Markus Wagner

I am a passionate Information Security and GRC expert with over 10 years of experience in highly regulated industries. My background with global market leaders like Mercedes-Benz Group AG and MHP – A Porsche Company has shaped my approach: I combine "German Engineering" precision with agile solution development for modern IT landscapes.

What do I do?

I help companies understand security not just as a technical hurdle, but as a strategic advantage. My focus is on:

• GRC Frameworks: Building and auditing ISMS according to ISO 27001, TISAX®, or NIST.

• Risk Management: Identifying and minimizing IT risks through pragmatic assessments.

• Compliance & Audit: Preparing for and supporting certifications (SOC2, ISO) and conducting internal audits (IT-ICFR/SOX).

• SaaS & Cloud Security: Ensuring compliance in cloud environments (AWS/Azure) for modern software companies.

How I enrich projects (Value Add)

Clients benefit from my experience at the intersection of management and technology:

1. Tried-and-tested concepts: No theoretical paper tigers – I implement processes that actually work in daily operations.

2. Fast Time-to-Compliance: Leveraging my experience with tools like Vanta, Tugboat, or SAP ICoM, I accelerate the path to certification readiness.

3. Stakeholder Management: I speak the language of auditors and developers alike, significantly increasing internal acceptance for security topics.

4. Scalability: I help startups and SMEs build professional governance structures that grow with the company.