Senior Purview Consultant | Data Protection • AI Security • AI Governance | EU AI Act • DORA • NIS2

Senior Purview Consultant für Data Protection, DLP, DSPM for AI, AI Security und AI Governance. 20+ Jahre Enterprise-Erfahrung, Microsoft Security-zertifiziert sowie erfahren in der technischen Umsetzung von EU AI Act, DORA und NIS2.

• Cyber Security
• Microsoft Azure

Microsoft Purview & Data Protection
• Architecture, Implementation & Operating Model
• Information Protection: Classification, Sensitivity Labels, Auto-Labeling, Encryption & Rights Management
• Sensitive Information Types (SITs), Exact Data Match (EDM), Document Fingerprinting & Trainable Classifiers
• Microsoft 365 DLP: Exchange, SharePoint, OneDrive, Teams & Copilot
• Endpoint DLP: Windows, USB, Print, Clipboard, Network Shares, Browser Uploads & Restricted Apps
• Data Security Posture Management (DSPM) / DSPM for AI: Data Risk, Oversharing, Remediation & Microsoft Security Copilot
• Insider Risk Management, Adaptive Protection, Activity Explorer & Content Explorer
• eDiscovery, Audit, Records Management, Retention & Data Lifecycle Management
• Information Barriers, Communication Compliance & Compliance Manager
• Data Governance: Unified Catalog, Data Map, Governance Domains, Data Products, Business Glossary, Lineage & Data Scanning
• Microsoft Fabric, OneLake Governance

AI Security
• Security for Microsoft 365 Copilot, Copilot Studio, Azure OpenAI & Microsoft Foundry
• DSPM for AI, Sensitive Data Discovery, Data Risk & Oversharing Prevention
• Prompt Injection, Prompt Leakage, Data Leakage & Excessive Agency Protection
• RAG Security: Data Access, Grounding Data Protection & Secure Retrieval
• AI Agent Security: Identity, Permissions, Tool Access, Least Privilege & Data Boundaries
• Purview DLP & Sensitivity Labels for Copilot and AI workloads
• Content Safety, Monitoring, Auditability & Incident Response
• Microsoft Security Copilot Integration
• OWASP Top 10 for LLM Applications

AI Governance & EU AI Act
• AI Inventory, KI System Classification & Governance Controls
• EU AI Act: Risk Classification, High-Risk AI Systems, GPAI, Transparency & Human Oversight
• Technical Documentation, Audit Evidence, Logging & Traceability
• AI Risk Assessments, Governance Policies & Compliance Mapping
• Responsible AI, Data Governance & AI Lifecycle Governance
• Governance for Copilot, Generative AI, RAG & AI Agents

Regulatory Compliance
• DORA • NIS2 • DSGVO / GDPR • BSI C5 • ISO 27001 • BaFin
• Regulatory requirements mapping to Purview, Security & AI controls

Azure Security
• Entra ID: Conditional Access, MFA, PIM, RBAC & Identity Governance
• Defender XDR & Defender for Cloud
• Sentinel: SIEM/SOAR, KQL & Playbooks
• Azure Key Vault, Managed Identities & Network Security

Ausbildung
• Dipl.-Ing. Informatik (5-jähriges Studium)

Purview & Data Protection
• Information Security Administrator (SC-401)

AI Security
• Cloud and AI Security Engineer (SC-500)

Azure Security
• Cybersecurity Architect Expert (SC-100)
• Azure Security Engineer (AZ-500)
• Identity and Access Administrator (SC-300)
• Security Operations Analyst (SC-200)

Azure Architecture
• Azure Solutions Architect Expert (AZ-305)
• Azure Administrator Associate (AZ-104)