Consultant and Trainer, Managing Partner

Expert in integrated management systems according to ISO/IEC 27001, TISAX®, information security officer, CISO, project manager, interim manager, data protection officer, internal auditor, trainer & coach, and author.

• TISAX® – Consulting for preparation / certification / recertification (tools: "EnterpriseOS", Certvision "Normtracker", "Athereon") for: Carcoustics GmbH (Leverkusen), uintent GmbH (Hamburg), Code Intelligence GmbH (Bonn), SHW (Bad Schussenried), DOLBY Germany GmbH (Nuremberg).
• ISO/IEC 27001 – Consulting for preparation / certification / recertification for: ndgit GmbH (Munich) and DGC AG (Flensburg).
• CISO/information security officer in an advisory role at various companies (fintech, automotive, manufacturing).
• Speaker on DORA, Management Circle, among others, on ICT third-party management.
• Service design for ICT third-party contract review according to DORA using AI.
• Trainer for courses (TISAX®, ISO/IEC 27001:2022).
• Webinar presenter for DGQ (e.g. TISAX®, ISO/IEC 27001).
• Speaker at events (DGQ, Rhebo, Public IT Security, IHK, BVMW, KnowBe4) on cybersecurity, emergency management, DORA, NIS2, awareness, OT security.
• Author of professional articles on information security management.
• Consulting clients in ISO/IEC 27001, TISAX, BSI IT baseline protection and GDPR.
• Trainer and internal auditor.
• Contract management (service and work contracts, framework agreements).
• Coordination and support in responding to tenders.
• Development of strategies and measures for clients and new business options (e.g. phishing, online awareness trainings).
• Further development of the governance/risk/compliance offering.
• Account management for existing clients and new client acquisition.
• Support for the HR department with hiring and interviews.

• Account management for existing clients and new client acquisition.
• Coordination and support in responding to tenders.
• Negotiation of contracts with clients (individual service and work contracts, framework agreements, temporary staffing).
• Development of strategies and measures for clients and new business options (e.g. GDPR and consent for cookies, policy management).
• Further development of the governance/risk/compliance offering (e.g. in sustainability, guidelines).

• Collaboration with partners (software vendors) on strategies and initiatives for clients and new opportunities (SAP license management, identity management, authorization management).
• Account management and acquisition of new clients in software and services (cyber security and other software solutions), e.g. automotive, finance, industry.
• Bid management including coordination of technical presales in responding to RFPs.
• Support of marketing (technical articles, whitepapers, etc.), presentation of cyber security products and services to clients and at trade shows (e.g. IT-SA 2016, Nuremberg) and in online sessions.