SOX Experts

• Founder of CheironX: AI-supported GRC management (ISO 27001, BSI IT-Grundschutz, TISAX, DORA)
• Strategic focus on Agentic AI and GenAI for modern IT Governance, Risk & Compliance Management
• IT interim management and strategic consulting

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-departmental collaboration with other teams on operations and further development, and reporting.

• Firewall vulnerability analysis.

• Firewall access requests.

• Troubleshooting IP communication issues on network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

Overall business responsibility for a program-wide initiative to create a central, authoritative data foundation for business customer master data (contacts and locations) within an IT service management transformation program.

• Managed the Epic portfolio from exploration through launch; prioritization and quarterly planning in a SAFe environment
• Aligned business units, architecture, and IT delivery around a shared vision and clear rules for data ownership (Data Governance)
• Prepared and secured scope and key decisions with program leadership, including deliberate descoping
• Managed risks, dependencies, and escalations; reported to program leadership and the PMO
• Developed the 2027 roadmap as a basis for budget and portfolio planning

Result: a clear MVP scope, key decisions made, and a 2027 roadmap. The program continued after handover without any loss of knowledge.

• Private Equity owned precision grinding machines for Auto, Military & Aerospace – 1200 Employees
• Acting as Interim Group CIO / CISO consolidating Global IT back to Europe – M&A consolidation
• Managed major Security event and post event cleanup – Reporting to regulators
• Performed Vendor & Contract Management – full assessment of capabilities
• Guided Infrastructure refresh & Security Hygiene assessments

As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account  Ensuring end-to-end control of all IAM-related technical services  Establishing clear responsibilities and accountabilities across the IAM landscape  Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security  Introducing and monitoring governance policies to ensure compliance and security  Continuously improving IAM processes and systems through regular audits and service reviews  Taking part in external process audits as part of official audits against ISO standards  Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments  Conceptually developing the KPI system for measuring process quality

Using periods between projects to deepen leadership skills and Change Management methods.

• Personnel and culture development: Supporting specialists and managers with professional reorientation and providing strategic coaching for successful self-presentation.

• Empowerment & Performance Coaching: Conducting systemic personality assessments to identify performance bottlenecks and specifically develop strengths within teams.

• Moderation & Training: Managing interdisciplinary workshop and seminar groups in both industrial-technical and commercial environments.

• Audit, advisory and interim management in the areas of corporate governance, compliance, risk management (GRC), Internal Control Systems and Internal Audit.
• Design, implementation and optimization of control and compliance structures in international corporations and mid-sized companies.
• Support with transformation projects, organizational development, audit management, process optimization and executive coaching.

Service ownership for two business-critical specialist applications in the field of occupational health and corporate health management, with end-to-end responsibility for operations, support, and further development. This included applications serving approximately 130 users and 600 customers. Responsible for evaluating and testing four AI modules from a software vendor through to the rollout decision.

Introduced a service desk portal as the mandatory reporting channel, performed ticket and root-cause analysis, and derived training and improvement measures. Managed the connection of Jira to the vendor helpline and coordinated service reviews, user surveys, and a multiplier program.

Combined operational service responsibility with product ownership, including requirements catalogues, effort assessments, backlog management, prioritization, sprint and release planning, and roadmap planning. This included the conception of new invitation and appointment management modules for end customers. Managed external software vendors, including release, test, and acceptance management, SLA monitoring, budget and forecasting.

Established structured governance, post-incident analyses with action plans, escalation and follow-up processes, and transparent status and roadmap reporting at director level. Successfully stabilized a previously unstable service, reduced service requests, established a reliable release cycle, and built an automated test suite for recurring release tests. Clear processes and efficient steering of external partners also reduced the workload for internal teams.

• Development controlling systems:
• Validate various Business Cases
• Develop organization, task description, processes and systems of the controlling system to improve activities
• Harmonize ERP software within the Group (IT-Procurement – Plan data – controlling – reports)
• Budget Master data and Planning:
• Set-up phase oriented project planning
• Monitor and validate projects: OPEX and CAPEX due to laws and concern dependency rules
• Validate regulatoric calculations
• PMO assistance activities
• presentations and reports Tools: SAP 4/HANA; SAP ERP Central Component (SAP ECC): SAP FI/CO; SAP MM; SAP PPM; BOARD; TABLEAU; MS Office 365;

• Industry: mechanical engineering, vehicle manufacturing
• Regulations: Data Act
• Project focus: data governance, legally compliant use of machine data, data platforms
• Assigned by: CFO, platform product owner

Successes/Results (early phase):

• Compliance support for the setup of an internal standardized data usage platform based on Databricks.
• Created the basis for the legally compliant and effective use of machine data, including:
• Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
• Technical: consideration of data flows from the platform to users and third parties.
• Organizational: drafting and finalizing the required data usage agreements.

• Spearheaded the transformation of Telefonica Germany’s cloud journey into a self-service, automated marketplace by leading process analysis and design efforts; facilitated UX/UI collaboration and served as Scrum Master for cross-functional agile teams to ensure timely and quality delivery
• Designed, launched, and managed an enterprise-wide Learning & Development program focused on cloud-native skills, upskilling over 1,500 employees; undertook full vendor management including sourcing, tendering, contract negotiation, and ongoing partnership to ensure curriculum alignment with evolving organizational needs
• Implemented cloud migration processes aligned with corporate compliance and process governance; improved process transparency and audit readiness while reducing operational risks
• Architected and led a cross-divisional communication strategy to enhance organizational engagement; developed multiple channels including newsletters and intranet content, acting as single point of contact for all departmental communications to ensure consistency and alignment

• Process management, project management
• Business process modeling for market-to-order and order-to-cash
• Replacement of an existing CRM system
• Salesforce energy & utilities cloud, Aurea CRM, SAP-Signavio, iGrafx

• Independent planning, coordination and operational counting of fixed asset inventories at SGS sites across Germany
• During the count, clarification of variances as well as posting of the new inventories in the fixed assets of the respective site and company