Onboarding Applications Expert

• Contract preparation for outsourcing the IAM tool Omada to a service provider
• Negotiating the framework agreement
• Negotiating service order forms

Creation, implementation, documentation, and operation of interim processes for Identity Access Management until Omada functionalities are available:

• ILM processes (joiner, mover, leaver)
• Assigning and revoking role permissions
• Checking permissions in Active Directory
• Analysis and reporting

• Resolving findings related to MaRisk AT 4.3.1 organizational structure
• Verifying completeness of a CMDB-based application list of about 200 apps
• Ensuring each app has a current authorization concept stored audit-proof in company documentation, covering criticality and function separation
• Ensuring all permissions in the concept can be ordered and reported via central IAM system
• Informing data owners and app administrators of the task
• Supporting app administrators in creating authorization concepts

• Interim management of IT authorization administration
• Leading and developing a team of 20 internal and external staff
• Conducting audit-compliant recertification and reconciliation for ~500 apps
• Central control of permission setup and revocation for SAP, RACF, Active Directory
• Addressing audit findings related to MaRisk
• Subproject manager for "Limes" project to integrate the Omada Identity Suite into operations
• Implementing Privileged Access Management (CyberArk)
• Handing over ~50 identified IAM use cases into operations

• Developing a communication plan for the "unite" program with close client collaboration
• Identifying user-relevant changes in new products and services (Windows 10, Office 2016, cloud, SharePoint)
• Creating and distributing user information: fact sheets, quick guides, FAQs, email updates for users and management, posters, videos describing new products and services

Reviewing Group Policy Information Security and eight business directives against ISO/IEC 27001:

• Gathering feedback from service providers and corporate line organization
• Consolidating feedback
• Combining requirements into a proposal for the Group Information Security Officer
• Documenting results

• Creating a group-wide solution toolbox to enable offshore projects
• Requirements engineering for EU model clauses
• Categorizing applications
• Obtaining powers of attorney
• Aligning and finalizing contracts
• Designing and documenting processes

• Designing and aligning internationally valid service delivery models for 14 agreed services and validating the service delivery processes

Timely definition, alignment, and implementation of a core profile for rolling out 38,000 IT workstations under the managed desktop service (MDS):

• Designing the core profile, delivering for acceptance, and rollout
• Handover to release process, reporting, documentation

• Fulfilling open contractual provider obligations, identifying and enforcing provider claims
• Evaluating results, commissioning contracted services, realizing claims around €1.5M

Ensuring consistently high inventory quality at the provider (T-Systems International GmbH) for the client (Deutsche Post AG):

• Defining, aligning, and designing reporting, setting inventory metrics, analyzing and correcting inventories, handover to operations, monitoring, reporting, documentation

Preparing and executing a group-wide rollout of ~5,000 Windows XP workstations and integrating into a new operating model (Managed Desktop Services) by a strict deadline:

• Setting up rollout organization
• Leading a team of up to 50
• Site walkthroughs and scope alignment
• Creating rollout plans
• Setting up, commissioning, and documenting devices
• Training and acceptance
• Ensuring service handover to operations
• Avoiding penalties
• Monitoring and reporting

Introducing product profitability reporting at the provider (T-Systems International GmbH) for the client (Deutsche Telekom AG) to assess the IT workstation portfolio under managed desktop services:

• Capturing product and structure costs
• Designing the model
• Initiating interfaces for automated data delivery
• Setting thresholds and designing regular reports
• Documenting results
• Handing over profitability reporting to operations

• Designing and implementing a group-wide leadership development system
• Designing personnel assessment interviews (PAG) to identify talent for line and projects
• Designing and running assessment centers for emerging leaders and project managers
• Conducting development discussions with assessment participants, HR, and management to agree on development actions
• Designing and delivering a six-module leadership program for identified talents
• Building a talent pool