06.10.2026 aktualisiert
100 % verfügbar
Cybersecurity Coach turning NIS2 and cyber risk into effective, auditable management decisions
Duesseldorf, Deutschland
Weltweit
Bachelor of Science Information Systems, Master of Business AdministrationÜber mich
Cybersecurity professional with 15+ years of experience who enjoys turning complex challenges into clear, workable solutions. I value trust, open communication, and strong teams, and I help organizations protect what matters while staying pragmatic, resilient, and future‑ready.
Skills
Künstliche IntelligenzArchitekturdesignGeschäftskontinuitätComplianceSicherheitskontrollenKrisenmanagementAllgemeines VerwundbarkeitsbewertungssystemKatastrophenplanungDisaster RecoveryDisaster-Recovery-PlanMulti-Faktor-AuthentifizierungIncident ResponseFührungskompetenzHardware-SicherheitsmodulIdentitätsmanagement
I am a cybersecurity and information security professional with extensive experience across governance, risk, compliance, and hands‑on security architecture. Since 2010, I have worked in complex environments ranging from DAX40 enterprises and critical infrastructure operators to public sector and regulated industries.
My core expertise lies in Information Security Management Systems (ISMS) based on ISO/IEC 27001, BSI IT‑Grundschutz, IEC 62443, and sector‑specific regulations such as NIS2, DORA, MaRisk, BAIT, VAIT, and GDPR. I specialize in translating regulatory and governance requirements into effective, auditable, and operational security controls.
I have deep experience in cyber risk management, including risk identification, assessment, treatment, and effectiveness measurement. My work focuses on management‑level risk decisions, governance structures, reporting, and defensible documentation rather than theoretical compliance.
On the technical side, I bring strong hands‑on expertise in security architecture, identity and access management (IAM), privileged access management (PAM), PKI, cryptography, and zero‑trust architectures. I have designed and led implementations involving Active Directory, Entra ID (Azure AD), HSMs, smartcards, certificate‑based MFA, conditional access, network segmentation, and secure cloud and hybrid environments.
I regularly work with tools such as Microsoft Sentinel, Entra ID, Azure AD Connect, CyberArk, SailPoint, Okta, Zscaler, Tenable Nessus, Rapid7, Qualys, Wireshark, RSA Archer, Power BI, Jira, Confluence, and ServiceNow. My technical background includes Windows and Linux platforms, networking protocols, scripting (PowerShell, Python), and secure infrastructure operations.
Beyond technology, I have strong experience in delivery leadership, stakeholder management, and crisis situations, including incident response, recovery management, business continuity, and tabletop exercises. I have led interdisciplinary teams, managed seven‑figure budgets, supported M&A security due diligence, and acted as a trusted interface between executive management, auditors, regulators, and technical teams.
My industry experience spans energy, telecommunications, finance, insurance, logistics, manufacturing, chemicals, automotive, healthcare, and public sector, with a strong focus on critical services and high‑impact environments.
My approach is pragmatic, impact‑driven, and focused on real‑world effectiveness, decision readiness, and measurable security outcomes—not checkbox compliance or abstract theory.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2026
Sprachen
DeutschMutterspracheEnglischverhandlungssicher
Projekthistorie
Supported a Europe-wide MSP procurement program for a leading energy and critical infrastructure organization. The objective was to consolidate the existing IT service landscape and establish a future-ready hybrid operating model. Operational services were to be transferred to an MSP, while governance, compliance, risk management, and provider oversight remained with the client.
Developed the Target Operating Model, service structure, governance framework, procurement requirements, evaluation methodology, KPI/KRI framework, qualification criteria, and supporting decision artifacts for the provider selection process.
Key Responsibilities
- Developed service specifications, requirement catalogues, and qualification criteria.
- Designed governance structures, service integration concepts, and provider management models.
- Defined security, compliance, and regulatory requirements for a critical infrastructure environment.
- Structured services into lots, modules, and service components.
- Developed evaluation methodologies, KPI/KRI frameworks, and quality criteria.
- Conducted market and provider assessments.
- Evaluated provider responses and supported bidder management.
- Defined contractual service boundaries and operational responsibilities.
- Prepared assessment scenarios and evaluation criteria for provider presentations.
- Facilitated workshops with IT, management, procurement, legal, compliance, and business stakeholders.
- Provided SME throughout the procurement process.
Led the IT and OT carve-out of an international manufacturing site as part of a legal entity separation and organizational transformation. The initiative included the separation of corporate and IT structures and the establishment of an independent operating environment for IT, OT, manufacturing systems, and supporting business functions. The project focused on target operating model design, separation planning, governance, TSA definition, risk management, and preparation of operational independence. Key challenges included information security, export controls, data protection, business continuity, and incomplete asset inventories.
Key Responsibilities
- Managed the overall IT/OT carve-out program.
- Defined scope, governance, workstreams, and separation scenarios.
- Developed project plans, milestones, transition concepts, and decision frameworks.
- Defined Day-1, Day-2, TSA, and target operating model requirements.
- Assessed impacts on SAP, infrastructure, IAM, security operations, OT, and manufacturing environments.
- Managed risks, dependencies, issues, assumptions, and management decisions.
- Developed cost estimates, operating model options, and transition scenarios.
- Coordinated international stakeholders across business, PMO, security, and technology teams.
- Prepared Steering Committee materials, executive status reports, escalations, and management recommendations.
- Executed the structured project handover and transition to the successor project manager.
Designed a scalable security and compliance governance model for a European provider of secure SaaS, collaboration, and virtual data room solutions. The objective was to establish a unified and auditable control framework consolidating security controls, evidence, certifications, audit requirements, and customer obligations. BSI C5 served as the primary framework and was integrated with ISO 27001/27002, NIS2, DORA, NIST CSF, and FINMA.
Key Responsibilities
- Assessed existing ISMS, security, governance, and compliance frameworks.
- Designed a Security & Trust Knowledge Model supporting audits, certifications, and compliance.
- Developed a C5-based multi-compliance framework and control catalogue.
- Mapped controls to ISO 27001, NIS2, DORA, NIST CSF, and FINMA.
- Defined controls, evidence, metrics, and ownership models.
- Established the “Control once, comply many” principle and harmonized requirements.
- Defined governance structures and control lifecycle processes.
- Developed dashboards, evidence repositories, and audit-ready artefacts.
- Created management and audit storylines for governance, resilience, supplier management, and compliance.
- Prepared decision papers, implementation options, operating models, and automation concepts for IAM, Cloud, SIEM, and GRC.