Fractional and interim CISO specialising in ISO 27001, NIS2, Vanta implementations, cloud security, governance and risk management.
Aktualisiert am 08.09.2026
Profil
Freiberufler / Selbstständiger
Remote-Arbeit
Verfügbar ab: 02.11.2026
Verfügbar zu: 100%
davon vor Ort: 100%
IT-Security
ISO 27001
IT-Compliance
Python
Penetrationstest
NIS
Digital Operational Resilience Act
DSGVO
MS Power BI
English
fluent (C2)
German
fluent (C2)
Turkish
native
French
proficient in conversation (B1)

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

9 Monate
2026-01 - heute

Information Management

Chief Information Security Officer
Chief Information Security Officer
  • Leading the university-wide information security function (approx. 3,000 staff, 16,000 students)
  • Building the ISMS (operating model, risk framework, policy suite, and multi-year roadmap)
  • Chairing the Information Security Steering Committee and reporting directly to leadership
  • Running the ISO 27001 certification programme: scoping, gap analysis and control implementation under way
Universität Salzburg
Salzburg (Austria)
1 Jahr 4 Monate
2024-09 - 2025-12

Information Security

Head of Information Security
Head of Information Security
  • Led information security for a London-based fintech serving banking and audit clients, with global operations
  • Implemented and rolled out Vanta across the organisation, covering risk management, IAM recertification, vendor management, HR onboarding/offboarding, and internal audit
  • Acted as the primary security contact for enterprise client due diligence and vendor risk assessments, directly supporting the sales pipeline
Validis
London (UK)
2 Jahre 1 Monat
2022-09 - 2024-09

Information management

Fractional CISO
Fractional CISO
  • Served as external CISO and ISO 27001 lead for a digital media company in Turkey; advised on information security governance and compliance obligations
  • Designed and implemented a sustainability platform for a UK biofuels company, enabling fuel traceability and supporting regulatory and ESG reporting requirements
Kort
London (UK)
1 Jahr 9 Monate
2021-01 - 2022-09

Information management

Head of Information Security
Head of Information Security
  • Built the security function for a venture-backed AI/biotech start-up, including policy framework, risk register, asset inventory, and incident response
  • Achieved ISO 27001 certification within 12 months, building the ISMS from first policy to certification
Causaly
London (UK)
2 Jahre 10 Monate
2018-04 - 2021-01

Carve-outs and post-merger integrations

Senior Vice President
Senior Vice President
  • Advised within digital and cybersecurity engagements across carve-out and post-merger scenarios for PE-backed and corporate clients
  • Led cybersecurity engagements for multiple organisations undergoing insolvency and administration processes.
on request
London (UK)
3 Jahre 1 Monat
2015-04 - 2018-04

IAM Transformation Programs and Security Analyses

Manager, Technology Risk
Manager, Technology Risk
  • Ran IAM transformation programmes and security assessments for investment banking clients, covering role-based access control, privileged access management, eDiscovery and trade surveillance
  • Delivered GDPR readiness and data privacy assessments for clients across insurance and manufacturing
Protiviti
London (UK)
3 Jahre 4 Monate
2012-01 - 2015-04

Consulting ? Solvency II and Data Governance

Assistant Manager, Advisory
Assistant Manager, Advisory
Advised major insurers on Solvency II and data governance; coordinated forensic response and a BaFin-led regulatory investigation following a client data leakage event.
KPMG
Munich (Germany)
3 Jahre 9 Monate
2008-04 - 2011-12

IT Transformation and Outsourcing Programs

Technology Consultant
Technology Consultant
Worked across major IT transformation and outsourcing programmes in banking and automotive, covering project management, incident management and business continuity.
on request
Frankfurt (Germany)

Aus- und Weiterbildung

Aus- und Weiterbildung

2008
Studie - Computer Science
Universität des Saarlandes
Degree: MSc

2006
Studie - Computer Science
Universität des Saarlandes
Degree: BSc

2001
Abitur
Deutsche Schule Istanbul

CERTIFICATIONS
  • ISACA CISM (2025)
  • Vanta (2025)
  • ISO 27001 Senior Lead Implementer (2021)
  • GDPR Practitioner (2017)
  • ITIL Foundation (2009)

Position

Position

Chief Information Security Officer

Kompetenzen

Kompetenzen

Top-Skills

IT-Security ISO 27001 IT-Compliance Python Penetrationstest NIS Digital Operational Resilience Act DSGVO MS Power BI

Schwerpunkte

  • Security function build-out 
  • Board and C-suite advisory 
  • Cloud security (AWS, Azure, GCP) 
  • Zero trust architecture 
  • M&A cyber due diligence
  • Incident response and crisis management
  • GRC programme delivery (e.g. Vanta) 
  • Vendor and third-party risk 
  • Regulatory and compliance advisory

Produkte / Standards / Erfahrungen / Methoden

PROFILE
CISO with over 18 years of international experience across technology startups, higher education, and regulated financial services. Proven track record of building security functions from the ground up, managing and influencing security investment across a ?30m portfolio and leading teams of up to 20 across Germany, the UK, Austria and Turkey. Extensive experience delivering ISO 27001 certifications from a zero baseline, leading SOC 2 programmes, and executing security workstreams for M&A transactions exceeding £2bn. Brings a hands-on approach with a strong focus on scalable, cost-efficient security solutions.

FRAMEWORKS AND REGULATIONS
  • ISO 27001, 27017, 27005, 42001 (AI governance)
  • SOC 2 Type I and II 
  • GDPR
  • NIS2 
  • DORA
  • NIST CSF
  • PCI DSS 
  • HIPAA 
  • Solvency II

Einsatzorte

Einsatzorte

Deutschland, Schweiz, Österreich
möglich

Projekte

Projekte

9 Monate
2026-01 - heute

Information Management

Chief Information Security Officer
Chief Information Security Officer
  • Leading the university-wide information security function (approx. 3,000 staff, 16,000 students)
  • Building the ISMS (operating model, risk framework, policy suite, and multi-year roadmap)
  • Chairing the Information Security Steering Committee and reporting directly to leadership
  • Running the ISO 27001 certification programme: scoping, gap analysis and control implementation under way
Universität Salzburg
Salzburg (Austria)
1 Jahr 4 Monate
2024-09 - 2025-12

Information Security

Head of Information Security
Head of Information Security
  • Led information security for a London-based fintech serving banking and audit clients, with global operations
  • Implemented and rolled out Vanta across the organisation, covering risk management, IAM recertification, vendor management, HR onboarding/offboarding, and internal audit
  • Acted as the primary security contact for enterprise client due diligence and vendor risk assessments, directly supporting the sales pipeline
Validis
London (UK)
2 Jahre 1 Monat
2022-09 - 2024-09

Information management

Fractional CISO
Fractional CISO
  • Served as external CISO and ISO 27001 lead for a digital media company in Turkey; advised on information security governance and compliance obligations
  • Designed and implemented a sustainability platform for a UK biofuels company, enabling fuel traceability and supporting regulatory and ESG reporting requirements
Kort
London (UK)
1 Jahr 9 Monate
2021-01 - 2022-09

Information management

Head of Information Security
Head of Information Security
  • Built the security function for a venture-backed AI/biotech start-up, including policy framework, risk register, asset inventory, and incident response
  • Achieved ISO 27001 certification within 12 months, building the ISMS from first policy to certification
Causaly
London (UK)
2 Jahre 10 Monate
2018-04 - 2021-01

Carve-outs and post-merger integrations

Senior Vice President
Senior Vice President
  • Advised within digital and cybersecurity engagements across carve-out and post-merger scenarios for PE-backed and corporate clients
  • Led cybersecurity engagements for multiple organisations undergoing insolvency and administration processes.
on request
London (UK)
3 Jahre 1 Monat
2015-04 - 2018-04

IAM Transformation Programs and Security Analyses

Manager, Technology Risk
Manager, Technology Risk
  • Ran IAM transformation programmes and security assessments for investment banking clients, covering role-based access control, privileged access management, eDiscovery and trade surveillance
  • Delivered GDPR readiness and data privacy assessments for clients across insurance and manufacturing
Protiviti
London (UK)
3 Jahre 4 Monate
2012-01 - 2015-04

Consulting ? Solvency II and Data Governance

Assistant Manager, Advisory
Assistant Manager, Advisory
Advised major insurers on Solvency II and data governance; coordinated forensic response and a BaFin-led regulatory investigation following a client data leakage event.
KPMG
Munich (Germany)
3 Jahre 9 Monate
2008-04 - 2011-12

IT Transformation and Outsourcing Programs

Technology Consultant
Technology Consultant
Worked across major IT transformation and outsourcing programmes in banking and automotive, covering project management, incident management and business continuity.
on request
Frankfurt (Germany)

Aus- und Weiterbildung

Aus- und Weiterbildung

2008
Studie - Computer Science
Universität des Saarlandes
Degree: MSc

2006
Studie - Computer Science
Universität des Saarlandes
Degree: BSc

2001
Abitur
Deutsche Schule Istanbul

CERTIFICATIONS
  • ISACA CISM (2025)
  • Vanta (2025)
  • ISO 27001 Senior Lead Implementer (2021)
  • GDPR Practitioner (2017)
  • ITIL Foundation (2009)

Position

Position

Chief Information Security Officer

Kompetenzen

Kompetenzen

Top-Skills

IT-Security ISO 27001 IT-Compliance Python Penetrationstest NIS Digital Operational Resilience Act DSGVO MS Power BI

Schwerpunkte

  • Security function build-out 
  • Board and C-suite advisory 
  • Cloud security (AWS, Azure, GCP) 
  • Zero trust architecture 
  • M&A cyber due diligence
  • Incident response and crisis management
  • GRC programme delivery (e.g. Vanta) 
  • Vendor and third-party risk 
  • Regulatory and compliance advisory

Produkte / Standards / Erfahrungen / Methoden

PROFILE
CISO with over 18 years of international experience across technology startups, higher education, and regulated financial services. Proven track record of building security functions from the ground up, managing and influencing security investment across a ?30m portfolio and leading teams of up to 20 across Germany, the UK, Austria and Turkey. Extensive experience delivering ISO 27001 certifications from a zero baseline, leading SOC 2 programmes, and executing security workstreams for M&A transactions exceeding £2bn. Brings a hands-on approach with a strong focus on scalable, cost-efficient security solutions.

FRAMEWORKS AND REGULATIONS
  • ISO 27001, 27017, 27005, 42001 (AI governance)
  • SOC 2 Type I and II 
  • GDPR
  • NIS2 
  • DORA
  • NIST CSF
  • PCI DSS 
  • HIPAA 
  • Solvency II

Vertrauen Sie auf Randstad

Im Bereich Freelancing
Im Bereich Arbeitnehmerüberlassung / Personalvermittlung

Fragen?

Rufen Sie uns an +49 89 500316-300 oder schreiben Sie uns:

Das Freelancer-Portal

Direktester geht's nicht! Ganz einfach Freelancer finden und direkt Kontakt aufnehmen.