2020 - heute: Development and implementation

Rolle: IT Security Consultant and Co-Founder

Kunde: [Firmenname auf Anfrage]

Projekte

• Development and implementation of a CTI Lifecycle for a large and global company in the logistics sector
• Chief Information Security Officer at various companies
• Security checks and audits based on ISO27001 and IT-Grundschutz
• Lead Auditor ISO/IEC 27001 (certification audits)
• Development and implementation of an ISMS for multiple companies and different industry sectors
• Structural Analysis (IT-Grundschutz Strukturanalyse)for a large insurance company
• Development and implementation of a Secure Development Lifecycle (SDLC, OWASP SAMM)
• Lecturer at HDBW in Munich for Secure Software Engineering and Threat Modeling
• Workshops and trainings on Secure Development Lifecycle and Threat Modeling

Rolle: Lead Security Architect

Kunde: FI-TS GmbH & Co. KG

Aufgaben:

• Consultant for the 1st line of defense in order to derive security measures from high level security requirements
• Cryptograhy Officer

2016 ? 2019: Development and validation of security KPIs

Rolle: Senior IT Architect in IT Innovation

Kunde: on request

Aufgaben:

• IT Lead, Business Analyst and IT Architect in innovation initiatives, e.g. automatic underwriting platform for primary insurance and reinsurance business, cyber insurance pricing, mobile app for applicants
• Development and validation of security KPIs for cyber risk assessment Engagement in digital transformation as speaker for ?Digital Insurance
• Platforms? (as part of a training series ?Digital Business?)
• Quality improvement in IT innovation initiatives by implementing threat modeling

Rolle: Senior IT Architect

Kunde: auf Anfrage

Aufgaben:

• Senior IT Architect for the overall application architecture of the reinsurance core applications (risk assessment, pricing, accumulation, policy management und reporting)
• Technical Lead and Coach for up to 30 Requirements Engineers and IT Architects
• Head of the global Requirements Engineering Community consisting of representatives from all IT locations

2000 - 2006: Application Development and IT Strategy

Rolle: IT Architect

Kunde: auf Anfrage

Aufgaben:

• Design and implementation of different underwriting applications for the reinsurance business
• Design and implementation of a tool to manage the global IT landscape (Enterprise Architecture)
• Customization and implementation of a software engineering process for object oriented development based on the Rational Unified Process

1997 - 2000: including project consulting and coaching

Rolle: IT Architect and IT Auditor

Kunde: IZB Soft GmbH & Co. KG

Aufgaben:

• Developer, Designer and Project Manager for Java frameworks, including project consulting and coaching
• Internal and external audits with focus on client/server applications andnetwork infrastructure