Senior Information Security Manager

2/2018 – offen

» Regulatory Identity and Access Compliance and Risk Reporting
» Information Security Data Management for Analytics Capability
» Definition of Identity and Access Compliance Management Strategy
» Program & Business Management for Business Information Security and Governance, Risk & Compliance department
» Developing a Universal Information Security Governance Model
» Leading the Authentication & Active Directory Council reporting to the CSO

Certified in Risk and Information systems Control (CRISC), CISM (Certified Information Security Manager), Compliance management, DIN ISO/IEC 27001

2/2015 – 1/2018

» Re-assess the existing Regulatory Identity and Access Compliance & Risk Reporting and create an automation concept
» Assessment of Information Security Solutions (e.g. Grant , Manage, Revoke Access Management, Recertification, Segregation of Duties Management System, Privileged Access Management) processes and their compliance to Information Security standards & Regulations (ISO 2700x, Cobit, MaRisk, …)
» Create a concept to optimize Identity and Access Management processes to achieve policy compliance
» Create a risk based remediation approach by prioritizing non-compliances and create a concept for a criticality assessment of IT assets

Agile Entwicklung, Certified in Risk and Information systems Control (CRISC), Compliance management, DIN ISO/IEC 27001, Projektmanagement (IT), Risikomanagement

4/2014 – 1/2015

Internationales EU-Projekt „c-Space“


• Teilprojektleiter, Entwickler
o Definition der Aufgaben der Projektbeteiligten im Fraunhofer IGD
o Meilensteinplanung
o Definition der Schnittstellen
o Präsentation der Zwischenergebnisse an die übergeordnete Projektmanagementinstanz

Projektleitung / Teamleitung (IT), Projektmanagement (IT), SCRUM, Visual C++