Cyber Security & Compliance
Information security that passes the audit – and works in daily operations.
For more than eight years I have built and led security programmes at corporations, critical infrastructure operators, industrial companies and SMEs. I combine programme leadership with an auditor's perspective: I build management systems and audit them as an ISO 27001 Lead Auditor.
Services
What I take on for you
- NIS2 & CRA check – scope assessment, gap analysis and a prioritised roadmap in about ten days. Price on request.
- External CISO / CISO-as-a-Service – your information security in experienced hands, flexibly a few days per month.
- ISMS per ISO 27001 & BSI IT-Grundschutz – set-up, realignment and handover into steady state.
- SOC & incident response – building security operations, playbooks, reporting lines, cyber drills and tabletop exercises with management.
- Audit readiness & internal audits – so your next audit holds no surprises.
- Programme & interim leadership – security and transformation programmes with budget, schedule and staff responsibility.
Selected projects
Anonymised for confidentiality. Details and references happily shared in a personal conversation.
Critical infrastructure utility
Built a central security operations centre across four business units and more than 100 operational sites.
Engineering & industry
Realigned the ISMS, integrated management system and NIS2/CRA strategy for parent and subsidiaries. Also: ISMS implementation per ISO 27001 at an industrial company – all milestones met.
International healthcare group
Audits of ISMS and business continuity in four countries.
Deutsche Bahn
SOC of DB Netz AG and cyber security for Digitale Schiene Deutschland – five years of programme responsibility at DB Systel.
Certifications
Verified credentials, not self-assessment
Plus: Certified OT Security Expert (TÜV Austria, IEC 62443) · IPMA Level C (GPM) · PRINCE2 Agile Practitioner · Professional Scrum Master I.
CISSP
Certified Information Systems Security Professional (ISC2) – the international standard for security leaders.
ISO 27001 Lead Auditor
Building, auditing and certifying management systems to ISO/IEC 27001 – from both the implementer's and the auditor's perspective.
BSI IT-Grundschutz Practitioner
Certified by Germany's Federal Office for Information Security (BSI) – methodology per BSI Standards 200-1 to 200-3.