Freelancer profile translated to English.

Description

I support companies in implementing information security in a structured, risk-oriented, and practical manner, from strategy to operational implementation.

As an Information Security Manager with experience in the financial and critical infrastructure (KRITIS) sectors, I guide the establishment, further development, and operation of ISMS according to ISO 27001, as well as the implementation of regulatory requirements such as NIS2 and GDPR. My focus is on risk analyses, business impact analyses, policy development, and successful audit preparation.

I combine technical understanding from my past as a network and system administrator with sound experience in Governance, Risk & Compliance (GRC). This allows me to communicate effectively with IT teams, management, and business departments, and to establish sustainable solutions.

Typical projects:

Establishment and optimization of ISMS structures
Conducting risk and protection needs analyses
Preparation and support of ISO 27001 audits
Development of security policies and processes
Consulting on Cloud Security, IAM, and Vulnerability Management
Support with regulatory requirements (e.g., NIS2, GDPR)

My goal is not only to implement information security formally but to create real added value for the organization – understandable, efficient, and actionable.

Languages

German
Native or bilingual
English
Native or bilingual

Workplace preferences

Can work on-site

Wien (up to 50km)

OeKB CSD GmbH – Finance & Critical Infrastructure
Information Security Manager
BANKING AND INSURANCE
January 2025 - Today (1 year and 7 months)
Wien, Austria
• • Responsibility for Information Security Management (ISMS)
• • Conducting risk and protection needs analyses as well as business impact analyses
• • Support in Vulnerability Management and assessment of vulnerabilities
• • Management of Access Rights Management (permissions & roles)
• • Participation in Business Continuity Management (BCM)
• • Support in Capacity Management from a security perspective
• • Development of security policies, processes, and measures
• • Support for audits and implementation of regulatory requirements (ISO 27001, NIS2)
• • Consulting for management and business departments on security risks
Vulnerability Management Cybersecurity Governance, Risk and Compliance Risk Management Business Continuity Management
Siemens AG
System Administrator (Critical Infrastructure)
ENERGY AND UTILITIES
January 2023 - January 2025 (2 years)
Wien, Austria
• • Operation and further development of critical IT infrastructure
• • Implementation of technical security measures
• • Monitoring, Incident Handling, and Troubleshooting
• • Management of Identity & Access Management
• • Support for audits and security projects
• • Ensuring availability, integrity, and confidentiality
Linux Administration Incident Management IAM Audit Critical Infrastructure
Elektro Jacobus GmbH
Network Technician
ENERGY AND UTILITIES
January 2017 - January 2023 (6 years)
Wien, Austria
• • Planning and operation of network infrastructures
• • Network administration and IT support
• • High Availability
• • Configuration of switches, routers, and firewalls
• • Fault analysis and performance optimization
• • 2nd/3rd Level Support
• • Documentation and standardization of network processes
Cisco Networking Network administration Capacity Management Network Security IT Support