Industry:
Small and Medium-Sized Enterprises

Position:
Project Manager

Areas of Responsibility:

• Implementation of an IT security concept (IT audit, IT compliance, and IT risk management with the goal of achieving DIN ISO 27001 certification and MA-RISK compatibility)
• Gap analysis (ISO 27001, MA-RISK, compliance, and data protection)
• Establishment of an ISMS—policies & documents
• Conducting interim audits to prepare for ISO 27001 recertification
• Processes and ICS
• Project or Action Plan (Scope)
• Preparation of Documentation & Guidelines
• Implementation of ICS & Processes
• Support with client questionnaires and audits
• ISMS audit preparation (DIN ISO 27001)
• Support for audit execution (DIN ISO 27001)
• Development of IT security concepts (data deletion policies, etc.)

Industry:
IT Service Provider

Position:
Project Manager

Areas of Responsibility:

• Review of measures outlined in the ISO 27001:2022 standard to prepare for audits and review of documentation
• Evaluation of the measures implemented and outstanding issues
• Preparation of a final report
• GAP analysis
• Classifications and specific considerations for affiliated companies
• Guidelines and documents
• Processes and ICS
• Action Plans

Industry:
Small and Medium-Sized Enterprises

Position:
, Project Manager

Areas of Responsibility:

• IT security maturity analysis and benchmarking
• Identification of high-level cybersecurity gaps to improve cybersecurity, including prioritization and a rough estimate of effort (low, medium, high)
• Presentation of the cybersecurity maturity level results
• Development of a roadmap for addressing the identified gaps
• Based on the maturity analysis, work began immediately on addressing the identified issues, incorporating insights from past experience
• Development of an ISMS (Information Security Management System)
• Development of policies and documents
• Definition of processes and an internal control system (ICS)
• Support in the implementation of the policies and the ICS
• Development and coordination of a project and action plan for the ISMS
• Support for an internal ISO 27001 audit
• Support with ISO 27001 certification

Industry:
Healthcare

Position:
CISO

Areas of Responsibility:

• Establishment of an integrated management system
• Document control using Confluence
• Process controls using Jira (change management for MDR products)
• Policy training (company-wide)
• Establishment of a risk management system

Industry:
Small and Medium-Sized Enterprises

Position:
Information Security Officer (ISB / ISO)

Areas of Responsibility:

• Internal coordinator for the implementation of an ISMS in accordance with ISO 27001 and ensuring compliance with the standard
• Internal Information Security Officer (ISB/ISO) responsible for the operational implementation of security measures and processes
• IT-related implementation of ISMS requirements, including access controls, logging, monitoring, and network security
• Conducting a gap analysis to identify discrepancies between the current state and the standard requirements, supported by a consulting firm using the VDA ISA 5.1 catalog
• Development and implementation of security policies and processes, e.g., malware protection, network security, access control, cryptography, supplier management, cloud services, business continuity management (BCM), risk management, Clean Desk & Clear Screen, change control, logging, information classification, and identity and access management (IAM)
• Leveraging synergies with other existing management systems
• Conducting and managing risk assessments and mitigation measures
• Conducting management reviews
• Planning and conducting internal audits, identifying opportunities for improvement, and overseeing corrective actions
• Development and implementation of emergency plans (BCM) and recovery strategies, and management of emergency drills
• Assessment and management of security-critical changes to IT systems and processes
• Development of an audit program
• Conducting technical audits to review IT security measures, identify vulnerabilities, and derive improvement measures
• Training and raising employee awareness of the guidelines

Industry:
Small and Medium-Sized Businesses / Infrastructure

Role:
Information Security Officer

Areas of Responsibility:

• Defining Objectives and Clarifying Expectations for the ISMS:
  Clarifying the objectives and expectations of the Information Security Management System (ISMS) in accordance with corporate requirements.
• Risk Analysis:
  Conducting a risk analysis to identify potential security risks; identifying core resources and critical business processes; analyzing existing security measures and their effectiveness; categorizing risks based on potential damage and probability of occurrence.
• Process Development:
  Defining processes for risk control and treatment; establishing procedures for the regular review and updating of the ISMS.
• Policy Development:
  Development of an overarching information security policy to serve as documented management commitment to information security; development of a policy describing the ISMS processes related to risk management; development of policies for end users, data classification, access control, and physical security.
• Consulting on the assignment of responsibilities:
  Support in defining roles and responsibilities within the ISMS; support in selecting the Information Security Officer.
• Development of IT security concepts:
  Development of authorization concepts; development of logging concepts.

Industry:
Small and Medium-Sized Businesses / Software Development

Position:
Information Security Officer

Areas of Responsibility:

• Implementation of an IT security strategy (IT audit, IT compliance, and IT risk management) with the goal of achieving ISO 27001 certification and MARISK compatibility
• Gap analysis (ISO 27001, MARISK, compliance, and data protection)
• Policies & Documents
• Processes and ICS
• Project or Action Plan (Scope)
• Preparation of documentation & guidelines
• Implementation of ICS & Processes
• Support with Customer Questionnaires and Audits
• Audit preparation (ISO 27001)
• Development of concepts in accordance with ISO 27001 (e.g., authorization and logging concepts)
• Support for conducting audits (ISO 27001)

Industry:
SMEs / Infrastructure

Role:
Information Security Management Consultant

Areas of Responsibility:

• Maturity analysis and criticality assessment of processes
• Recommendations for controls and processes (quick wins, short-, mid-, and long-term)
• Development of emergency guidelines and playbooks based on the ISO 27001 standard

Industry:
Small and Medium-Sized Enterprises

Role:
Project Associate

Areas of Responsibility:

• Support for the implementation of an IT security concept (IT audit, IT compliance, and IT risk management with the goal of achieving DIN ISO 27001 certification and MA-RISK compatibility)
• Gap analysis (ISO 27001, compliance, and data protection)
• Support in conducting interim audits to prepare for ISO 27001 recertification
• Project or action plan (scope)
• Preparation of documentation and guidelines
• Implementation of ICS & processes
• Support with client questionnaires and audits
• Support for ISMS audit preparation (DIN ISO 27001)
• Support for conducting audits (DIN ISO 27001)

Industry:
Banking / Finance

Position:
Project Associate

Responsibilities:

• Supporting the Information Security Officer in day-to-day operations; developing, implementing, monitoring, and updating the information security policy
• Developing and maintaining security policies and processes, guidelines, and recommendations, as well as conducting internal control system (ICS) audits of information security
• Informing and advising the organization on matters related to information security, including regular and ad hoc reporting
• Supporting IT projects and procurement processes with regard to information security
• Assisting with the oversight of IT service providers
• Planning and conducting security reviews and IT security audits
• Managing the assessment of current threats and vulnerabilities
• Participating in the analysis of security-related incidents
• Assessing security incidents and managing resulting corrective actions

Industry:
Insurance

Position:
Consultant / Project Manager

Areas of Responsibility:

• Consulting & Project Management:
  Review, prioritization, and implementation of the DORA project plan across various workstreams.
• Incident Prevention and Response:
  Vulnerability Management:
  Restructuring and prioritizing the project plan; addressing vulnerabilities; establishing processes, particularly with external service providers; designing and implementing authenticated vulnerability scans.
  Security Operations:
  Restructuring and prioritizing the project plan; addressing deficiencies; establishing processes, particularly with external service providers; designing, managing, and monitoring the external service provider.
• PAM & NPA:
  Privileged Access Management Proof of Concept; implementation of Privileged Access Management software, including configuration and integration with the PAM tool.
• Intrusion Detection & Data Loss Prevention:
  Prioritization of the project plan; resolution of deficiencies; establishment of processes, particularly with an external service provider; design and implementation of intrusion detection and prevention, as well as maturity and compliance assessments.
• Resilience Testing:
  Prioritization of the project plan; resolution of deficiencies; establishment of processes, particularly penetration testing; design and implementation of regular and risk-based penetration tests.

Industry:
Banking / Finance

Position:
Consultant / Project Manager

Areas of Responsibility:

• Cybersecurity Maturity Assessment:
  Conducting a comprehensive cybersecurity maturity assessment to identify and address security vulnerabilities.
• Project Support for Penetration Testing:
  Revision of the reconciliation process:
  Assessment of the current state; definition of requirements and internal coordination of reconciliation processes; implementation of the optimized reconciliation process.
  Revision of the penetration testing concept:
  Assessment of the current state; definition and internal coordination; implementation of interim measures and development of the target state; creation and coordination of reporting, Key Risk Indicators (KRIs), and Key Performance Indicators (KPIs); development and coordination of a long-term roadmap.
• Guidelines for external vendors (concept):
  Development and coordination of the concept for external penetration tests to ensure the quality and effectiveness of the tests.
• Drafting of Second Line guidelines in the following areas:
  application development, asset management, incident response, change management, access rights management, information transfer, physical security, logging, etc.

Industry:
Banking / Finance

Role:
Project Manager

Areas of Responsibility:

• Cybersecurity Maturity Assessment:
  Conducting a comprehensive maturity assessment in accordance with DORA and the NIS2 draft.
• Stakeholder Communication & Reporting:
  Regular presentation of analysis results to executive boards, supervisory boards, regulators, government agencies, and works councils.
• Coordination with Control Bodies:
  Close collaboration and maturity level alignment with the first and second lines of defense.
• Management Recommendations & Action Planning:
  Development of concrete recommendations for action, management action plans, and defined project packages to increase the maturity level.
• Operational Support & Resolution of Identified Gaps:
  Upgrading vulnerability scans to authenticated scans; reviewing and refining (threat-based) playbooks in the SIEM environment; evaluating frameworks and processes for risk assessment; Strategic analysis and evaluation of additional technologies to improve network security (IDS/IPS), EDR configuration and deployment; concepts for data at rest and data in transit.

Industry:
Banking / Finance

Role:
Project Manager

Areas of Responsibility:

• Implementation of Guidelines in the First Line of Defense:
  Development and refinement of concepts for implementing Second Line requirements in the First Line; process documentation regarding the implementation of Second Line requirements in the First Line.
• Security Incident Management Process:
  Drafting of policy documents; documenting the basic framework of security incident management processes; clarifying responsibilities across processes and documents; preparing templates for reports, etc.; coordination (stakeholders / policies).
• Data Loss Prevention Project Plan 2025:
  Gathering requirements; developing guidelines and policies for DLP; conducting a workshop; preparing a GAP analysis.
• Privileged Access Management:
  Development of a wide range of topics in the area of Privileged Access Management; conducting market analyses for tool implementations; requirements gathering; conducting a GAP analysis.
• Development of Concepts for Secure Development:
  Creation of 7+ development guidelines in collaboration with the respective development teams; management of the entire development process from drafting to final review and approval.
• Second Line Guidelines and Catalog of Recommended Measures:
  Review and update of 20 existing Second Line guidelines in accordance with DORA and FINMA RS 23/01; creation of five Second Line guidelines; development of a catalog of recommended measures with technical requirements.

Industry:
Banking / Finance

Position:
Consultant

Areas of Responsibility:

• Collaborated on the development of a Cybersecurity Maturity Assessment based on the NIST Cybersecurity Framework (CSF) 2.0
• Contributed to the development of requirements definitions based on the Digital Operational Resilience Act (DORA)
• Contributed to the development of GAP analyses for NIST CSF 2.0 and DORA
• Assessment of maturity level and compliance
• Compiling the identified findings and creating a roadmap to improve maturity and compliance

Industry:
Insurance

Position:
Consultant

Areas of Responsibility:

• Cyber Security Maturity Assessment based on the NIST Cybersecurity Framework (CSF) 2.0
• Requirement definition based on the Digital Operational Resilience Act (DORA) and the Insurance Regulatory Requirements for IT (VAIT)
• GAP analysis for NIST CSF 2.0, DORA, and VAIT
• Assessment of maturity level and compliance
• Compilation of identified findings and creation of a roadmap to improve maturity and compliance

Industry:
Banking / Finance

Position:
Project Associate in Information Security and BCM

Areas of Responsibility:

• Data Leakage Prevention (DLP) Project Planning:
  Development of a pragmatic project plan for the introduction and implementation of DLP measures, taking regulatory requirements into account.
• Information Security Policies:
  Creation and coordination of information security policies, including the definition of required measures to meet DORA requirements.
• Business Continuity Management (BCM):
  Support in the further development and implementation of BCM measures to increase organizational resilience against IT security incidents.

Industry:
Banking / Finance

Position:
Project Associate in IT Security Governance & PAM

Areas of Responsibility:

• Target Measures Catalog:
  Development of a comprehensive catalog of target measures in the context of regulatory requirements.
• Policy Development:
  Development of Second Line policies as a basis for implementation in the First Line.
• GAP Analysis:
  Development of a GAP analysis in accordance with BAIT, DORA, and ISO 27001 in relation to Second Line guidelines.
• Privileged Access Management (PAM):
  Development of a PAM project plan; creation of a template for authorization concepts (role concepts, business roles, PAM, etc.); market analysis and requirements gathering for the implementation of a PAM tool.

Industry:
Banking / Finance

Position:
Project Associate in the Regulatory & IT Security Department

Areas of Responsibility:

• Consulting on DORA requirements:
  Technical support in implementing regulatory requirements under the DORA Regulation.
• Policy Adaptation:
  Adapting and customizing model policies to the specific circumstances of the institution.
• Identification and Authentication of Vulnerabilities:
  Assistance in identifying and documenting technical and organizational weaknesses in the security context.
• Chain of Responsibility:
  Assumption of defined tasks within the framework of the regulatory allocation of responsibility along the service provider chain.
• Documentation & Implementation:
  Maintaining records and implementing measures to meet regulatory requirements.

Industry:
Banking

Position:
Interim Chief Information Security Officer (CISO)

Areas of Responsibility:

• Strategy, establishment, operation, and continuous expansion of a company-wide cybersecurity department
• Responsibility for governance, risk, and compliance, as well as operational security measures
• Establishment and management of a Cybersecurity Operations Center (SOC), including Levels 1–3 (Incident Detection, Response, and Threat Hunting)
• Implementation and further development of a holistic incident management framework
• Management and evaluation of external service providers as part of External Vendor Security Management
• Design and implementation of a company-wide vulnerability management program, as well as conducting and monitoring penetration tests
• End-to-end project management of a comprehensive, multi-year cybersecurity program comprising numerous individual projects
• Building a high-performing cybersecurity team, including leadership, development, values alignment, and performance management
• Responsibility for budget planning, management, and reporting
• Development and implementation of sustainable measures to promote cybersecurity awareness within the company

Industry:
Banking

Position:
Interim Head of IT Security / Head of Cyber Security (Interim)

Responsibilities:

• Establishing and leading an IT security department, including strategic direction and operational management
• Design and implementation of a Cyber Security Operations Center (CSOC) with a clear division of roles (Level 1 Analyst, Level 2 Analyst, Level 3 Threat Hunter)
• Establishing a comprehensive incident management process, including forensics and application monitoring
• Development program for SOC staff to ensure sustained skill enhancement
• Ensuring compliance with regulatory requirements and best practices, particularly in accordance with BAIT, DORA, MaRisk, NIST, ISO 27001, and MITRE ATT&CK
• Building internal red teaming capabilities for proactive vulnerability identification and cyber resilience testing
• Development, maintenance, and management of company-wide IT security strategies
• Budget Responsibility
• Leadership, Development, Motivation & Performance Management

Industry:
Insurance

Position:
Interim Information Security Officer (ISB)

Areas of Responsibility:

• Establishment, strategic direction, and day-to-day operations of the Information Security Department (2nd Line of Defense)
• Responsibility for governance, oversight, and the creation and maintenance of ISMS requirements, policies, and guidelines
• Conducting thematic reviews and third-party security audits to monitor external service providers
• Ensuring regulatory compliance in accordance with, among others, VAIT, ISO 27001, and DORA
• Establishment of an integrated risk and security management framework, including offensive security (penetration testing, red teaming, TLPT)
• Operational support through reporting, incident management, business continuity management, and project support
• Training concepts and delivery of internal training (Training & Education)
• Personnel responsibilities: Posting job openings and conducting interviews, leading a team
• Budget management & planning
• Establishment and management of a DORA & Infosec project

Industry:
Banking / Finance

Position:
Project Manager for the Expansion and Standardization of Penetration Testing

Responsibilities:

• Analysis of legal and regulatory requirements
• Risk analysis in accordance with KWG/MaRisk/BAIT
• Collaboration with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement with the works council
• GAP analysis
• Definition of standards and guidelines for penetration testing
• Reconciliation process between known and unknown assets
• Penetration testing report template in accordance with BaFin requirements
• Review of penetration testing reports for quality and alignment with BaFin requirements
• Coordination of penetration tests
• Escalation management
• Definition and implementation of end-to-end processes
• Proper handover to operational teams

Industry:
Banking / Finance

Position:
Project Manager for Penetration Testing Governance

Areas of Responsibility:

• Adaptation of guidelines
• Development of current, target, interim, and final states
• Developing a concept for external service providers
• Defining and coordinating reporting, KRIs, and KPIs

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Initiation, planning, and execution of various penetration testing projects
• Infrastructure penetration tests: perimeter, network gateways/segmentation, Windows and Linux servers
• Physical security of the institutions themselves and self-service areas: access control systems, video surveillance, network access security (especially in self-service and reception areas)
• Client security: Privilege escalation, antivirus evasion, lateral movement within internal networks
• Applications: Testing of internal and external web applications according to the complete OWASP WSTG
• Awareness: Social engineering and phishing attacks
• Preparation of detailed test reports documenting technical details and customer-specific recommendations for corrective actions

Industry:
Energy Provider

Position:
Project Manager

Areas of Responsibility:

• Audit Preparation & Planning
• In-depth corporate network penetration test to technically evaluate the office and control center infrastructure
• Conducting regular penetration tests and providing support in implementing cost-effective measures to significantly reduce the risk of a successful attack, as well as to demonstrably meet relevant regulatory requirements such as due diligence obligations and compliance measures

Industry:
Pharmaceuticals

Position:
Project Manager

Responsibilities:

• Planning, execution, and highly successful completion of a global penetration test
• Evaluation of the existing, globally networked infrastructure and assessment of the attack potential posed by both external and potential internal attackers
• Development of a comprehensive security strategy, including a prioritized roadmap for the initial remediation of critical security vulnerabilities and for monitoring via managed services
• Preparation of a detailed test report

Industry:
Sports equipment manufacturer

Role:
Project Manager

Areas of Responsibility:

• Identification and assessment of critical security vulnerabilities, as well as development of measures to address them
• Audit based on the complete OWASP WSTG v4
• Detailed report for management and IT
• Verification of resolved vulnerabilities as part of a follow-up audit
• Globally operated online stores for product sales, as well as employee portals for various business processes
• Creation of prioritized catalogs of organizational measures for management and technical measures for IT
• Identification of shortcomings in development and definition of measures to address them in a sustainable manner

Industry:
Medical device manufacturer

Position:
Project Manager

Areas of Responsibility:

• Analysis of legal and regulatory requirements
• FDA Draft Guidance and 510(k) submission scope
• UL 2900 Cybersecurity Standard for Medical Devices
• NIST 800 Series for security, data protection, and risk management
• ISO 62304 and 14971 via AAMI TIR-57 for medical devices
• Analysis of both development and residual risks
• Review and penetration testing of software, interfaces, and hardware
• Reverse engineering of hardware and firmware
• Supporting the client in establishing a “security-by-design” strategy

Industry:
Banking / Finance
Public Sector / Healthcare

Role:
Penetration Tester

Responsibilities:

• Planning the scope of penetration tests and the rules of engagement
• Penetration testing of web applications, infrastructure, and mobile applications (e.g., in accordance with OWASP or NIST 800-115) using white-box, gray-box, and black-box approaches
• Identifying security vulnerabilities through manual vulnerability analysis
• Supporting security assessments using common vulnerability scanners (e.g., BurpSuite, Nessus, OWASP ZAP, Nikto, Skipfish, nmap, etc.)
• Coordination and management of penetration testing programs and quality assurance for conducted penetration tests
• Creation and refinement of documentation and checklists to ensure the success of penetration tests
• Information gathering using manual and automated tools within the agreed scope (including Shodan, public databases such as RIPE)
• Exploitation of identified vulnerabilities within the agreed-upon Rules of Engagement using common tools (e.g., Metasploit, proof-of-concept exploit code) and proprietary attack vectors
• Documentation of the procedure and results based on the identified risk (risk analysis) and using indicators such as exploitability and probability of occurrence (based on CVSS)
• Developing recommendations for addressing identified vulnerabilities in targeted reports tailored to the intended audience
• Conducting retests to verify that vulnerabilities have been resolved and subsequently communicating the results

Industry:
SMEs / Manufacturing / Utilities / Retail

Role:
Pentester

Responsibilities:

• Planning the scope (scoping / test scope) of penetration tests and vulnerability assessments, as well as the Rules of Engagement
• Penetration testing and vulnerability assessments of iOS and web applications as well as infrastructure (e.g., with a focus on the OWASP Top 10 or NIST 800-115) using white-box, gray-box, and black-box approaches
• Automated and manual vulnerability assessments to detect accessible network services (“enumeration,” e.g., via nmap, Nessus, Dirbuster, or Nikto)
• Coordination and management of penetration testing programs and quality assurance for conducted penetration tests
• Creation and refinement of documentation and checklists to ensure the success of penetration tests
• Information gathering using manual and automated tools within the agreed scope (including Shodan, public databases such as RIPE)
• Exploitation of identified vulnerabilities within the agreed-upon Rules of Engagement using common tools (e.g., Metasploit, POC exploit code) and proprietary attack vectors
• Documentation of the methodology and results based on the assessed risk (risk analysis) and using indicators such as exploitability or probability of occurrence (based on CVSS)
• Developing recommendations for addressing identified vulnerabilities in a targeted report tailored to the intended audience
• Conducting retests to verify that vulnerabilities have been resolved and subsequently communicating the results

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Cybersecurity Maturity Assessment:
  Conducting a comprehensive maturity assessment in accordance with DORA and the NIS2 draft.
• Stakeholder Communication & Reporting:
  Regular presentation of analysis results to executive boards, supervisory boards, regulators, government agencies, and works councils.
• Coordination with Control Bodies:
  Close collaboration and maturity level alignment with the first and second lines of defense.
• Management Recommendations & Action Planning:
  Development of concrete recommendations for action, management action plans, and defined project packages to increase the maturity level.
• Operational Support & Resolution of Identified Gaps:
  Upgrading vulnerability scans to authenticated scans; reviewing and refining (threat-based) playbooks in the SIEM environment; evaluating frameworks and processes for risk assessment; Strategic analysis and evaluation of additional technologies to improve network security (IDS/IPS), EDR configuration and deployment; concepts for data at rest and data in transit.

Industry:
Small and Medium-Sized Enterprises

Position:
, Project Manager

Areas of Responsibility:

• IT security maturity analysis and benchmarking
• Identification of high-level cybersecurity gaps to improve cybersecurity, including prioritization and a rough estimate of effort (low, medium, high)
• Presentation of the cybersecurity maturity level results
• Development of a roadmap for addressing the identified gaps
• Based on the maturity analysis, work began immediately on addressing the identified issues, incorporating insights from past experience
• Development of an ISMS (Information Security Management System)
• Development of policies and documents
• Definition of processes and an internal control system (ICS)
• Support in the implementation of the policies and the ICS
• Development and coordination of a project and action plan for the ISMS
• Support for an internal ISO 27001 audit
• Support with ISO 27001 certification

Industry:
Banking / Finance
Aviation

Position:
Project Manager

Areas of Responsibility:

• Initial cybersecurity maturity analysis in accordance with the NIST Cybersecurity Framework and BAIT
• Expansion of the framework and improvement of measurability, as well as annual maturity audits
• Regular reporting and presentation of the maturity level to executive boards, supervisory boards, regulators, government agencies, and works councils
• Coordination of maturity levels with an independent risk management body in the second line of defense
• Recruiting, onboarding, and developing employees
• Development of management action plans/recommendations and project packages to increase the maturity level

Industry:
Banking / Finance

Position:
Consultant

Areas of Responsibility:

• Collaborated on the development of a Cybersecurity Maturity Assessment based on the NIST Cybersecurity Framework (CSF) 2.0
• Contributed to the development of requirements definitions based on the Digital Operational Resilience Act (DORA)
• Contributed to the development of GAP analyses for NIST CSF 2.0 and DORA
• Assessment of maturity level and compliance
• Compiling the identified findings and creating a roadmap to improve maturity and compliance

Industry:
Insurance

Position:
Consultant

Areas of Responsibility:

• Cyber Security Maturity Assessment based on the NIST Cybersecurity Framework (CSF) 2.0
• Requirement definition based on the Digital Operational Resilience Act (DORA) and the Insurance Regulatory Requirements for IT (VAIT)
• GAP analysis for NIST CSF 2.0, DORA, and VAIT
• Assessment of maturity level and compliance
• Compilation of identified findings and creation of a roadmap to improve maturity and compliance

Industry:
Leasing Company

Position:
Consultant

Responsibilities:

• Planning and conducting an assessment to analyze the maturity level of a SOC (Security Operations Center) and related capabilities
• Creation of an assessment catalog and conducting workshops to finalize it
• Analysis and evaluation of technical and procedural documentation
• Analysis of the maturity level, taking into account the SOC’s current capabilities and services
• Development of recommendations for action, taking into account criticality and the effort required for corrections
• Definition of “quick wins” for the prioritized implementation of corrective actions and dependencies within the work packages
• Development of a target operating model within the existing SOC
• Targeted presentation of results with a focus on relevant stakeholder groups (management / line managers)

Industry:
Small and Medium-Sized Businesses / Manufacturing / Utilities / Retail

Role:
Consultant

Areas of Responsibility:

• Design and implementation of a framework for assessing and continuously improving the level of cybersecurity maturity
• Development of the framework and audit checklist based on the controls from the NIST CSF (Cybersecurity Framework), NIST SP 800-53A, and ISO/IEC 27001
• Preparation of relevant documentation for conducting and reviewing the assessments
• Establishing the assessment program and planning assessments based on criticality
• Conducting assessments, documenting the results, and presenting them
• Facilitation of root-cause analyses to identify structural issues
• Deriving catalogs of measures and recommendations for action to improve the level of cybersecurity maturity

Industry:
Small and Medium-Sized Businesses / Retail

Position:
Consultant

Areas of Responsibility:

• IT Security Maturity Analysis and Benchmarking
• Overview of recommended protective measures to improve cybersecurity, including priority and estimated effort
• Recommendations for controls and processes (quick wins, short-, mid-, and long-term)
• Presentation of results regarding the cybersecurity maturity level

Industry:
Small and Medium-Sized Businesses / Manufacturing

Position:
Consultant

Areas of Responsibility:

• IT Security Maturity Analysis and Benchmarking
• Identification of high-level cybersecurity gaps to improve cybersecurity, including prioritization and estimated effort
• Recommendations for controls and processes (quick wins, short-, medium-, and long-term)
• Presentation of findings regarding the cybersecurity maturity level

Industry:
Private Banking / Financial Services

Position:
Project Manager

Areas of Responsibility:

• Project Management of Third-Party Security Reviews
• Writing Secure Coding Guidelines (DevSecOps)
• Project Management / Stakeholder Management / Escalation Management
• IDV Management
• Data Security Optimization
• Process Optimization
• Adaptation of Policies

Industry:
Small and Medium-Sized Businesses / Retail

Position:
Consultant

Areas of Responsibility:

• IT risk management and development of controls
• Development of processes related to party security audits
• Review and definition of security policies

Industry:
Banking / Finance

Position:
Consultant

Areas of Responsibility:

• Conducting third-party security reviews, taking into account the level of protection required
• Classifying the results according to security requirements (e.g., confidential, high, critical)
• Developing recommendations and measures for risk mitigation

Industry:
Insurance

Position:
Project Associate

Areas of Responsibility:

• Patch Management – Definition & Oversight:
  Definition and coordination of a company-wide patch management process, including standard and emergency patching, risk acceptance, escalation, and exception processes; Integration of third-party patch management requirements and coordination with external service providers; creation of guidelines and work instructions for management and documentation.
• Patch Management – Implementation:
  Implementation of the defined target state across various system landscapes (SAP, internal systems, external service providers); integration of specific requirements and adjustments during ongoing operations; definition of reporting metrics in the context of the company’s risk appetite.
• Patch Management – Optimization:
  Identification and prioritization of opportunities for process optimization; conducting regular coordination meetings with stakeholders; preparation and presentation of interim reports.
• Hardening – Definition of Target State:
  Identification of relevant asset types and definition of hardening measures for each type; cross-subproject coordination to harmonize requirements; development of comprehensive hardening guidelines.
• Hardening – Implementation:
  Comparison of target and actual states to identify deviations; documentation of deviations and collection of KPIs and KRIs for performance monitoring.

Industry:
Healthcare / MedTech

Position:
Vulnerability Management Specialist

Responsibilities:

• Establishing a vulnerability management system for software development, deployment, and IT infrastructure
• Creating SBOMs using Cyclonde-DX and integrating them into CI/CD
• Source code analysis using SonarSource—coordination with developers
• Linux infrastructure configuration vulnerability scans using Lynis
• Vulnerability analysis using Dependancy-Track
• Docker container vulnerability scans using Trivy
• Kubernetes configuration vulnerability scans based on the CIS Framework using kube-Bench
• Preparing management reports and planning mitigation strategies
• Documentation of the procedure and results based on the identified risk (risk analysis) and using indicators such as exploitability and likelihood of occurrence (based on CVSS)

Industry:
Banking / Finance

Position:
IT Security Analyst

Areas of Responsibility:

• Design, implementation, and continuous improvement of related processes and metrics for managing vulnerability management
• Operation and further development of the Tenable Security Center vulnerability scanning platform
• Planning and coordinating the Nessus agent rollout
• Planning and conducting vulnerability scans in Windows and Linux environments (Windows Client/Server, Debian, Red Hat)
• Analysis and assessment of identified vulnerabilities based on their criticality and impact on the company
• Coordinating measures for sustainable vulnerability remediation and options for risk mitigation

Industry:
Industrial Group

Position:
Project Manager

Areas of Responsibility:

• Design, implementation, and continuous improvement of related processes and metrics for managing vulnerability management
• Setup, operation, and documentation of the Tenable Security Center Plus vulnerability scanning platform in an isolated (“air-gapped”) network
• Planning and installation of Nessus agents, as well as coordination of the expanded rollout on Windows and Linux
• Creation and implementation of scan policies tailored to specific objectives
• Planning and conducting vulnerability scans (both local and network-based)
• Analysis and assessment of identified vulnerabilities based on criticality and impact on the company
• Coordination of measures for sustainable vulnerability remediation and risk mitigation options

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Analysis of the identified deficiencies from the BaFin §44 IT special audit, as well as the development of management action plans and strategies to address risks for the vulnerability management project stream
• Development of detailed action plans and a roadmap for the sustainable resolution of the deficiencies
• Design, implementation, and continuous improvement of related processes and metrics for managing vulnerabilities
• Setup, operation, and further development of the Tenable Security Center vulnerability scanning platform
• Planning and coordination of the Nessus agent rollout
• Planning and execution of vulnerability scans
• Analysis and assessment of identified vulnerabilities based on their criticality and impact on the company
• Coordinating measures for sustainable vulnerability remediation and risk mitigation options

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Design, implementation, operation, further development, and globalization of a vulnerability scanning platform (Tenable.sc / Nessus) in a KRITIS-relevant environment
• Integration of the vulnerability scanning platform’s results into a centralized vulnerability management consolidation platform (Kenna)
• Monitoring the operational status and troubleshooting the vulnerability scanning platform
• Design, implementation, and continuous improvement of associated processes and metrics for managing vulnerability management
• Establishment and continuous refinement of a reporting system to manage vulnerability remediation and metrics for evaluating process quality
• Communicating and promptly tracking the remediation status of identified vulnerabilities with responsible stakeholders
• Analysis and risk assessment of the current security situation regarding published vulnerabilities, taking into account attack scenarios, threat activity, and available malicious code
• Coordination of measures for sustainable vulnerability remediation and consultation regarding risk mitigation options in compliance with service level agreements
• Management of the provider for identifying vulnerabilities in externally accessible infrastructure
• Coordination between internal teams and the external provider regarding required resources and information

Industry:
Banking / Finance

Position:
Consultant

Responsibilities:

• Design, implementation, and operation of a vulnerability scanning solution based on Tenable Nessus in a KRITIS-relevant environment
• Monitoring the operational status and troubleshooting the vulnerability scanning platform
• Design, implementation, and continuous improvement of related processes in the area of patch and vulnerability management, as well as metrics for process control
• Establishment and continuous refinement of a reporting system to manage vulnerability remediation and metrics for evaluating process quality
• Communicating and promptly tracking the remediation status of identified vulnerabilities with responsible stakeholders
• Analysis and risk assessment of the current security situation regarding published vulnerabilities, taking into account attack scenarios, threat activity, and available malicious code
• Coordination of measures for sustainable vulnerability remediation and consultation regarding risk mitigation options in compliance with service level agreements

Industry:
Security Operations

Position:
, Project Associate

Responsibilities:

• Compilation of the software and hardware inventory
• Integration of clients into a centralized monitoring system
• Conducting automated and, when necessary, manual vulnerability scans
• Conducting vulnerability analyses
• Processing the results of vulnerability analyses and identifying vulnerabilities
• Detailed documentation of technical details

Industry:
Banking / Finance

Position:
Project Manager for IT Security & Regulatory Affairs

Areas of Responsibility:

• Audit preparation and planning
• Support and coordination of the audit
• Responsible for all matters related to the bank’s IT security
• Primary interviewer and point of contact for BaFin/Bundesbank auditors
• Compilation and QA of supporting documentation and responses
• Risk assessment and management of residual risks
• Selected topics: structural analysis, security needs analysis, target-actual comparison, risk management, vulnerability management, penetration tests, event management (SOC/SIEM), incident management, network security, firewall management, encryption
• Planning, setup, implementation, and responsibility for the mitigation project addressing the §44 audit findings

Industry:
Banking / Finance

Position:
Project Manager for Cybersecurity Maturity Management and Audit Follow-Up

Areas of Responsibility:

• Initial cybersecurity maturity analysis in accordance with the NIST Cybersecurity Framework
• Expansion of the framework, improvement of measurability, and annual maturity audits
• Regular reporting and presentation of the maturity level to executive boards, supervisory boards, regulators, government agencies, and works councils
• Coordination of maturity levels with an independent risk management body in the second line of defense
• Recruiting, onboarding, and developing employees
• Development of management action plans/recommendations and project packages to increase the maturity level

Industry:
Banking / Finance

Position:
Project Manager

Responsibilities:

• Supporting and coordinating auditor inquiries
• Interview partner and point of contact for the respective auditors
• Compilation and QA of supporting documentation and responses
• Risk assessment and management of residual risks
• Across all subject areas: structural analysis, security needs analysis, target-actual comparison, risk management, vulnerability management, penetration testing, event management, incident management, network security, firewall management, encryption

Industry:
Banking / Finance

Role:
Consultant

Areas of Responsibility:

• Identifying “quick wins” and developing prioritized work packages to implement corrective measures
• Implementation of prioritized mitigating measures to reduce overall risk
• Developing and implementing process improvements and operational restructuring in close collaboration with the relevant departments and the 2nd Line of Defense
• Developing and introducing a catalog of target measures to derive protective measures based on the criticality of the systems to be protected
• Conducting risk analyses to determine the criticality of systems requiring protection and to derive recommended measures

Industry:
Banking / Finance

Position:
Project Associate

Responsibilities:

• Supporting audits related to vulnerability management and network security
• Serving as an interview partner and point of contact during the audit
• Compilation of necessary evidence packages, such as supporting documentation and responses
• Addressing identified risks in accordance with risk treatment strategies
• Developing management action plans to address the risks
• Development of process improvements and operational restructuring in close collaboration with the relevant departments
• Coordination of process improvements with the 2nd and 3rd lines of defense
• Implementation of the identified process improvements and compilation of evidence to address deficiencies

Industry:
Banking / Finance

Role:
Project Associate

Areas of Responsibility:

• Addressing IAM-specific audit findings from the §44 IT special audit
• Responsible for questions regarding Identity and Access Management (IAM)
• Compilation and QA of supporting documentation and responses
• Risk assessment and management of residual risks

Industry:
Banking / Finance

Position:
Project Associate

Responsibilities:

• Development and implementation of security policies
• Coordination of policies with various business departments
• Conducting policy reviews for quality assurance
• Ensuring compliance with relevant legal and regulatory requirements
• Creating and maintaining detailed documentation for internal and external audits
• Close communication and collaboration within the team to foster a strong security culture

Industry:
Small and Medium-Sized Enterprises

Position:
, Project Manager

Areas of Responsibility:

• Cybersecurity maturity analysis in accordance with NIST and the NIS2 draft
• Regular reporting and presentation of maturity levels to senior management
• Coordination of maturity levels with senior management
• Development of roadmaps and recommendations in the form of project packages to increase the maturity level
• Support with operational implementation / resolution of identified gaps

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Cybersecurity Maturity Assessment:
  Conducting a comprehensive maturity assessment in accordance with DORA and the NIS2 draft.
• Stakeholder Communication & Reporting:
  Regular presentation of analysis results to executive boards, supervisory boards, regulators, government agencies, and works councils.
• Coordination with Control Bodies:
  Close collaboration and maturity level alignment with the first and second lines of defense.
• Management Recommendations & Action Planning:
  Development of concrete recommendations for action, management action plans, and defined project packages to increase the maturity level.
• Operational Support & Resolution of Identified Gaps:
  Upgrading vulnerability scans to authenticated scans; reviewing and refining (threat-based) playbooks in the SIEM environment; evaluating frameworks and processes for risk assessment; Strategic analysis and evaluation of additional technologies to improve network security (IDS/IPS), EDR configuration and deployment; concepts for data at rest and data in transit.

Industry:
Banking / Finance

Position:
Project Manager

Areas of Responsibility:

• Planning, execution, and highly successful completion of a TIBER-DE test
• White Team Lead
• Extensive selection of external providers for threat intelligence and red teaming
• Primary responsibility for the bank’s IT security
• Monitoring and managing the external red team
• Daily collaboration with the external red team, threat intelligence team, and the Bundesbank
• Continuous monitoring and management of risks to the production environment during red teaming
• Preparation and implementation of so-called “leg-ups”
• Creation of stories & cover stories (e.g., fake identities) and processes to keep the Blue Team in the dark about the TIBER-DE test without increasing the bank’s risk
• Coordination with all internal stakeholders (CRO, COO, CIO, DSB, Compliance, etc.)
• Scenario selection
• Preparation and review of test reports for the Red Team, Threat Intel, Blue Team, and BaFin

Industry:
Banking / Finance

Position:
Employee

Areas of Responsibility:

• Participation in Red & Blue Team Assessments as part of TIBER-DE in the Blue and Purple Teams
• Risk analysis and assessment of the current security situation regarding published vulnerabilities, taking into account attack scenarios, threat activity, and available malicious code
• In-depth analysis of cybersecurity incidents and investigation of IT security events
• Coordinating and implementing measures to contain identified security incidents as part of incident response procedures and in collaboration with relevant departments
• Collection and analysis of evidence, such as logs and data, during IT security events, in accordance with forensic best practices
• Conducting root cause analyses and “lessons learned” to continuously improve incident response processes and the monitoring and evaluation methods used
• Further development of playbooks for analyzing IT security incidents and standard operating procedures
• Improvement and further development of SIEM use cases to reduce false-positive events
• Onboarding and integrating log sources from the information system landscape into a centralized SIEM solution (Splunk / QRadar) and performing regular “health checks”
• Analysis (target vs. actual comparison) of existing security signatures and activation of new ones for the central NIPS solution, as well as assessment of protection requirements for network zones
• Risk assessment of new firewall requests in the context of network security

Industry:
Healthcare

Position:
CISO

Areas of Responsibility:

• Configuration and integration of the Wazuh SIEM system in heterogeneous environments: Microsoft 365, Windows 10/11, Arch Linux, macOS, Kubernetes
• Design and definition of alerting rules and monitoring scenarios for production systems and critical infrastructure
• Development of centralized monitoring for proactive attack detection and incident response at
  
  
  
  

Industry:
Industrial Group

Position:
Project Manager

Areas of Responsibility:

• Vulnerability Management with Tenable / Nessus:
  design, implementation, and continuous improvement of related processes and metrics for managing vulnerability management; Setup and operation of an air-gapped vulnerability scanning platform using Tenable Security Center Plus; planning and installation of Nessus agents, as well as coordination of the expanded rollout on Windows and Linux; creation and implementation of customized scan policies; planning and execution of vulnerability scans (both local and network-based); Analysis and assessment of identified vulnerabilities based on criticality and impact on the company; coordination of measures for sustainable vulnerability remediation and risk mitigation options
• SIEM Selection, Implementation, & Operation:
  Defining technical and organizational requirements (e.g., log sources, compliance requirements, integration into existing infrastructure); researching and evaluating SIEM vendors; Creation of an evaluation matrix based on criteria such as scalability, cost, user-friendliness, support, and security features; execution of test scenarios with selected SIEM products to evaluate performance and integration capabilities; development of recommendations for selecting the appropriate product
• Splunk – Architecture, Use Cases & Incident Handling:
  Architecture Planning: Design of the Splunk architecture and required components (indexers, search heads, forwarders, deployment servers), taking into account log volume and availability requirements;
  Log Source Integration: Design of log collection and processing in accordance with security best practices, including parsing, normalization, and tagging based on Technical Add-ons (TAs);
  Data Management: Defining retention policies, buckets, and data lifecycle strategies based on compliance requirements;
  Monitoring and Maintenance: Setting up dashboards and alerts to monitor the Splunk environment;
  Definition of Use Cases: Selection of use cases for detecting specific attacks (e.g., privilege escalation, brute force, data exfiltration) while considering relevant attack scenarios;
  Implementation and Prioritization: Prioritizing use cases based on risk, criticality, and technical feasibility, as well as developing additional specific use cases;
  Validation and Optimization: Conducting tests to verify the effectiveness of the use cases;
  Monitoring and Prioritization: Monitoring incoming notable events via the Splunk Enterprise Security (ES) Incident Review Dashboard;
  Analysis and Validation: Reviewing the details of the notable event, including affected assets or users, using Splunk searches and dashboards to validate incidents (e.g., historical data analysis, user activities, network flows);
  Triage and Escalation: Classify the Notable (e.g., false positive, confirmed security event, potential incident) while considering further escalation processes (Incident Response);
  Optimization: Analyze recurring false positives to adjust correlation rules and thresholds

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Strategic and operational development of a company-wide Cyber Security Operation Center (SOC)
• Analysis and integration of legal and regulatory requirements (KWG, MaRisk, BAIT)
• Conducting a risk analysis and working closely with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement, with the works council
• Definition and implementation of a Target Operating Model for the SOC
• Selection, configuration, and implementation of a SIEM system for security monitoring
• Definition, documentation, and implementation of SOC processes (e.g., incident response, alert handling, use-case development)
• Establishing a dedicated SOC team, including recruiting and training employees
• Globalization and targeted outsourcing of individual SOC services
• Establishment of threat intelligence and malware analysis

Industry:
Banking

Position:
Project Manager

Responsibilities:

• Selection, configuration, and implementation of a modern EDR/NGAV solution (CrowdStrike) to secure endpoints and servers (Windows & Unix)
• Risk analysis in accordance with KWG/MaRisk/BAIT
• Collaboration with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement with the works council
• Implementation of the tool on endpoints and servers (Windows, Unix)
• Configuration of the tool
• Definition and implementation of processes
• Proper handover to operational use

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Analysis of legal and regulatory requirements
• Risk analysis in accordance with the German Banking Act (KWG), MaRisk, and BAIT
• Collaboration with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement, with the works council
• Implementation and configuration of Trend Micro Deep Discovery and Proofpoint on endpoints and servers (Windows, Unix)
• Definition and implementation of supporting processes (e.g., quarantine, incident handling, escalation)
• Handover of the implemented tools to operational use, including an operational management concept and reporting

Industry:
Leasing Company

Position:
Consultant

Responsibilities:

• Planning and conducting an assessment to analyze the maturity level of a SOC (Security Operations Center) and related capabilities
• Development of an assessment catalog and facilitation of workshops to comprehensively map SOC capabilities
• Analysis and evaluation of technical and procedural SOC documentation
• Analysis of the maturity level, taking into account the SOC’s current capabilities and services
• Development of recommendations for action, taking into account criticality and the effort required for corrections
• Definition of “quick wins” for the prioritized implementation of corrective actions and dependencies within the work packages
• Development of a Target Operating Model (TOM) within the existing SOC
• Targeted presentation of results with a focus on relevant stakeholder groups (management / line managers)

Industry:
Banking

Position:
Project Associate

Areas of Responsibility:

• Participation in Red & Blue Team assessments as part of TIBER-DE, working on the Blue and Purple Teams
• Risk analysis and assessment of the current security situation regarding published vulnerabilities, taking into account attack scenarios, threat activity, and available malicious code
• In-depth analysis of cybersecurity incidents and investigation of IT security events
• Coordination and implementation of measures to contain identified security incidents as part of incident response procedures and in collaboration with relevant departments
• Collection and evaluation of evidence (logs, data) in accordance with forensic best practices
• Conducting root cause analyses and “lessons learned” to continuously improve incident response processes and the monitoring and evaluation methods used
• Further development of playbooks and standard operating procedures for analyzing IT security events
• Optimizing and expanding SIEM use cases to reduce false positives
• Onboarding and integration of log sources from the information system landscape into a centralized SIEM solution (Splunk / QRadar) and regular “health checks”
• Analysis (target vs. actual comparison) and activation of security signatures in the central Network Intrusion Prevention System (NIPS) solution, as well as assessment of protection requirements for network zones
• Risk assessment of new firewall requests in the context of network security

Position:
IT Specialist for System Integration

Areas of Responsibility:

• Implementation of an XDR system for threat detection and response across multiple IT environments (network, email, Azure)
• Optimizing threat data analysis by adjusting rules to reduce false positives and improve detection accuracy
• Conducting incident analysis and reporting

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Analysis of legal and regulatory requirements
• Risk analysis in accordance with the German Banking Act (KWG), MaRisk, and BAIT
• Collaboration and coordination with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement, with the works council
• Definition and inventory of privileged access rights
• Implementation of numerous monitoring measures for privileged user activities in accordance with regulatory requirements and the works agreement
• Transition of the defined processes and measures into operational use

Position:
Junior IT Security Assistant

Responsibilities:

• Selection and implementation of a local multi-factor authentication (MFA) system to strengthen authentication security for all user accounts
• Configuration and seamless integration of the MFA solution into the existing Active Directory infrastructure
• Implementation of multi-factor authentication mechanisms (e.g., hardware tokens, software tokens) for all user groups
• Ensuring a user-friendly MFA experience without disrupting end-users’ workflows
• Testing and validating the MFA solution through pilot groups to verify functionality and acceptance
• Training IT staff and end users on how to use the MFA solution and explaining its benefits

Position:
Junior IT Security Assistant

Areas of Responsibility:

• Design and planning of a two-tier PKI architecture with an offline root CA for enhanced security and an intermediate CA for certificate issuance
• Setup of the offline Root CA, which operates offline as a trusted authority to ensure the highest security standards
• Implementation of the Intermediate CA, which is responsible for issuing and managing certificates for end users and systems
• Issuing digital certificates for authentication and code signing
• Setup of Certificate Revocation Lists (CRLs) to manage and verify certificate status
• Automatic certificate distribution (auto-enrollment) set up within the infrastructure
• Ensuring the physical security of the offline Root CA to guarantee its integrity and confidentiality
• Training of IT staff on the secure handling and management of the PKI infrastructure, as well as the implementation of best practices

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Analysis and interpretation of legal requirements
• Design and implementation of a KRITIS project
• Conducting a GAP analysis to review existing measures and identify deviations from the KRITIS Regulation
• Review of the applicability of the KRITIS Regulation
• Clarification and definition of responsibilities
• Development and implementation of a group-wide KRITIS policy
• Mitigation of KRITIS gaps
• Reporting KRITIS responsibilities to the BSI, including formal coordination
• Establishment of reporting processes in coordination with internal corporate departments such as Data Protection, the Works Council, Compliance, Human Resources, Information Security, etc.
• Conducting and evaluating KRITIS test reports to verify reporting capability and organizational maturity

Industry:
Healthcare

Position:
Security Architect & CISO

Areas of Responsibility:

• Design and implementation of a future-proof security concept based on GMDS (German Society for Medical Informatics, Biometrics, and Epidemiology)
• Compliance with BSI regulations (TR-03161, TR-02102-X, TR-03166, TR-03107-1) and BSI IT-Grundschutz (200-1, 200-2)
• Leading and conducting workshops with specialized departments for the BSI Act working group
• Collaboration with auditors to resolve findings from KRITIS audits pursuant to Section 8 of the BSI Act
• Compliance with HIPAA requirements for the data protection-compliant processing of medical data
• Design of a cross-device end-to-end (E2E) concept with data validation
• Hardening of Linux servers using SELinux, ModSecurity, Fail2Ban, ModEvasive, and encrypted backups with Baeros (Bacula fork) and Lyni
• Setup of log monitoring and alerting, as well as metric monitoring using Grafana, Prometheus, and Loki
• Product Owner for Secure Development – Responsible for the secure development of the digital medical device

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Analysis of legal and regulatory requirements
• Risk analysis in accordance with the German Banking Act (KWG), MaRisk, and BAIT
• Collaboration with internal risk control departments (data protection, compliance, legal, etc.)
• GAP analysis and restructuring of the existing cyber risk management framework
• Defining requirements for a consistent, compliant cyber risk management framework for banks
• Development and implementation of a new cyber risk framework, including risk categorization, escalation paths, and definitions of control and maturity levels
• Support in operationalizing and integrating the framework into existing processes and governance structures

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• Analysis of legal and regulatory requirements
• Risk analysis in accordance with the German Banking Act (KWG), MaRisk, and BAIT
• Collaboration and coordination with internal risk control departments (data protection, compliance, legal, etc.)
• Coordination, including a works agreement, with the works council
• Defining and implementing incident management processes, including roles, escalation procedures, and reporting requirements

Industry:
Banking

Position:
Project Manager

Areas of Responsibility:

• In-depth analysis of IT security incidents (including phishing and data leaks)
• Coordination and initiation of measures to contain identified security incidents
• Design and implementation of in-house NIDS rules for detecting cybersecurity-related attacks based on the ELK Stack, as well as the definition of necessary processes
• Development of IT concepts based on second-line requirements (target specification, comparison, and recommended actions)
• Design and development of operating manuals, playbooks, and checklists (including those for handling suspected phishing cases or data leakage incidents)
• Consulting services for various projects with a focus on implementation guidelines for the secure operation of IT services

Industry:
Banking

Position:
Consultant

Areas of Responsibility:

• Development of a Target Operating Model (TOM) within the 1st and 2nd Lines of Defense to establish thematic control activities in the area of cybersecurity
• Establishment of an interim Target Operating Model (TOM) to address an audit requirement and mitigate the identified risk
• Development and implementation of a process for conducting thematic control activities within the 2nd Line of Defense based on the NIST Cybersecurity Framework (NIST CSF)
• Establishment of continuous control activities to identify risks early and address them through appropriate strategies
• Development of a program for the long-term planning of thematic control activities, taking into account prioritized areas (e.g., due to missing controls within the internal control system or emerging threats)

Industry:
Government Agency

Position:
Consultant

Areas of Responsibility:

• Assessment and analysis of client-specific security requirements
• Development of a comprehensive IT security concept
• Development of a customized IT-Grundschutz module in accordance with the BSI IT-Grundschutz methodology
• Risk analysis for the client

Industry:
Banking

Position:
Consulting / IT Security Consultant

Areas of Responsibility:

• Design, management, and delivery of IT security training for new IT security employees
• Selection of employees
• Setup, expansion, configuration, and securing of an IT infrastructure consisting of web servers, databases, servers, clients, and VPN servers

Position:
Junior IT Security Analyst

Responsibilities:

• Selection and implementation of a phishing awareness platform to raise employee awareness of phishing threats
• Conducting regular phishing simulations to analyze behavior and strengthen awareness
• Evaluating and reporting on simulation results to measure progress
• Training employees on the secure use of email and how to identify suspicious links and attachments

Industry:
Medicine

Role:
Service for Ensuring IT Security - Bronze Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Silver Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Bronze Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Silver Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Bronze Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Bronze Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Position:
Service for Ensuring IT Security - Gold Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security

Industry:
Medicine

Role:
Service for Ensuring IT Security - Silver Package

Areas of Responsibility:

• Analysis of existing IT security measures in accordance with KBV guidelines
• Establishment of a cyber awareness training program
• Implementation of professional antivirus software, including monitoring by cybersecurity experts
• Definition and implementation of incident management processes
• Creation of templates for IT security, onboarding, offboarding, etc.
• Backup policies & processes
• Establishment of patch management processes
• Smartphone and tablet security
• Email Security