Cyber security manager / transformation / audits / assessment / strategy

1/2021 – 7/2021

Leading definition of compliant ISMS in preparation for external assessments including review of current organization and documentation preparation.

ISO / IEC 27001, Projektmanagement (IT)

2/2018 – 1/2020

Consulting for major financial and industrial sector clients, leading their definition and implementation of Cyber security strategy, risk management process, and maturity assessments, with deep knowledge of standards, policies, and procedures. Implementation of projects around IT security awareness and Identity and Access Management including the implications of emerging technologies including IoT. Ground up creation of opportunities and bids with new and existing clients.

Project, Major Reinsurer – Cyber Security Maturity
Working for the global and regional CISO’s to asses and advise on the Cyber Security Maturity of internal entities of the company. Through a series of formalised on site assessments across North America, Middle East and Asia, defining gaps in maturity and advising the CISO’s on remediation strategy.

Project, Major Bank - Cyber Security Awareness
Defining the IT Security Awareness program for the German region, working with Risk, Governance and HR to define the strategy of an awareness campaign to close external audit findings. Created an implementation roadmap, which was accepted and moved into an implementation phase.

Project, International Chemical Industry – I&AM
Key client contact for Global Head of Identity and Access Management, creating the strategy for I&AM across all lines of business, including normal and privileged users access management strategies, alignment to ISO and other standards as well as regulatory requirements. Led the customer’s thinking in the areas of Cyber security for emerging technologies including IoT.

ITIL, Cyber Security, Informationssicherheit, Projektleitung / Teamleitung (IT), Six sigma, DIN EN ISO 27001

8/2014 – 2/2016

IT audits and IT related topics within wider business audits consulting with and advising board members on the implementation of required organizational and processes changes
• Leading a team of IT auditors undertaking an audit of a major project to migrate customers in Belgium to an external bank, building a motivated team and ensuring a successful and secure migration of assets
• Key interface between audit and forensics and cyber security teams, set up new collaborative working methodology to focus on emerging threats
• Held key roles in major IT audits across Europe, preparing reports and presenting and defending findings, collaborating with senior managers to ensure a full implementation of findings.

BSI-Standards, Auditor, DIN EN ISO 27001