Carola Maier

Hello,

in many companies, data protection and ISMS only become critical when audits are pending or projects are already underway – and it is precisely then that structure in operational implementation is often lacking.

This is precisely where I support.

I specifically handle the practical implementation of data protection and ISMS topics, e.g.:

- Creation and maintenance of records of processing activities (VVT), TOMs, and guidelines

- Preparation and structured support for ISO 27001 audits

- Support in implementing NIS2 requirements

- Interface work between IT, business departments, and data protection

My focus is deliberately on operational implementation (no legal advice) – in other words, where bottlenecks often occur in practice.

Through my current role as a Business Analyst / Requirements Engineer, I work very systematically on processes and requirements – a clear advantage, especially in IT and project environments.

💡 An uncomplicated start is possible, for example, through:

- a short "Quick Check" or

- a clearly defined work package

Availability: approx. 8-10 hours per week, remote / Munich area

If this is currently or prospectively relevant for you, I look forward to a brief exchange.

Best regards