Freelancer profile translated to English.

Description

Experienced Chief Information Security Officer (CISO) and TÜV-certified ISO 27001 Auditor, Manager, and Officer. The core competence lies in the holistic implementation and management of Information Security Management Systems (ISMS) according to ISO 27001 and BSI IT-Grundschutz, especially in the context of NIS2 regulation for the mechanical engineering industry.

Areas of Activity & Expertise

Auditing & Compliance: Conducting internal and external audits and preparing companies for certification readiness.

Risk Management: In-depth expertise in risk and asset analysis as well as Business Continuity Management (BCM).

IT Infrastructure Security: Many years of experience in hardening and administration of Microsoft server landscapes (AD, Azure, M365) and in assessing system security.

Strategic Security: Holistic IT security assessments, network design (LAN/WAN), and implementation of security standards such as TISAX.

Technical Foundation: Sound knowledge in virtualization (vSphere, Hyper-V), backup solutions (Veeam), and cloud migrations.

By combining technical depth as a former system administrator with the strategic level as an ISMS auditor, security architectures are not only planned theoretically but are anchored in the company in a practical and process-oriented manner.

Languages

German
Native or bilingual
English
Conversational
Russian
Conversational

Workplace preferences

Can work on-site

Stadtkreis Stuttgart (up to 50km), Landkreis Freudenstadt (up to 50km), Stadtkreis Baden-Baden (up to 50km)

Weitmann und Konrad GmbH & Co. KG
Chief Information Security Officer
MECHANICAL ENGINEERING
January 2024 - January 2026 (2 years)
Leinfelden-Echterdingen, Germany
As Chief Information Security Officer, I was responsible for the introduction of an ISMS system based on ISO27001. The company is part of the mechanical engineering sector and thus affected by NIS2. The mandate was based on an external service provider contract with Alfa IT-Service. In this project, I was able to ideally combine my experience from previous projects with the local conditions and thus install an ISMS foundation within a short time, which is now being built upon and expanded in a continuous improvement process. The project will be completed and handed over at certification readiness by the end of the contract.
ISO 27001 Auditor IT Security GRC
Walter Knoll AG & Co. KG
IT SYSTEM ADMINISTRATOR
January 2023 - January 2024 (1 year)
In my professional role as an IT Infrastructure Specialist focusing on 2nd Level Support & End-User-Compute, I ensured IT support for the DACH region. I was responsible for managing incidents and service tasks via ServiceNow as well as asset and access management using Jira. Additionally, I worked on important IT projects, including network expansion and the introduction of SCCM servers.
IT Security
Arvato Bertelsmann AG
ONSITE SUPPORT SPECIALIST
January 2022 - January 2023 (1 year)
In my role as OnSite Support Specialist at Arvato Bertelsmann AG, I was responsible for the comprehensive support of local IT. My tasks included the maintenance and management of printers and mobile devices, as well as the execution of on-boarding and off-boarding processes. I established myself as a Local IT Hero by reliably and efficiently addressing user needs and ensuring that the IT infrastructure ran smoothly.