Sicherheitsberater

35 Jahre Erfahrung IEC 62443 für Rail, IACS, Energy und Automotive, CRA, NIS2, DORA, DIN ISO 27001, BSI Grundschutz, SOC Entwicklung und Fortentwicklung auf Elastic, Sicherheitsarchitektur, Sicherheitskonzepte, Risikomanagement, Datenschutz u.v.m.

• Auditor
• Corporate Security
• CRA
• Datenschutz
• Datenschutzbeauftragter
• IAM PAM SoD
• Informationssicherheit
• NIS-2
• Pentests
• Risk Management

Information Security

Data Protection

IT risk management

ISMS DIN ISO and BSI

Security architectures

Research and Analysis

Press Services (magazine sectank.net)

Development of security operations centers for OT and IT with AI based on elastic search

Identity management, role and authorization concepts, IAM, PAM, SoD for all common platforms

Pentesting OSSTMM, OWASP NIST, PTES and ISSAF.

Information Security Policies

Cross-platform IT security knowledge for clouds, servers, networks, databases, applications and mainframes

Operational IT including contract management, ITIL, change management, software distribution

Data center construction, relocation and operation

Physical security (CT-PAT, TAPA, air freight, sea freight)

DIN ISO 27001, 27002, IT-GS, ISO/IEC 18028, ISO/IEC 27005, ISO/IEC 15816, Kritis

Banking norms and standards such as Dora, NIS2, Tiber, KWG, Mait, Bait/Vait, Zait, MaRisk, DSGVO

Safety and Security for IACS, Energy, Automotive and Rail 62443, 50121, 50125, 50126,50128, 50129, 60050, 60721, 60950, 62637, 82079, CENELEC, ISO 21434, MITER CWE, TISAX, 70...


Pentests according to OSSTMM, OWASP, NIST, PTES, ISSAF

IAM PAM SoD IIQ Sailpoint, Omada

Python

CMMC

Mainframes zOS und alle Subsysteme, Schedulingsysteme, JCL, CLIST, TSO, ISPF, REXX, Scheduling Systeme, OS2

Datenschutz DSGVO Binding Corporate Rules und Code of Conduct geprüft und zertifiziert

Schutz vor Wirtschaftsspionage

Identity und Access Management, Rollendesigns inkl. Entitlements

Projektmanagement klassisch oder Scrum

Jira, Confluence und vieles mehr....agil und klassich und beides gleichzeitig.