freiberufler Senior Manager IT-Berater | IT-Sicherheitsberater | PRINCE2 Projektmanager | ISO 27001 Auditor auf freelance.de TOP RATED

Senior Manager IT-Berater | IT-Sicherheitsberater | PRINCE2 Projektmanager | ISO 27001 Auditor

offline
  • auf Anfrage
  • Berlin
  • Weltweit
  • de  |  en
  • 03.12.2025
  • Contract ready

Kurzvorstellung

Erfahrener IT-Berater (15+ Jahre) in IT-Management, -Operations, Sicherheits- & Risikomanagement. Technisch versiert, strategisch, durchsetzungsstark. Selbstmotiviert, strukturiert, lösungsorientiert mit exzellenten Führungs- & Kommunikationsskills.

Auszug Referenzen (7)

"Structured, comunicative 'go gether' with with a strong 'can do' mentality. A pleasure to work with!"
IT Risk Coordinator / Information Security Coordinator
Kundenname anonymisiert
Tätigkeitszeitraum

11/2023 – 5/2025

Tätigkeitsbeschreibung

• Ensuring compliance to companies ISMS measures
• Ensuring compliance to the companies Risk Management process

Eingesetzte Qualifikationen

IT-Berater, IT-Sicherheitsberater, IT Sicherheit (allg.), Leiter IT

"Mr. M. professional way to lead the initiative has bring the desired success."
Project Manager – Jump Servers 2.0
Uwe Oberdörfer
Tätigkeitszeitraum

7/2022 – 5/2023

Tätigkeitsbeschreibung

• Led a security-hardening initiative for existing RDP-based jump servers, focusing on mitigating lateral movement risks and strengthening access control mechanisms.
• Designed a new-generation jump server architecture, incorporating modern security principles such as segmentation, least privilege, and just-in-time access.
• Developed, tested, and implemented Key Risk Indicators (KRIs) to proactively monitor the security posture and detect anomalous behaviour across access points.
• Managed the large-scale rollout of the new jump server solution across the enterprise environment, ensuring minimal disruption and full compliance with security policies.

Eingesetzte Qualifikationen

IT-Berater, IT-Infrastrukturspezialist, IT-Sicherheitsberater, IT-Projektleiter

"S. überzeugt durch Can-Do-Mentalität, strategisches Denken mit Umsetzungsstärke und klarem Fokus auf Menschen und Kommunikation."
SME Lead SecOps Team
Dora Bodo
Tätigkeitszeitraum

9/2021 – 10/2023

Tätigkeitsbeschreibung

• Established a centralized team dedicated to managing and addressing security patches across the organization, improving consistency and response time.
• Designed and operationalized the Threat and Vulnerability Management (TVM) process, ensuring timely detection, prioritization, and remediation of security risks.
• Developed and formalized core processes for the Security Operations (SecOps) team, streamlining workflows for incident handling, monitoring, and escalation.
• Planned and executed regular security changes to systematically reduce the organization’s attack surface and enhance its overall risk posture.
• Led company-wide security awareness initiatives, including targeted communication campaigns to foster a security-first culture among technical and non-technical staff.

Eingesetzte Qualifikationen

Sicherheitsmanagement

"S. did an excellent job as project manager."
Project Manager – Data Center Handover
Kundenname anonymisiert
Tätigkeitszeitraum

9/2021 – 6/2022

Tätigkeitsbeschreibung

• Led the end-to-end handover of a data center between two companies, ensuring a seamless transition with no disruption to critical services.
• Restructured hardware, applications, and operational processes to align the data center’s infrastructure with the target company’s standards and operational model.
• Defined and negotiated post-handover SLA dependencies between both organizations, securing clear accountability and maintaining high service quality from the new operator.
• Coordinated cross-functional teams across both companies to manage risk, execute migration tasks, and ensure full regulatory and security compliance throughout the transition.

Eingesetzte Qualifikationen

IT-Berater, IT-Projektleiter

"As IT system manager, Mr. M. maintained a professional, structured, and communicative collaboration with our IT colleagues and the customer."
IT-Systemmanager
Uwe Oberdörfer
Tätigkeitszeitraum

4/2019 – 5/2023

Tätigkeitsbeschreibung

• General:
Ensuring ITIL-conformity, (INC, Change, CIM, ISMS etc. )
• Managing escalations in critical cases,
• Critical Incident:
• Drive critical incident resolution and following root-cause analysis throughout the entire chain (VPN, NetScaler, AD, Front Store, Citrix, VM, Infrastructure)
• Maintenance:
• Setup and maintain proper documentation e.g. roles and responsibilities of involved parties
• Secure build-up and maintenance of technical monitoring e.g. utilization of VM capacity
• Build-up and maintenance of functional monitoring e.g. e2e performance of entire chain from agent perspective
• Change Management :
• Strategic: continuously monitor and size total chain according to business forecast and report on compliancy
• Operational: Secure operational implementation of additional capacity e.g. hardware extensions or software licenses
• Help reaching the desired end state (“future mode of operation”) where we can use the standard Citrix solution
• Involvement in selection of new external call center partners relative to technical pre-conditions e.g. needed infra, client Hardware, Citrix version, ability to monitor within infra of external partner

Eingesetzte Qualifikationen

IT-Berater, IT-Projektleiter, IT-Systemmanagement

"Mugaly Consulting did a good job, and we would recommend them to our affiliated companies."
IT-Leitung
Dr. Sameer Thabet
Tätigkeitszeitraum

2/2018 – 8/2021

Tätigkeitsbeschreibung

- Verantwortung für den stabilen Betrieb und die Weiterentwicklung der IT-Systemlandschaft
- Führung und Koordination des IT-Teams inkl. Ressourcenplanung und Personalentwicklung
- Steuerung externer Dienstleister und Sicherstellung von SLAs

Initiierung und Umsetzung strategischer IT-Projekte sowie Optimierung interner Prozesse

Eingesetzte Qualifikationen

IT-Berater, Leiter IT, IT-Systemmanagement

"Herr M. hat in der FHP im Bereich E-Lectures System erfolgreich gearbeitet und das Vorlesungsaufzeichnunglösung implementiert."
System Admin / System Integrator (Designing, developing and operating an E-Lectures System)
Kundenname anonymisiert
Tätigkeitszeitraum

9/2015 – 3/2017

Tätigkeitsbeschreibung

• Install, maintain, and customize virtualized Opencast Matterhorn servers running CentOS Linux with RAID storage on NASs
• Setup and maintenance of mirrored NASs for backup Maintenance and adaptation of local recorders (Opencast Matterhorn and Galicaster Capture Agents) under Ubuntu
• Overarching project planning, in particular phase support
• Project management of development, tests and delivery
• Consulting lecturers on how to use the system and training staff to maintain the system

Eingesetzte Qualifikationen

IT-Berater, IT-Spezialist, IT-Mitarbeiter

Geschäftsdaten

 Freiberuflich
 Steuernummer bekannt
 Berufshaftpflichtversicherung aktiv

Qualifikationen

  • ISO / IEC 27001
  • IT-Berater8 J.
  • IT-Manager
  • IT-Projektleiter4 J.
  • IT-Strategieberatung
  • IT-Systemmanagement5 J.
  • IT Sicherheit (allg.)1 J.
  • ITIL
  • Projektmanagement (IT)
  • Teamleiter IT

Projekt‐ & Berufserfahrung

Project Manager – Building-up a Site reliability Engenieering (SRE) Team
Vattenfall Europe Information Services GmBH, Berlin
11/2023 – 12/2025 (2 Jahre, 2 Monate)
Energie & Versogung
Tätigkeitszeitraum

11/2023 – 12/2025

Tätigkeitsbeschreibung

• Established the foundation of the SRE function by defining roles, processes, and KPIs aligned with business-critical system reliability, scalability, and operational excellence.
• Led cross-functional collaboration between development, operations, and infrastructure teams to embed reliability engineering into the software delivery lifecycle.
• Recruited and onboarded a multidisciplinary SRE team, shaping the team culture around observability, incident response, and continuous improvement.
• Implemented modern reliability tools and practices such as SLIs/SLOs, alerting systems, chaos testing, and automated incident management workflows.
• Reported to senior stakeholders and influenced technical strategy, ensuring alignment between SRE goals and overall business priorities (e.g., service availability, cost-efficiency, customer SLAs).

Eingesetzte Qualifikationen

Kundenberater, Projektmanagement - Projekt-Training

IT Risk Coordinator / Information Security Coordinator
Vattenfall Nederland B.V., Berlin
11/2023 – 5/2025 (1 Jahr, 7 Monate)
Energie & Versogung
Tätigkeitszeitraum

11/2023 – 5/2025

Tätigkeitsbeschreibung

• Ensuring compliance to companies ISMS measures
• Ensuring compliance to the companies Risk Management process

Eingesetzte Qualifikationen

IT-Berater, IT-Sicherheitsberater, IT Sicherheit (allg.), Leiter IT

Project Manager – Jump Servers 2.0
Vattenfall Europe Information Services GmbH, Berlin
7/2022 – 5/2023 (11 Monate)
Energie & Versogung
Tätigkeitszeitraum

7/2022 – 5/2023

Tätigkeitsbeschreibung

• Led a security-hardening initiative for existing RDP-based jump servers, focusing on mitigating lateral movement risks and strengthening access control mechanisms.
• Designed a new-generation jump server architecture, incorporating modern security principles such as segmentation, least privilege, and just-in-time access.
• Developed, tested, and implemented Key Risk Indicators (KRIs) to proactively monitor the security posture and detect anomalous behaviour across access points.
• Managed the large-scale rollout of the new jump server solution across the enterprise environment, ensuring minimal disruption and full compliance with security policies.

Eingesetzte Qualifikationen

IT-Berater, IT-Infrastrukturspezialist, IT-Sicherheitsberater, IT-Projektleiter

SME Lead SecOps Team
Vattenfall Europe Information Services GmBH, Berlin
9/2021 – 10/2023 (2 Jahre, 2 Monate)
Energie & Versogung
Tätigkeitszeitraum

9/2021 – 10/2023

Tätigkeitsbeschreibung

• Established a centralized team dedicated to managing and addressing security patches across the organization, improving consistency and response time.
• Designed and operationalized the Threat and Vulnerability Management (TVM) process, ensuring timely detection, prioritization, and remediation of security risks.
• Developed and formalized core processes for the Security Operations (SecOps) team, streamlining workflows for incident handling, monitoring, and escalation.
• Planned and executed regular security changes to systematically reduce the organization’s attack surface and enhance its overall risk posture.
• Led company-wide security awareness initiatives, including targeted communication campaigns to foster a security-first culture among technical and non-technical staff.

Eingesetzte Qualifikationen

Sicherheitsmanagement

Project Manager – Data Center Handover
Vattenfall Europe Information Services GmbH, Berlin
9/2021 – 6/2022 (10 Monate)
Energie & Versogung
Tätigkeitszeitraum

9/2021 – 6/2022

Tätigkeitsbeschreibung

• Led the end-to-end handover of a data center between two companies, ensuring a seamless transition with no disruption to critical services.
• Restructured hardware, applications, and operational processes to align the data center’s infrastructure with the target company’s standards and operational model.
• Defined and negotiated post-handover SLA dependencies between both organizations, securing clear accountability and maintaining high service quality from the new operator.
• Coordinated cross-functional teams across both companies to manage risk, execute migration tasks, and ensure full regulatory and security compliance throughout the transition.

Eingesetzte Qualifikationen

IT-Berater, IT-Projektleiter

IT-Systemmanager
Vattenfall Europe Sales GmbH, Berlin
4/2019 – 5/2023 (4 Jahre, 2 Monate)
Versorgungswirtschaft
Tätigkeitszeitraum

4/2019 – 5/2023

Tätigkeitsbeschreibung

• General:
Ensuring ITIL-conformity, (INC, Change, CIM, ISMS etc. )
• Managing escalations in critical cases,
• Critical Incident:
• Drive critical incident resolution and following root-cause analysis throughout the entire chain (VPN, NetScaler, AD, Front Store, Citrix, VM, Infrastructure)
• Maintenance:
• Setup and maintain proper documentation e.g. roles and responsibilities of involved parties
• Secure build-up and maintenance of technical monitoring e.g. utilization of VM capacity
• Build-up and maintenance of functional monitoring e.g. e2e performance of entire chain from agent perspective
• Change Management :
• Strategic: continuously monitor and size total chain according to business forecast and report on compliancy
• Operational: Secure operational implementation of additional capacity e.g. hardware extensions or software licenses
• Help reaching the desired end state (“future mode of operation”) where we can use the standard Citrix solution
• Involvement in selection of new external call center partners relative to technical pre-conditions e.g. needed infra, client Hardware, Citrix version, ability to monitor within infra of external partner

Eingesetzte Qualifikationen

IT-Berater, IT-Projektleiter, IT-Systemmanagement

IT-Leitung
Thabet Holding & Consulting GmbH, Berlin
2/2018 – 8/2021 (3 Jahre, 7 Monate)
Handel
Tätigkeitszeitraum

2/2018 – 8/2021

Tätigkeitsbeschreibung

- Verantwortung für den stabilen Betrieb und die Weiterentwicklung der IT-Systemlandschaft
- Führung und Koordination des IT-Teams inkl. Ressourcenplanung und Personalentwicklung
- Steuerung externer Dienstleister und Sicherstellung von SLAs

Initiierung und Umsetzung strategischer IT-Projekte sowie Optimierung interner Prozesse

Eingesetzte Qualifikationen

IT-Berater, Leiter IT, IT-Systemmanagement

Application Support
Toll Collect GmbH, Berlin
6/2017 – 5/2018 (1 Jahr)
Logistikdienstleister
Tätigkeitszeitraum

6/2017 – 5/2018

Tätigkeitsbeschreibung

• Deploy of AppAgile (OpenShift) and Java applications with Oracle databases as frontend in different environments; The applications are developed by major software companies (various releases)
• Error analysis & Troubleshooting, if necessary elimination of errors or forwarding to the external service provider
• Review of various manuals (installation manuals, system manuals, message code manuals, etc.)
• Monitoring the development of individual software components with regard to compliance with the issued installation procedures

Eingesetzte Qualifikationen

IT-Sicherheitsberater, IT-Spezialist

System Admin / System Integrator (Designing, developing and operating an E-Lectures System)
Fachhochschule Potsdam, Potsdam
9/2015 – 3/2017 (1 Jahr, 7 Monate)
Hochschulen und Forschungseinrichtungen
Tätigkeitszeitraum

9/2015 – 3/2017

Tätigkeitsbeschreibung

• Install, maintain, and customize virtualized Opencast Matterhorn servers running CentOS Linux with RAID storage on NASs
• Setup and maintenance of mirrored NASs for backup Maintenance and adaptation of local recorders (Opencast Matterhorn and Galicaster Capture Agents) under Ubuntu
• Overarching project planning, in particular phase support
• Project management of development, tests and delivery
• Consulting lecturers on how to use the system and training staff to maintain the system

Eingesetzte Qualifikationen

IT-Berater, IT-Spezialist, IT-Mitarbeiter

Geo-Data Management / Datenbank Spezialist
GeoForschungs Zentrum, Helmholz Institute, Potsdam
10/2014 – 4/2015 (7 Monate)
Hochschulen und Forschungseinrichtungen
Tätigkeitszeitraum

10/2014 – 4/2015

Tätigkeitsbeschreibung

• Creation of data models for IPOC research data based on PostgreSQL and PostGIS
• Design and implementation of adapters for importing proprietary data
• Design and implementation of components for processing raw data
• Conceptual design, design and implementation of data adaptation and preparation workflows for standards-based access
• Installation and adaptation of a management system for accessing data from proprietary modeling software

Eingesetzte Qualifikationen

IT-Spezialist

Zertifikate

PRINCE2® Foundation and Practitioner Certification
Maxpert GmbH
2022
ISO 27001 Master - Information Security Certificatio
TüV Süd
2017
IGCSE - University Of Oxford
University Of Oxford
2003
IGCSE - University Of Cambridge
University Of Cambridge
2003

Ausbildung

M Sc.
Computational Science
Universität Potsdam
2016
Potsdam
B. Sc.
Informatik
Universität Potsdam
2014
Potsdam

Über mich

Erfahrener IT-Berater mit über 15 Jahren internationaler Projekterfahrung in IT-Management, IT-Operations sowie IT- und Informationssicherheits- und Risikomanagement. Ausgeprägtes technisches Verständnis gepaart mit strategischem Weitblick, taktischem Geschick und hoher Durchsetzungsfähigkeit. Selbstmotiviert, strukturiert und lösungsorientiert mit exzellenten Kommunikations- und Führungskompetenzen. Bewährte Stärke in der erfolgreichen Leitung komplexer Projekte und interdisziplinärer Teams.

Weitere Kenntnisse

- Projektplanung, Steuerung und Controlling
- Stakeholder- und Erwartungsmanagement
- Budgetverantwortung und Ressourcenplanung
- Klassische und agile Methoden (z. B. PRINCE2, Scrum, Kanban)
- Projektdokumentation und Reporting auf Management-Ebene

- IT-Sicherheitsmanagement (IT Security Management)
- Informationssicherheits-Managementsysteme (ISMS nach ISO 27001)
- Durchführung und Begleitung von ISMS-Audits
- Risiko- und Schwachstellenmanagement (Information Security Risk Management)
- Thread & Vulnerability Management (TVM)
- Schwachstellenscans & -analysen (Vulnerability Scanning)
- Penetration Testing (intern & extern)
- Microsegmentation (z. B. in Zero-Trust-Architekturen)
- Netzwerk- und Systemhärtung (Hardening)
- Awareness & Schulungskonzepte zur Informationssicherheit
- Cloud Security (Azure, AWS, GCP – optional je nach Erfahrung)
- Sicherheitsarchitekturen & -konzepte
- Identity & Access Management (IAM)
- Business Continuity & Incident Response

Persönliche Daten

Sprache
  • Deutsch (Muttersprache)
  • Englisch (Fließend)
Reisebereitschaft
Weltweit
Arbeitserlaubnis
  • Europäische Union
  • Schweiz
Profilaufrufe
411
Alter
37
Berufserfahrung
17 Jahre und 2 Monate (seit 01/2009)
Projektleitung
5 Jahre

Kontaktdaten

Nur registrierte PREMIUM-Mitglieder von freelance.de können Kontaktdaten einsehen.

Jetzt Mitglied werden