22.07.2026 aktualisiert

**** ******** ****
100 % verfügbar

Senior Cybersecurity Consultant - Industrial & Product Security | KRITIS / NIS-2 & CRA / UNECE

Dichtelbach, Deutschland
Weltweit
CISSP, ISO 27001 LA, Scrum Master + Product Owner, MBA, B. Eng - El. Eng. specialization Automation
Dichtelbach, Deutschland
Weltweit
CISSP, ISO 27001 LA, Scrum Master + Product Owner, MBA, B. Eng - El. Eng. specialization Automation

Profilanlagen

CISSP Zertifikat
ISO 27001 Lead Auditor Zertifikat
20260720_CV_David_Kleinz_EN.docx

Über mich

I help to secure the Internet of Things by Design: https://panther.blue/

Skills

AuditsAutomobilindustrieInformationssicherheitGap-AnalyseSicherheitstechnikInfrastrukturISO / IEC 27001Management SystemeProzessdesignFunkgeräteAnforderungsanalyseBedrohungsmodelIEC 62443TisaxConnected CarsInternet Of ThingsIndustrie 4.0RisikoeinschätzungSmartgridSicherheitsbestimmungen
I help to secure the Internet of Things by Design with the following focus and services:

Industries:
- Automotive Security
- Industrial Security
- Product Security

Goals:
- Security by Design
- Security for Safety
- Product Security

Standards:
- ISO/SAE 21434 - Automotive Cybersecurity
- IEC 62443 - Industrial / OT Cybersecurity
- ISO 27001 / TISAX - IT Cybersecurity

Regulations:
- CRA (Cyber Resilience Act)
- UNECE R155 / R156
- KRITIS / NIS-2
- RED (Radio Equipment Directive)

Targets:
- IoT Devices
- Connected Vehicles
- Industry 4.0 / IIoT

Methods / Services:
- Agentic AI
- Gap Analysis
- Risk Assessment
- Threat Modeling
- Security Engineering
- Policy & Process Design
- Secure Development Lifecycle
- Cybersecurity Management System

Use Cases:
Autonomous Driving, Critical Infrastructure, Digital Factory, Smart Grid, Smart Home / Building / City

Erfahrung

Berufserfahrungmehr als 10 Jahre
Freelancer seit2018

Sprachen

DeutschMutterspracheEnglischverhandlungssicher

Projekthistorie

OT-Security Consultant - Rail

Rail company

Transport und Logistik

>10.000 Mitarbeiter

Systemdevelopment and OT-Security consulting for automated train project according to TSI 50701, IEC 62443-3-3, ISO 27001 and KRITIS / NIS-2.

Product Security Consultant

Automation company

Industrie und Maschinenbau

>10.000 Mitarbeiter

Product security lead for industrial pneumatic control units with the following activities:
  • Assessment of cybersecurity concept for connected industrial pneumatic ECUs
  • IEC 62443-4-2 compliance check
  • Specification of technical concept for implementation

Industrial Security Consultant / Project Manager

Food production corporation

Industrie und Maschinenbau

5000-10.000 Mitarbeiter

OT-security organization setup, project management, risk assessment, concept design, stakeholder & partner management and ISMS implementation in compliance to NIS-2 (Network and Information Security Directive) according to ISO 27001 and IEC 62443.

Industrial / Product Security Consultant

Japanese Industrial Automation

Industrie und Maschinenbau

>10.000 Mitarbeiter

Assessment of secure development lifecylce / development according to IEC 62443-4-1 for certification.
Certification was successfully reached afterwards.

Product Security Consultant

German Consumer Products Company for Gardening Equipment

Konsumgüter und Handel

>10.000 Mitarbeiter

Product security lead for connected consumer products (including mowing robots) with the following activities:
  • Assessment of cybersecurity concept for connected consumer products
  • Ensuring compliance to Radio Equipment Directive (RED)
  • Lead of product security team
  • Manual and automated vulnerability assessment & management
  • Conduction of threat analysis and risk assessment
  • Development of an OT-security concept / roadmap for the production

Automotive Cybersecurity Consultant

Austrian Motorcycle Manufacturer / OEM

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

Implementation of the Cybersecurity Management System (CSMS) according ot ISO/SAE 21434 including:
  • Process and template design
  • Development of a threat analysis and risk assessment methodology
  • Cybersecurity policy design
  • Compliance to UNECE R155
  • Trainings of the team
  • Certification support

Industrial / OT Cybersecurity Consultant

Oil & Gas producer - Middle East

Energie, Wasser und Umwelt

>10.000 Mitarbeiter

Assessment of OT-security & creation of technical / commercial concept compliant to QP standards, IEC 62443 & ISO 27001 including:
* Risk assessment
* OT-security audit
* Security monitoring incl. SIEM
* Design of Security Operations Center
* Identity Access Management
* Network segmentation incl. Firewalls

Automotive Cybersecurity Consultant & Trainer

Japanese Automotive Tier-1

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

Training and consulting of Automotive Tier-1 for car access systems according to ISO / 21434 including:
* ISO/SAE 21434 implementation & training
* Threat modelling
* Secure HW / SW architecture
* Secure coding & testing
* PKI & backend integration

Automotive Cybersecurity Trainer

Austrian Automotive OEM

Automobil und Fahrzeugbau

1000-5000 Mitarbeiter

Management training on automotive cybersecurity including
* Automotive cybersecurity management system according to ISO/SAE 214344
* Automotive information security management system according to TISAX / 27001
* Secure manufacturing according to IEC 62443

Industrial / OT Cybersecurity Trainer

Japanese Industrial Automation OEM

Industrie und Maschinenbau

>10.000 Mitarbeiter

Management training on industrial / OT cybersecurity training including
* Secure manufacturing according to IEC 62443

Cybersecurity Consultant

Canadian Automotive Tier-1

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

* Implementation of a security management system for powertrain products
including:
* Assessment of information security status quo
* ISO 21434 management system implementation
* Cybersecurity policies creation
* Threat modeling / risk analysis
* Cybersecurity requirements for operations organizations
* Secure production / manufacutring concept

Project Manager

German Automotive Tier-1

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

* Project management and consulting in automotive cyber security team for ADAS computing platform,
electronic brake systems and suspension systems including:
* Supply chain management process design (ASPICE)
* Cybersecurity management system implementation
* Team leadership for in-vehicle-communication team (CAN + Ethernet) and SW engineering (AUTOSAR)
* Requirements management

Cooperative Student

German Automotive Tier-1

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

* System and HW engineering for connected car computing platform and passive safety and sensorics
products including:
* V2X communication and network security
* Hardware accelerated cryptography
* Secure system design / hardware development
* Three months ADAS development in Auburn Hills, Michigan (USA)

Zertifikate

ISO 27001 Lead Auditor

PECB

2019

Certified Information System Security Professional (CISSP)

ISC2

2019

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden