Oct 2024 – Jul 2025 · 9 mos · Hamburg, Germany · Hybrid

• As part of 𝗘𝗢𝗦 𝗗𝗲𝘂𝘁𝘀𝗰𝗵𝗲𝗿 𝗜𝗻𝗸𝗮𝘀𝘀𝗼 𝗗𝗶𝗲𝗻𝘀𝘁’s commitment to EU and national compliance, I serve as the 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗢𝗳𝗳𝗶𝗰𝗲𝗿, driving the development of our Information Security Management System (ISMS) in line with BaFin standards.
• 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬:
• 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞: Ensure alignment with BaFin and EU regulations, embedding them in company policies.
• 𝐈𝐒𝐌𝐒 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭: Lead ISMS design and improvement to meet evolving standards.
• 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Conduct risk assessments, identify vulnerabilities, and implement mitigation strategies.
• 𝐀𝐮𝐝𝐢𝐭 𝐒𝐮𝐩𝐩𝐨𝐫𝐭: Oversee internal and external audits, ensuring compliance in all documentation.
• 𝐂𝐫𝐨𝐬𝐬-𝐓𝐞𝐚𝐦 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧: Coordinate with legal, IT, and compliance teams for a unified security approach.
• 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 & 𝐏𝐨𝐥𝐢𝐜𝐲: Develop awareness programs and maintain security policies aligned with regulations.
• 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞: Manage incident protocols and lead breach investigations.

Jul 2023 – Oct 2024 · 1 yr 3 mos · Stadt Hamburg, Hamburg, Germany

• Working on a book about philosophy, cognivite behavioral therapy & psychology.

Mar 2021 – Jun 2023 · 2 yrs 3 mos · Hamburg, Deutschland · Hybrid

• As Chief Information Security Officer (CISO) working for the newly founded FinTech and Star Finanz subsidiary Wallis, I led the transition to a BaFin-compliant risk culture.
• By specifically tailoring known frameworks from BCM, IT-Grundschutz, ISO 27001 as well as GDPR, I was able to form a BAIT-compliant (later ZAIT) corporate governance that was able to still preserve its speed and process throughput.
• 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬:
• Reported to CEOs, overseeing software development for ZAIT compliance, integrating ISO 2700x & BSI standards.
• Advised on risk, cybersecurity, and governance; managed audits with legal and external services.
• Enhanced emergency management with Business Impact Analysis and simulations.
• 𝐂𝐨𝐫𝐩𝐨𝐫𝐚𝐭𝐞 𝐄𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭:
• Led knowledge transfer across Sparkassen Finanzgruppe, serving on the MBIS board.
• Collaborated with legal and compliance teams during critical periods, incl. COVID-19.
• Participated in the Cybersecurity Forum, addressing vulnerabilities and innovations.
• 𝐍𝐨𝐭𝐚𝐛𝐥𝐞 𝐂𝐨𝐧𝐭𝐫𝐢𝐛𝐮𝐭𝐢𝐨𝐧𝐬:
• Established documentation in Confluence and Jira aligned with MaRisk.
• Presented risk assessments in executive meetings; managed PwC ZAIT audits.
• Authored policies and KPIs to strengthen the ICS; interviewed for IT Security and Audit roles.
• 𝐒𝐤𝐢𝐥𝐥𝐬: IT-Governance, PSD2, Compliance Management, ZAIT, Risk & Cyber Management, ISMS, MaRisk, Regulatory Requirements, Agile & Lean Methods.

Apr 2019 – Mar 2021 · 1 yr 11 mos · Heilbronn, Baden-Württemberg, Germany · On-site

• 𝐈𝐧𝐭𝐞𝐫𝐧𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐈𝐓 𝐀𝐮𝐝𝐢𝐭𝐨𝐫
• 𝗦𝗰𝗵𝘄𝗮𝗿𝘇 𝗚𝗿𝗼𝘂𝗽 | Audited global business processes to ensure efficiency, compliance, and best practices.
• 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬:
• 𝐎𝐧-𝐒𝐢𝐭𝐞 𝐀𝐮𝐝𝐢𝐭𝐬: Inspected operations at Lidl, Kaufland, Schwarz Production, and PreZero across Europe.
• 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐀𝐮𝐝𝐢𝐭𝐬: Assessed retail and warehouse environments, incl. VLANs, IAM, and cloud services (Azure, Google).
• 𝐈𝐓 𝐑𝐢𝐬𝐤 & 𝐏𝐫𝐨𝐜𝐞𝐬𝐬 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Evaluated risk processes and optimized business process management.
• 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 & 𝐒𝐚𝐟𝐞𝐭𝐲: Audited IT-Grundschutz and ISO 2700x standards; ensured safety compliance in logistics and server areas.
• 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 & 𝐒𝐀𝐏 𝐀𝐮𝐝𝐢𝐭𝐬: Reviewed software and SAP FI for access management compliance.
• 𝐏𝐫𝐞-𝐋𝐚𝐮𝐧𝐜𝐡 & 𝐅𝐢𝐧𝐚𝐧𝐜𝐞 𝐀𝐮𝐝𝐢𝐭𝐬: Evaluated go-live readiness, PCI-DSS, and cash registers, focusing on Kaufland.
• 𝐀𝐮𝐝𝐢𝐭-𝐈𝐧𝐝𝐞𝐩𝐞𝐧𝐝𝐞𝐧𝐭 𝐀𝐜𝐭𝐢𝐯𝐢𝐭𝐢𝐞𝐬:
• Planned audit focal points, drafted executive reports, and followed up on key findings.

Sep 2017 – Jan 2020 · 2 yrs 4 mos · Бад-Вимпфен · Hybrid

• [Company was shut down due to change into international audit career]
• 𝗧𝗲𝘀𝗰𝗵𝗻𝗲𝗿 𝗜𝗧-𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀 | Supported SMEs in IT consulting and software development.
• 𝐇𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬:
• 𝐈𝐓 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐢𝐧𝐠: Collaborated with "Der Medienberater" (Stuttgart) on multiple projects.
• 𝐖𝐞𝐛𝐬𝐢𝐭𝐞 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭: Created client websites and launched the "Die Pflegebibel" magazine.
• 𝐒𝐨𝐜𝐢𝐚𝐥 𝐌𝐞𝐝𝐢𝐚 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧: Implemented automation to boost engagement.
• 𝐒𝐭𝐚𝐫𝐭𝐮𝐩 𝐀𝐝𝐯𝐢𝐬𝐨𝐫: Guided startups on booking systems, hosting, and CMS selection.
• 𝐋𝐞𝐬𝐬𝐨𝐧𝐬 𝐋𝐞𝐚𝐫𝐧𝐞𝐝:
• Enhanced communication with clients and subcontractors
• Gained experience in financial management, contract negotiation, and continuity planning
• Developed skills in project planning, networking, and fail-over strategies

Sep 2016 – Mar 2017 · 6 mos · Heilbronn, Baden-Württemberg, Germany · On-site

• 𝐈𝐧𝐭𝐞𝐫𝐧, 𝐈𝐧𝐭𝐞𝐫𝐧𝐚𝐥 𝐀𝐮𝐝𝐢𝐭 𝐓𝐞𝐚𝐦
• 𝗦𝗰𝗵𝘄𝗮𝗿𝘇 𝗚𝗿𝗼𝘂𝗽 | Applied software engineering skills to risk-based audit processes.
• 𝐂𝐨𝐧𝐭𝐫𝐢𝐛𝐮𝐭𝐢𝐨𝐧𝐬:
• 𝐍𝐆𝐖𝐀𝐍 𝐑𝐨𝐥𝐥𝐨𝐮𝐭: Performed risk-based network audits across Lidl locations in Belgium, France, and the UK.
• 𝐂𝐚𝐬𝐡 𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐒𝐲𝐬𝐭𝐞𝐦 𝐀𝐮𝐝𝐢𝐭𝐬: Optimized IT processes and conducted on-site inspections for various units.
• 𝐀𝐮𝐝𝐢𝐭-𝐈𝐧𝐝𝐞𝐩𝐞𝐧𝐝𝐞𝐧𝐭 𝐀𝐜𝐭𝐢𝐯𝐢𝐭𝐢𝐞𝐬:
• Developed moderation and communication skills
• Researched and drafted risk reports for executives and department heads