Jörg Hoffmann - Managing Director; Data Protection Officer; Information Security Officer

Berlin, Germany

Experience

Jan 2015 - Present

11 years 1 month

Managing Director; Data Protection Officer; Information Security Officer

Datenschutz24 (brand of Sovestro GmbH)

Drafting company agreements related to data protection
Acting as a mediator between business interests and data subject rights in a corporate context
Process analysis and evaluation regarding data protection and information security implications according to GDPR, BDSG, BSI baseline protection
Support for information security audits according to ISO 27001
Implementation of change management processes
Analysis of IT infrastructure and deriving recommendations
Expert support in legal proceedings and communication with supervisory authorities
Preparation of data protection impact assessments (DPIAs) and procedure and processing documentation (VVZ)
Training on corporate data protection and information security
Cooperation with law firms in legal proceedings

Jan 2013 - Present

13 years 1 month

Potsdam, Germany

Managing Director

Sovestro GmbH

Acquiring stakes and setting up a consulting and investment company for:
Governance
Compliance
Risk management
Data protection and information security
Acquiring stakes

Jan 2013 - Apr 2024

11 years 4 months

Berlin, Germany

Managing Director

Expert-Personaldienstleistungen GmbH

Acquisition, financing, and operation of a personnel services company in Brandenburg and NRW
Expanding market position and developing new business areas
Implementation of HR industry software
Employee retention and reduction of turnover rate
HR administration for over 120 employees
Financial planning and budget control
Controlling and reporting

Jan 2007 - Dec 2012

6 years

Oldenburg, Germany

Managing Director

NWZ-Zustellgesellschaft mbH & Co. KG

Planning, organization, and operation of the group's logistics with resource and budget responsibility exceeding EUR 10 million and more than 1,500 employees
Introduction of dedicated controlling and reporting (IKRS) and benchmarking with other publishers, deriving measures
Reorganization of internal processes and creation of a new more flexible corporate structure through change management
Development and implementation of a new wage model and introduction of new compensation structures
Introduction of company pension scheme and group accident insurance
Conducting in-house collective agreement negotiations with union and works council

Jan 2003 - Dec 2007

5 years

Berlin, Germany

Managing Director (self-employed)

BZV-Verbund Zustellagenturen

Carrying out business transfers and reorganization of operational processes
Defining workflows and synchronizing organizational structure and processes in logistics
Personnel management for approx. 400 employees per location

Jan 2000 - Dec 2003

4 years

Berlin, Germany

Managing Director

MVC Teleconferencing GmbH

Resource and budget responsibility of over EUR 2 million for 15 employees

Jan 2000 - Dec 2000

1 year

Frankfurt, Germany

Head of Marketing / Business Development

MVC Mobile Video Communication AG

Jan 1999 - Dec 1999

1 year

Bad Homburg, Germany

Group Product Manager

TIME Communication Services AG

Jan 1998 - Dec 1999

2 years

Essen, Germany

Marketing Manager Strategic Partnerships

o.tel.o communications GmbH & Co. KG

Jan 1997 - Dec 1997

1 year

Essen, Germany

Marketing Specialist Trade Marketing

RWE Telliance GmbH & Co. KG

Jan 1994 - Dec 1997

4 years

Potsdam, Germany

Trade Marketing Associate

E-Plus Service GmbH

Jan 1993 - Dec 1993

1 year

Berlin, Germany

Music Licensing Associate

GEMA Regional Directorate

Summary

Drafting company agreements related to data protection
Acting as a mediator between business interests and data subject rights (in a corporate context)
Process analysis and evaluation regarding data protection and information security implications (according to GDPR, BDSG, BSI IT baseline protection)
Support for information security audits according to ISO 27001
Implementation of change management processes (process organization)
Analysis of IT infrastructure and derivation of action recommendations
Expert support in legal proceedings and communication with supervisory authorities
Preparation of data protection impact assessments (DPIAs) and procedure and processing documentation (VVZ)
Training on corporate data protection and information security
Cooperation with law firms in legal proceedings

Clients: NGO, culture, automotive, metal processing, food industry, culture, research, real estate, training providers, online business

Skills

Ms Office Pro
Mind Manager/mindjet
Adobe Suite
Google G Suite
Agil Personal (Industry Software)
Basic Knowledge: Sap R3/erp: Hcm, Mm Modules, Business Warehouse
Advanced User Skills: Datev Lodas Comfort, Wordpress, Ga-analytics, Facebook Ad Manager, Kali Linux
Individual And Collective Labor Law: Aüg, Aentg
Social Legislation: Sgb Ii, Iii, Ix
Data Protection: Bdsg, Gdpr, Ttdsg, Hinschg, Etc.
Information Security: Bsi Baseline Protection, Iso 27000, Iso 31000 Series
Kali Linux Foundation Level, Metasploit, Nmap, Wireshark, Burp
Vm-ware
Collective Bargaining Law, Collective Agreements (Regional Tv, Framework Tv, Pay And Pay Scale Tv, Industry Tv), Works Agreements, In-house Collective Agreements