Principal Consulting Partner - Freelancing

Steffen Müller has been deeply rooted in IT since 1980 and has worked since 1999 as a freelance information security officer (vCISO) for clients in heavily regulated industries. In the area of ISM (Information Security Management) and GRC (Governance, Risk & Compliance), he supports CISOs, CTOs, project or program managers as a professional point of contact and sparring partner. With his deep technical background, he also acts as a TISO (Technical Information Security Officer) or as a strategic advisor for the implementation support of security-relevant infrastructures in the role of Enterprise Security Architect. As a mediator between service providers, departments, and the client’s executive management, he plays a central interface role.

Industry focuses:

• Heavily regulated environments such as:
• Banks
• Insurance companies
• Telecommunications/ISPs
• IT service providers
• Logistics
• Chemicals
• Pharmaceuticals
• Aviation

Expertise:

• Strategic information security planning: developing and maintaining the security strategy and program in line with business goals.
• Risk management: identifying, assessing, and prioritizing risks; developing risk mitigation strategies.
• Compliance management: ensuring adherence to relevant laws, regulations, and standards (e.g. GDPR, NIS2, DORA).
• Security assessments and audits: planning and conducting internal and external security audits.
• Incident management: developing and implementing processes to detect, investigate, and respond to security incidents.
• Awareness and training: launching training programs to increase security awareness among employees.
• Advisory and leadership: acting as a consultant for management and leadership teams on all information security matters.
• Technology monitoring: monitoring and evaluating security technologies and cybersecurity trends to continuously improve the security architecture.
• Coaching junior information security professionals

Management style / working method:

• Solution-oriented and cooperative approach
• Reliability, openness, straightforwardness, commitment
• Confident presence and strong presentation skills