Freelancer profile translated to English.

Description

Senior Management Consultant with over 25 years of experience in IT Transformation, Governance & Compliance. Specialized in strategic management of complex, crisis-relevant multi-project and IT transformation programs with a regulatory focus (MaRisk, BAIT, DORA, KWG). Core competencies: IT Governance & Compliance, IT Service Management (ITIL4 Master), Network Security & IT Security Management, Process Automation & RPA, IT Strategy & Master Planning. Current engagements: Program Management Infrastructure & Network Security, Splunk App Development, PoC XDR Implementation, DORA Readiness.

Industry field of expertise

Languages

English
Fluent
German
Native or bilingual
French
Basic
Italian
Basic

Workplace preferences

Can work on-site

Frankfurt am Main (up to 50km), München (up to 100km), Hamburg (up to 50km), Köln (up to 50km)

Finanzdienstleister Frankfurt/Luxemburg
Senior Consultant IT & Network Security
BANKING AND INSURANCE
October 2024 - February 2025 (4 months)
PoC Extended Detection & Response (XDR / Crowdstrike + ZScaler); Target Operating Model (Roles, Responsibilities, Approval Processes); DPIA for AI Use; ITSM Workshops with IT Management, Gap Analysis, Design of BaFin/BAIT-compliant Process Landscape, Process Modeling (Camunda/Visio), Rollout Roadmap, KPI-based Process Reviews; CMDB Optimization (MaRisk/BAIT/EBA), Lifecycle Management Process (Onboarding, Re-certification, Decommissioning), Methodology for Critical Functions/Applications (EBA Guidelines)
Process Modeling Scrum IT Security Process Management DORA
Finanzdienstleister
Execution of a Proof of Concept (PoC) for Extended Detection and Response (XDR)
BANKING AND INSURANCE
October 2024 - December 2024 (3 months)
Execution of a Proof of Concept (PoC) for Extended Detection and Response (XDR) for the integration and analysis of network data (Firewall, Proxy, WAF etc.) in Crowdstrike's XDR solution. This also includes the integration and analysis of EDR information from clients and servers from ZScaler.

• Clarification, processing, and documentation of compliance and regulatory topics as well as risk management
• Documentation of PoC regarding data protection and use of AI.
• Development of an operating model, especially clarification and coordination of responsibilities.
Bank
Project Management Network Security Policy Management
BANKING AND INSURANCE
July 2022 - December 2024 (2 years and 6 months)
Frankfurt am Main, Germany
Project Management Network Security Policy Management
Introduction of NSPM solution including preparation and management of EU tender
Implementation of application and re-certification processes in the NSPM solution, including presentation of the application in various governance bodies / boards
Coordination of use cases with the manufacturer for subsequent implementation in their NSPM solution
*
NSPM agile-project-management project-governance Process Management Project Management