Freelancer profile translated to English.

Description

For many years, I have been building, implementing, and further developing information security, data protection, and emergency management in an adequate and optimized way for the company's needs. It is important to involve and coach employees in this process. I have acquired the necessary tools through 30 years of professional experience in IT areas in various roles such as system administrator, IT strategy consultant, chief architect, development manager, IT quality manager, and coach.

Current focus areas are information security, cyber security, and emergency management, as well as audits of the standards ISO27001 (Information Security) and ISO 42001 (Artificial Intelligence).

Industry field of expertise

Languages

German
Native or bilingual

Workplace preferences

Can work on-site

Düsseldorf (up to 50km)

Finanzdienstleister
Operation in the context of DORA and essential outsourcing
BANKING AND INSURANCE
May 2025 - January 2026 (8 months)
Frankfurt am Main, Germany
The client wanted to take over the operation of a business process and had to cover DORA and ISO27001 requirements. The fact that it was an essential outsourcing added to the complexity.
I provided significant support in the contractual setup and the implementation of the requirements. A key aspect was understanding the end customer's requirements, mapping them to the current situation with developers and operations colleagues. Furthermore, refining the requirements in contract texts so that only relevant points were fixed and discussing pragmatic solutions.
Additionally, I negotiated the IT Security Schedule with the end customer and accompanied the audit.
ISO 27001 Coaching DORA MaRisk
Öffentliche Verwaltung
Development of an AI system
PUBLIC SECTOR
March 2025 - May 2026 (1 year and 2 months)
An AI system was developed for the client. My task was to identify and implement the requirements of the EU AI Act and ISO 42001. This included, among other things, the development of a security concept according to ISO27001 and conducting an AI Impact Analysis with regard to technical aspects. Furthermore, GDPR was considered to adequately secure personal data.
ISO 27001 IT Security ISO42001 AI IT Security Concepts
Beratung
Freelancer
RESEARCH
December 2023 - Today (2 years and 8 months)
Support in the introduction of ISO27001/ISO27701 in a research context. This involves creating supporting materials for the development of management systems.
Creation of supporting materials for ISO27001