Jens B.
Senior Cyber Security Consultant
Experience
Senior Cyber Security Consultant
Brennscheidt IT Consulting
ISMS consulting
Interim management
Conducting security analyses & audits
BCM consulting
Executive management
IT-GRC Manager
Barmenia Versicherungen
Conceptual design and continuous improvement of IT GRC management
Development of guidelines and provision of methods and tools
Advising on conceptual & operational implementation of regulatory requirements (e.g. VAIT, DORA)
Delivering training on IT GRC topics (especially VAIT)
Establishment of an IT risk management system and IT governance framework
Risk Manager
Volkswagen Infotainment GmbH
Steering, optimizing, and operationalizing the enterprise-wide risk management process
Structuring, operationalizing, and continuously improving the internal control system (ICS)
Planning and conducting risk workshops
Coordinating, monitoring, and tracking risk treatment measures
Performing effectiveness checks
Establishment of an enterprise-wide internal control system (ICS)
Head of IT Security and Risk Management | IT Security Officer
Polizei NRW (LZPD NRW)
Leading and managing the sub-department and representing the department head
Advising department and agency leadership on IT security
Analyzing and assessing the IT security situation
Integrating IT security into organization-wide workflows and processes
Establishing and optimizing IT security management and existing processes
Developing, adapting, implementing, and controlling IT security policies
Central expert body for operational information security at Police NRW
Member of the IT Security Commission (KomSi) of the IuK Subcommittee (UA IuK) of Working Group II (AKII) of the Conference of Interior Ministers
Leading an information security audit at another state police agency
Establishing a quality management system for security concepts of subordinate authorities
Project lead for the implementation of the HiScout ISMS tool
Project lead for adapting security concepts to BSI Standards 200-X
IT Security Manager
IKB Deutsche Industriebank AG
Advising IT management on IT security issues
Identifying and coordinating the implementation of IT security requirements
Managing IT providers regarding IT security
Coordinating IT emergency management and conducting emergency tests
Coordinating the risk management process for the IT department
Operational Risk Manager for IT
Project lead for implementing network segmentation in the LAN
Requirements coordination and consulting for BAIT implementation
Conducting protection requirement assessments for IT
Senior Security Management Consultant
secunet Security Networks AG
Development of customized security concepts
Conducting organizational security and risk analyses
Implementation and assessment of information security management systems
Leading security analysis projects in the areas of ISMS consulting and mobile security
Support in the certification and accreditation of a provider under ISO 27001 using IT baseline protection, the De-Mail Act, and the German Federal Data Protection Act (BDSG)
IT Security Officer
comdirect bank AG
Handling security-related issues
Initiating and supporting IT security projects
Conceptual development of the security infrastructure
Regular participant in the BdB phishing working group
Deputy data protection officer
Project lead for the implementation of a web application firewall
Project support for the introduction of mobile TAN and 3D Secure (Verified by Visa)
Summary
For more than 15 years, I have been active in cyber security and related fields. My goal is to support my clients as partners with targeted and tailored consulting services.
As a former IT security officer, I understand the challenges my clients face. Thanks to my experience as a senior consultant at a leading cyber security company, I draw on a variety of solution approaches and adapt them to each client individually.
Skills
Iso 27001
Bsi 200-x
Iso 22301
Iso 20000
Itil
Vait
Bait
Kritis
Dora
Vsa
Diplomatic Skills In Conducting Audits And Presenting Results
Strong Communication Skills With Audience-oriented Messaging At All Levels
Analytical Ability To Perform And Analyze Security Assessments
Experience In Managing Personnel Within Line Organizations And Projects
Banks
Insurance
(Security) Authorities
It
Critical Infrastructure (Kritis)
Automotive
Isms Consulting (E.g. Security Concepts, Policies, Maturity Assessments, Gap Analyses, Protection Requirement Assessments)
Interim Management (Ciso, Security Manager, Risk Manager, Business Continuity Manager, Incident Response Manager)
Analyses & Audits (Management Systems According To Iso 27001 Or Bsi 200-x, Isms Revisions, Supplier Audits, Process Audits, Risk Analyses Per Iso 27005 And Bsi 200-3, Compliance Audits)
Security Awareness (Awareness Concepts, Tailored Awareness Training, Internal Communications, Employee Engagement, Policies And Codes Of Conduct)
Business Continuity Management (Risk Analyses And Evaluations, Business Impact Analyses, Emergency Plans, Drills And Tests, Implementation Of Bcm Systems)
It Grc Management (Risk And Compliance Analyses, It Security And Compliance Strategies, Implementation Of It Grc Management Systems)
Languages
Education
Diploma in Computer Science · Computer Science
Certifications & licenses
CISM
ISO 20000 Foundation
ISO 27001 Auditor
IT Basic Protection Practitioner
Additional audit procedure competence for § 8a (3) BSIG
Similar Freelancers
Discover other experts with similar qualifications and experience