Fabian Flock

OT Security Champion Europe

Fabian Flock
Leverkusen, Germany

Experience

Jan 2024 - Aug 2024
8 months

OT Security Champion Europe

  • Conducted OT security assessments at European manufacturing facilities
  • Analyzed and improved IT security processes and infrastructure
  • Revised SOC processes in conjunction with the internal SOC team
  • Conducted OT incident training and tabletop exercises
  • Facilitated C-level workshops to align European OT security strategy
  • Evaluated regulatory changes related to NIS2 and their relevance to the client
Aug 2023 - Jun 2024
11 months
Germany

Interim CISO

  • Preparation and implementation of ISO 27001 certification
  • Implemented measures following ISO 27001 standards
  • Improved IT security processes and services
  • Revised SOC processes in collaboration with external service providers
  • Developed and implemented future IT security strategy
  • Conducted workshops for executives and vendors on global IT strategy
May 2023 - Present
2 years
Germany

NIST CSF – IT/OT Risk Management

  • Implemented security measures by NIST 800 standards
  • Improved risk management and developed strategies and policies
  • Performed business impact analysis and communicated with C-level stakeholders
Jan 2021 - Apr 2023
1 year 4 months
Germany

ISO 27001 Initial Certification

  • Managed the ISMS process implementation project
  • Accurately inventoried risks and threats
  • Provided technical support for the smooth implementation of the ISMS
Aug 2021 - Dec 2022
1 year 5 months
Germany

IT/OT Security

  • Established a vulnerability and threat management process
  • Created protection needs and risk assessment templates
  • Reviewed and categorized cloud security approaches
Apr 2021 - Dec 2021
9 months
Germany

Third-Party Vendor Management

  • Managed the project to identify critical suppliers
  • Developed a third-party questionnaire
  • Established a regular supplier review cycle
Jan 2020 - Mar 2021
1 year 3 months
Germany

Interim Global Risk Manager

  • Identified existing risk management processes
  • Established risk management policies and processes following NIST and IEC 62443
  • Created protection needs and risk assessment templates
Jan 2020 - Jun 2020
6 months
Germany

Security Maturity Assessment for Operational Technology

  • Performed business impact assessments for production facilities
  • Performed risk assessments for critical production assets
  • Reviewed existing IT/OT risk policies and processes
Apr 2019 - Dec 2020
9 months
Germany

Information Security Consultant

  • Reviewed existing security policies and procedures
  • Helped implement security tools such as MS Defender, Zscaler, Proofpoint, and Splunk
Apr 2018 - Mar 2019
1 year
Germany

Identification of Critical IT Assets

DAX Corporation

  • Identified critical IT assets in heterogeneous IT landscapes and critical business processes
  • Developed customized security concepts for critical IT assets
Jan 2018 - Present
7 years 4 months
Germany

ISO 27001 Implementation and KRITIS Re-Certification

  • Managed ISMS implementation projects
  • Performed business impact analyses and risk assessments
  • Supported pre-audits and audits, including KRITIS audits
Leverkusen, Germany

Managing Director / Senior Information Security Consultant

FCS - Flock Consulting Services

Senior Information Security Consultant with over 15 years of experience in planning, executing, and leading complex information security projects. Managing Director of Flock Consulting Services, specializing in ISO 27001 implementation, risk management, and OT security. Extensive experience collaborating with leading companies across various industries, particularly in the chemical, automotive, energy, and pharmaceutical sectors.

Summary

Senior Information Security Consultant with over 15 years of experience in planning, executing, and leading complex information security projects. Managing Director of Flock Consulting Services, specializing in ISO 27001 implementation, risk management, and OT security. Extensive experience collaborating with leading companies across various industries, particularly in the chemical, automotive, energy, and pharmaceutical sectors.

Languages

German
Native
English
Advanced

Certifications & licenses

IT-Grundschutz Practitioner

CCSA / CCSE Partner Training

ISO 27001 Lead Auditor/Implementer

Beyondtrust Foundation

ITIL Foundation