19.06.2026 aktualisiert
20 % teilweise verfügbar
Cybersecurity Manager | Security Governance | AI Security | NIS2 | CRA | Operational Resilience
Stuttgart, Deutschland
Nur Remote
Master of Science in Financial Management, Universitatea Constantin BrancoveanuÜber mich
Cybersecurity Manager specializing in Security Governance, AI Security, NIS2, CRA and Operational Resilience. Experienced in designing security guardrails, CTEM programs, SOC transformation and risk-based cybersecurity operating models across enterprise, cloud and critical infrastructure.
Skills
AI AgentsSOC 2Cloud FoundryData GovernanceDisaster RecoveryInformationssicherheitsmanagementIt-GovernanceSicherheit VerwaltungVulnerability ManagementCisco CertificationPalo Alto NetworksFortinet
Cybersecurity Manager with experience across Security Governance, Cyber Resilience, Risk Management and Security Transformation within enterprise and critical infrastructure environments. Strong background in aligning cybersecurity strategy with business objectives, regulatory requirements and enterprise risk management frameworks.
Experienced in translating cyber risks into executive decision-making frameworks, governance structures and sustainable security operating models across IT, Cloud and Operational Technology (OT) environments. Proven ability to establish governance mechanisms, KPI/KRI frameworks, assurance processes and executive cyber risk reporting.
Leadership and advisory experience supporting enterprise cybersecurity programs aligned with NIS2, ISO 27001, IEC 62443, the Cyber Resilience Act (CRA) and NIST-based security practices. Focus on governance maturity, regulatory transformation, resilience programs, operating model design and enterprise-wide security initiatives.
Experience designing and operationalizing Threat, Vulnerability and Exposure Management (TVM) programs aligned with Continuous Threat Exposure Management (CTEM) principles. Supporting attack surface reduction, exposure governance, remediation prioritization and risk-based decision making across enterprise, cloud and OT environments.
Strong background in Cyber Resilience, Operational Resilience, Incident Response Governance and Disaster Recovery. Experience supporting organizations in integrating resilience objectives into governance frameworks and business processes while balancing operational requirements, business priorities and regulatory expectations.
Experience supporting Identity & Access Security programs including Identity Governance, Privileged Access Management, Conditional Access, MFA and Zero Trust initiatives. Supporting cloud and SaaS security programs across Azure, AWS and hybrid environments, including Cloud Security Governance, API Security, CIEM and third-party ecosystems.
Experience supporting AI Security Governance initiatives, security guardrails, risk management frameworks and governance models for responsible AI adoption.
Experience in SOC operating models, Security Transformation, Third Party Risk Management (TPRM), Security Architecture Governance and executive cyber risk reporting.
Core Competencies
• Security Governance
• Cyber Resilience & Operational Resilience
• NIS2 Readiness
• AI Security Governance
• Cyber Resilience Act (CRA)
• Threat & Vulnerability Management
• Continuous Threat Exposure Management (CTEM)
• Cloud Security Governance
• Identity & Access Security
• Security Guardrails
• SOC Transformation
• Third Party Risk Management (TPRM)
• Operational Technology (OT) Security
• Security Strategy & Transformation
Industry Experience
Critical Infrastructure, Energy, Utilities, Enterprise IT, Cloud Transformation, Operational Technology and Security Program Leadership.
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2026
Sprachen
DeutschverhandlungssicherEnglischverhandlungssicherRumänischMuttersprache
Projekthistorie
Strategische Operationalisierung von Security Governance, Kontrollen und Assurance. Steuerung von Threat- und Vulnerability-Management im CTEM-Ansatz. Konzeptionelle Fuehrung von Identity & Access Management. Uebergreifende Verantwortung fuer Cloud- und SaaS-Security. Konzeption einer unternehmensweiten AI-Security-Strategie. Weiterentwicklung von Incident-Response-Faehigkeiten. Aufbau von Third-Party- und Supply-Chain-Risk-Management. Konzeption von SOC-Zielbetriebsmodellen und Security Detection. Zentrale Schnittstellenfunktion zwischen Security, IT, Business und OT.
Bestimmung der Geschaeftsanforderungen fuer IT-Systeme. Ueberwachung und Dokumentation der Einhaltung nationaler und internationaler Sicherheitsnormen (IT-Grundschutz, ISO/IEC 27002, IEC 62443, NIST SP 800-207, NIST SP 800-53, KRITIS-Dachgesetz). Regulatorische Umsetzung der NIS2-Richtlinie. Netzwerk Design Validierung und Weiterentwicklung fuer Datacenter, Campus und Standorte mit Cisco und Fortinet Tech Stack. Network Upgrades und TAC-Support. Bearbeitung von Security/Network-Incidents. Deployment SAP 4/HANA Systemen. Implementierung kryptographischer Verfahren. Technische Projektleitung fuer Infrastrukturprojekte (Zero Trust Architektur, NAC, WLAN, SUSE Manager).
Netzwerkuleberwachung und Stoerungsbehebung fuer Core Switches, Edge Routers, WLAN-Controller, Firewalls und Distribution Stack. Ticketmanagement von Stoerungen, Incidents, Tasks und Changes. Unterstuetzung der WAN-Partner bei der Stoerungsbehebung. Koordinierung interner Experten des Problem- und Eskalationsmanagements. Durchfuehrung von Netzwerkvertraeglichkeitspruefungen und Zertifizierung fuer Industrienetzwerk. Planung von WLAN-Ausleuchtungen und Datenabgleich mit Cisco Prime und DNA-Center. Technische Detailplanung in Aufbau- und Change-Projekten.