30.07.2026 aktualisiert
verifiziert
Premiumkunde
100 % verfügbarSenior Cyber Security Consultant and Auditor
Monheim, Deutschland
Weltweit
B.Sc. Business InformaticsÜber mich
Experienced AI & Cyber Security Consultant and Auditor with >8 years.
Skills
AuditsBusiness Continuity And Disaster RecoveryCertified Information Systems Security ProfessionalCertified Information Security ManagerComptia SecurityCertified in Risk and Information Systems ControlGlobal Information Assurance CertificationGIAC Security Leadership CertificationInformation AssuranceInformationssicherheitsmanagementISO / IEC 27001SystemsicherheitSystems Security Certified PractitionerCertified Information Systems AuditorTisax
Senior Cyber Security Consultant | CISM | ISO 27001 Lead Auditor | TISAX Lead Auditor | ISO 22301 Lead Auditor
I am an independent Senior Cyber Security Consultant and Managing Director of SHS Consulting GmbH with extensive experience in Information Security, Governance, Risk & Compliance (GRC), Business Continuity Management (BCM), IT Service Continuity Management (ITSCM) and Automotive Cybersecurity.
Over the past years, I have successfully delivered cybersecurity and resilience projects for international organizations across the banking, insurance, automotive, chemical, energy, software and financial services industries. My assignments range from strategic consulting and security governance to hands-on implementation, audit preparation and project management.
My expertise includes the design, implementation and optimization of Information Security Management Systems (ISMS) according to ISO/IEC 27001, Business Continuity Management Systems (BCMS) according to ISO 22301 and TISAX (VDA ISA) for the automotive industry. I also support organizations in meeting regulatory requirements such as DORA, NIS2, BAIT, MaRisk and BSI IT-Grundschutz.
Typical project responsibilities include:
- ISMS, BCMS and ITSCM implementation and optimization
- ISO/IEC 27001, ISO 22301 and TISAX audit preparation and internal audits
- Information Security Governance and GRC
- Risk Assessments and Risk Management
- Security Policies, Standards and Procedures
- Business Impact Analyses (BIA)
- Business Continuity and Disaster Recovery Planning
- Third-Party Risk Management
- Cloud Security (AWS & Azure)
- Product Security & Privacy Management
- Security Project and Program Management
- CISO Advisory and Information Security Strategy
- Regulatory Compliance (DORA, NIS2, BAIT, MaRisk)
I work closely with executive management, CISOs, IT departments, software development teams and business stakeholders to develop pragmatic, business-oriented security solutions that improve resilience while ensuring regulatory compliance.
Certifications:
- Certified Information Security Manager (CISM)
- ISO/IEC 27001 Lead Auditor
- ISO 22301 Lead Auditor
- TISAX Lead Auditor
- BSI IT-Grundschutz Practitioner
- AWS Certified Cloud Practitioner
- ITIL® 4 Foundation
Core Skills:
Cyber Security • Information Security • ISMS • ISO 27001 • ISO 22301 • TISAX • DORA • NIS2 • GRC • BCM • ITSCM • Risk Management • Internal Audit • Compliance • Cloud Security • AWS • Azure • Automotive Security • ISO 21434 • Business Impact Analysis • Disaster Recovery • CISO Advisory • Security Governance • Project Management • Stakeholder Management
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2022
Sprachen
DeutschMutterspracheEnglischverhandlungssicherFranzösischGrundkenntnisseSpanischGrundkenntnisse
Projekthistorie
- ITSCM Strategy
- Business Continuity Analysis
- ITSCM Policy
- ITSCM Workshops
- Disaster Recovery Plans
- Crisis Plans
- DR Handbooks
- DR Tests
- Information Security Consulting
- TISAX Implementation
- TISAX Audits
- ISMS Improvement
- Third Party Risk Management acc. to DORA
- Third Party Risk Assessments for IT services
- Creation of Management Reports
- Workshops with Business Owners