (Multi-Tier Line Approvals, e.g. for invoice approvals and contract management).
Operational Support & Troubleshooting: Daily troubleshooting of incoming workflow issues, continuous process adjustments, and error resolution during ongoing operations.
Compliance, Archiving & Optimization: Managed archive structures, replaced paper-based processes with automated ELO pipelines, and ensured compliance with GDPR and audit standards.

Microsoft Dynamics NAV (Navision) – Administration & ERP Support:

Tenant & User Management: Administration and permission management for complex multi-tenant environments with over 30 tenants (companies and shipping entities) in NAV.
Master Data & Financial Processes: Created and maintained customers, vendors, posting groups, and supported intercompany transactions.
Operational Support & Troubleshooting: Daily mid-level error handling for interfaces, document processing, and accounting processes across the various companies.

Hybrid Identity & Modern Workplace Management (M365 / Intune):

Hybrid Directory Management: Administration of Active Directory (AD) and Entra ID (Azure AD) in a hybrid environment, including identity synchronization, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
Endpoint & Security Management: Managed mobile devices and laptops through Microsoft Intune (MDM/MAM), implemented security baselines, compliance rules, and automated software rollouts.
Security & Network Administration: Administration of Microsoft Defender for Endpoint and management of Sophos VPN authentication profiles to secure remote access.
Collaboration Infrastructure: Administration of Exchange Online and Microsoft Teams Admin Center, including email hygiene, shared mailboxes, guest access, and SharePoint security policies.

Jonas T.