05.08.2026 aktualisiert
100 % verfügbar
Executive Quant & Model Risk Consultant
Nidderau, Deutschland
Weltweit
Staatsexamen RechtswissenschaftenÜber mich
Wir unterstützen Unternehmen dabei, KI von isolierten Pilotprojekten in sichere, revisionsfähige und auf den ROI ausgerichtete produktive Anwendungsfälle zu überführen – mit Lösungen für Enterprise Level KI, die von der Rechtsabteilung, IT-Sicherheit und Compliance freigegeben werden können.
Skills
LLMAtlassian JiraComplianceGovernance-Risikomanagement und ComplianceIt-RisikomanagementIt-GovernanceScrumQuantitative MethodenRisk-based TestingSAP GRCSQLTest ManagementSicherheitsauditsQuantitative AnalyseSAP AIF
IT General Controls (ITGC) Assessment
Risk-based ITGC assessments across access, change, operations, and key SDLC domains, including control design and operating effectiveness testing through structured, evidence-led audit procedures.
Risk & Compliance Frameworks
Application of NIST SP 800-53, SOX, ISO 42001, EU AI Act, and NIST AI RMF concepts to map controls, classify risks, and build audit-ready evidence chains linking risks, controls, test steps, findings, and owners.
ServiceNow IRM & Toolstack Expertise
Working knowledge of ServiceNow IRM for risk records, control attestations, issues, and remediation workflows, complemented by proficiency in Jira, Confluence, Microsoft Excel, IAM/Active Directory, SQL, and Git/CI/CD toolchains.
Scrum-Based Risk Management
Execution of Scrum-based risk assignments with clear owners, due dates, blockers, and escalation paths, supporting structured delivery of audit and compliance workstreams.
Change & Release Governance
Evaluation of release governance, segregation of duties, approvals, testing, and rollback readiness, covering change and release workflows from request through deployment.
SDLC Controls & IT Operations
Assessment of SDLC controls spanning requirements, secure design, testing, migration, and production, as well as IT operations controls for jobs, backups, incidents, monitoring, and problem management.
Audit Finding Management
Management of audit findings from root cause and risk rating through remediation and closure validation, including facilitation of control walkthroughs with SMEs and presentation of actionable conclusions to leadership.
AI Risk & Governance
Application of NIST AI RMF Govern, Map, Measure, and Manage concepts to emerging AI risk reviews, with understanding of ISO 42001 governance structures and EU AI Act obligations for risk classification.
Evidence Chain & Audit Readiness
Building of audit-ready evidence chains linking risks, controls, test steps, findings, and owners, while challenging control narratives for precision, repeatability, ownership, frequency, and evidence.
Risk-based ITGC assessments across access, change, operations, and key SDLC domains, including control design and operating effectiveness testing through structured, evidence-led audit procedures.
Risk & Compliance Frameworks
Application of NIST SP 800-53, SOX, ISO 42001, EU AI Act, and NIST AI RMF concepts to map controls, classify risks, and build audit-ready evidence chains linking risks, controls, test steps, findings, and owners.
ServiceNow IRM & Toolstack Expertise
Working knowledge of ServiceNow IRM for risk records, control attestations, issues, and remediation workflows, complemented by proficiency in Jira, Confluence, Microsoft Excel, IAM/Active Directory, SQL, and Git/CI/CD toolchains.
Scrum-Based Risk Management
Execution of Scrum-based risk assignments with clear owners, due dates, blockers, and escalation paths, supporting structured delivery of audit and compliance workstreams.
Change & Release Governance
Evaluation of release governance, segregation of duties, approvals, testing, and rollback readiness, covering change and release workflows from request through deployment.
SDLC Controls & IT Operations
Assessment of SDLC controls spanning requirements, secure design, testing, migration, and production, as well as IT operations controls for jobs, backups, incidents, monitoring, and problem management.
Audit Finding Management
Management of audit findings from root cause and risk rating through remediation and closure validation, including facilitation of control walkthroughs with SMEs and presentation of actionable conclusions to leadership.
AI Risk & Governance
Application of NIST AI RMF Govern, Map, Measure, and Manage concepts to emerging AI risk reviews, with understanding of ISO 42001 governance structures and EU AI Act obligations for risk classification.
Evidence Chain & Audit Readiness
Building of audit-ready evidence chains linking risks, controls, test steps, findings, and owners, while challenging control narratives for precision, repeatability, ownership, frequency, and evidence.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2007
Sprachen
DeutschMutterspracheEnglischverhandlungssicherFranzösischGrundkenntnisse
Projekthistorie
Prepared control matrices and test scripts, executed interviews and evidence review, rated findings, produced concise, audit-ready conclusions.
Tested approvals, recertifications, changes, jobs, and incident evidence; challenged gaps; tracked corrective actions through closure validation.
Mapped risks to controls, evaluated access, operational, and release evidence, documented risk assignments, strengthened audit readiness and management reporting.