Freelancer profile translated to English.
Back to original languageAbout Michael Georg
DORA | NIS2 | AI-Act | CRA | IT-Audit Defense | Third-Party Risk Management (TPRM) | Compliance | ISO 27001 | BSI Grundschutz | Digital Operational Resilience Testing (DORT) | SBOM Strategies | GRC | ToM | sfO | Procedures | Measures | Policies | Processes | Operations | Tender Law | IKS
1. IT Regulation & IT Compliance
Focus Areas: Holistic implementation and auditing of DORA, NIS2, AI-Act (AI Regulation), Cyber Resilience Act (CRA), Data Act, SOX IT-GC (US)
Documentation: Creation of legally compliant Policies, ToMs, Process/Service Descriptions and SLAs - BIA, BCM
Special Knowledge: Blue Guide, Machinery Regulation, IDW EPS 528, CSSF 25/881 as well as EBA/EIOPA/ESMA Guidelines
2. Audit Prep, Management & Defense (High-End)
OSI Experience: Preparation and defense of On-Site Inspections (OSI) and audits by ECB, BaFin (§44 KWG), CSSF, FINMA and BSI
Audit Support: Management of IT annual audits (JAP), Remediation/Mitigation of Findings, avoidance of fines
3. Third-Party Risk Management (TPRM) & Cloud Governance
Supply Chain Security: Management of third-party risks, value chain analysis and implementation of SBOM (xBoM) strategies
Cloud Security: Compliance audit and due diligence for outsourcing projects to AWS, Azure, Google Cloud and Salesforce
Contract Design: Support in complex outsourcing negotiations and exit strategies
4. IT Risk Management & Resilience
Methodology: ERM, IRM, BIA, BCM and establishment of reporting lines according to regulatory requirements & international standards (NIST, ISO 2700x, ITIL, COBIT)
Testing: Conception and execution of resilience tests and scenario-based risk analyses, Legal Requirements
5. Project Support & Coaching
Interim Management: Proactive compliance support for IT projects (DevSecOps) and sparring partner for project managers
Awareness: Conducting management workshops / training programs to impart legal competence requirements
English
Native or bilingual
German
Native or bilingual
Can work on-site
St. Gallen (up to 50km)
Experience
- GREY APEInterim Advisor EU IT Regulation Compliance: #NIS2, #DORA, #CRAOctober 2023 - Today (2 years and 8 months)I will help you comply with regulations including but not limited to NIS2, DORA, CRA, etc., and go beyond simply rephrasing the WHAT but help you with the HOW and WHY as only informed and reasoned decisions will last in the long term
- FREELANCERIndependent external ICT Risk Control FunctionNovember 2024 - Today (1 year and 7 months)I serve as an independent external (interim/virtual/fractional) IT Risk & Compliance Control Function in the form of a fully outsourced service or supporting and consulting existing functions as a complementary service
- FREELANCERIT Audit Preparation and DefenseJuly 2023 - Today (2 years and 11 months)2. Documentation & evidence• - Ensuring complete and up-to-date documentation (e.g. guidelines, SOPs, controls)• - Systematic archiving of relevant emails, contracts and protocols• - Proof of implementation and compliance with internal and regulatory requirements5. Follow-up & lessons learned• - Review of audit results and identification of areas for optimization• - Development and implementation of measures to close identified gaps• - Documentation and sharing of findings for future audits• - got no LMS but Intranet? got you covered...
Recommendations
Be the first to recommend Michael Georg
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Project Management Foundations: Schedules Implementing the NIST Risk Management Framework Project Management Simplified Certified Information Systems Auditor (CISA) Exam Business EthicsProject Management Foundations: Schedules Implementing the NIST Risk Management Framework Project Management Simplified Certified Information Systems Auditor (CISA) Exam Business Ethics
- Outsourcing Software Packaging and Distribution - RfQLZPD2004Outsourcing Software Packaging and Distribution - RfQ