Profile
Pioneered a cost?efficient Zero Trust cloud transformation strategy that supported a tripling of the workforce. Protection of 10 GW of renewable energy capacity against cyber-attacks. 7 years leading a security team. 15+ years in IT Security as an Architect, Auditor and CISO.

TECHNICAL SKILLS
SECURE MODERN WORKPLACE WITH FOCUS ON ENTRA, INTUNE, PURVIEW AND DEFENDER

• Identity Protection by moving to adaptive risk-based controls
  • Phishing Resistant MFA
  • Conditional Access
  • Entra Identity Protection
  • Defender for Identity
• Endpoint Security using real time cloud anomaly detection
  • Defender for Endpoint
  • Intune Security Baselines
  • Compliance Policies
  • Attack Surface Reduction Rules
• Email Security to detect phishing emails with Defender for Office
  • Safe links and automated investigation and response
  • Cloudflare Area1 AI filter
  • Awareness campaign with Microsoft Attack Simulator
• Data loss prevention through encryption and information rights management
  • Purview Information Protection, DSPM for AI
  • Automatic Labelling, Insider Risk Management
  • Microsoft Cloud App Security with Data Loss Prevention (DLP)
• KPIs for security with
  • Secure Score M365
  • Defender for Cloud

SOFT SKILLS
PRESENTER AT MICROSOFT TECH BRIEFING: PASSWORDLESS

• Tech Enthusiast: Inspire by sharing enthusiasm for technology.
• Team Player: Collaborate and contribute to the overall IT strategy.
• Relationship Building: Manage stakeholder relationships to achieve consensus on security projects.
• Lifelong learner: Continuously learn new security technologies and mentor others.

Highlights

• Improved security incident response from days to minutes by introducing a SIEM with an external SOC.
• Realized a Zero Trust security strategy at every asset layer from email, identity, endpoint, application, data and infrastructure.
• Implemented and operationalized an ISO 27001-aligned ISMS tailored for KRITIS compliance, successfully passing external audits to satisfy critical infrastructure regulatory requirements.
• Data Security Posture Management for AI to defend against information oversharing and unethical use of AI.
• A passwordless-ransomwareless identity is my north star.

WORK EXPERIENCE

01/2025 - 06/2025
Security Cloud Solution Architect
Microsoft Germany

• Delivered workshops and presentations on M365 Security with focus on Entra Conditional Access, Passwordless and Microsoft Defender for Endpoint.
• Empowered customers to be successful in their Zero Trust security adoption journey by helping to define a Secure strategy aligned with Microsoft Cloud Security Services.
• Led a customer project on data security against data oversharing by using DSPM for AI and DLP.
• Presenter on Copilot Security Agents to increase security productivity.

04/2018 - 10/2024
CISO | Head of Cybersecurity
BayWa renewable energy

• Led a team of 5 Cybersecurity Specialists to execute ?2M security projects ahead of schedule
• Improved the M365 Secure Score from 30% to over 70%.
• Reduced Mean Time to Respond (?MTTR?) to an incident from days to minutes.
• Built an Endpoint team of 10 Specialists and developed the architecture for cloud managed devices.

01/2015 - 03/2018
IT Internal Auditor
Munich Reinsurance

• Conduct Global audits including social engineering attacks, and compromise of Active Directory
• Audit IT Projects, Business Continuity, Access and Change Management, Patch Management
• IT audit with standards of NIST, ISO27001 and SOC 2