Freelancer profile translated to English.

Description

I support companies in structuring and sustainably improving their information security – from the initial security assessment to an audit-ready ISMS according to ISO 27001 or BSI Basic Protection.

My approach is deliberately pragmatic:

I translate complex requirements into understandable structures, make risks tangible, and develop measures that can actually be implemented.

I work closely with IT, business departments, and management.

What my clients particularly appreciate:

Clear, comprehensible derivation of risks and measures
Structured approach without unnecessary complexity
Focus on implementation rather than pure documentation
Reliable support for audit and compliance requirements

I have experience in establishing and further developing ISMS, in IT risk management, and in the role of Information Security Officer (ISB).

Industry field of expertise

Languages

German
Native or bilingual

Workplace preferences

Can work on-site

Nürnberg (up to 50km)

Quality4IT GmbH
Independent (Freelance) IT Consultant
DIGITAL AND IT
February 2012 - Today (14 years and 6 months)
Nürnberg, Germany
Consulting in the area of information security (according to BSI Basic Protection and ISO 27001) and support in data protection (GDPR), especially in the creation of a record of processing activities and technical and organizational measures.
IT Security GDPR Project Management IT Quality Assurance
QualityMinds GmbH im IT-Systemhaus der Bundesagentur für Arbeit.
IT Security Officer
November 2019 - Today (6 years and 9 months)
On behalf of the IT Security department, I conduct QA reviews of IT security documentation and act as a Security Coach for various departments. Conducting and moderating risk analyses. Following up on action implementation plans, security tickets, and audit tickets. Supporting operations in IT security matters and accompanying maturity audits. Representing the department in customer expert committees on IT security. I support a department with 14 sub-projects in the creation and maintenance of IT security-relevant documentation (security assessment, risk analysis, coordination of the implementation of required measures), preparation and support of sub-projects in internal information security maturity audits, clarification of data protection issues. Representation of the department in customer expert committees on IT security.
Behörde
IT Security Officer
DIGITAL AND IT
November 2017 - October 2019 (1 year and 11 months)
As IT Security Officer, I support a department with 14 sub-projects in the creation and maintenance of IT security-relevant documentation (security assessment, risk analysis, coordination of the implementation of required measures), preparation and support of sub-projects in internal information security maturity audits, clarification of data protection issues.