Home / About me
ABOUT ME
From systems integrator to security architect
I started out as an IT specialist for systems integration, with my hands on the infrastructure. Today I advise and audit as an auditor and IT expert, bridging the gap between IT operations and management.
This hands-on experience shapes my perspective: I know where technology is strong and where it becomes vulnerable.
“Security begins in the mind – and ends in action.”
MOTIVATION
Security has to work, not just exist
For me, frameworks and standards are tools for stability and trust, not checklists. You can recognise a good security concept by the fact that it is understood, accepted and implemented.
As an expert, I work neutrally, based on facts and traceably. I audit, assess and explain, without lecturing.
My focus areas
Audit & Compliance
Conducting, preparing and supporting audits.
Regulation
Translating DORA, NIS2, MaRisk, BAIT and GDPR into living processes.
ISMS
Based on ISO 27001 and BSI IT-Grundschutz.
BCM & emergencies
ISO 22301 and BSI 200-4.
Technical depth
Network architecture, infrastructure, hardening.
QUALIFICATIONS
Certified before I certify
CISA
ISACA
CISM
ISACA
CEH
EC-Council
CIPP/E
IAPP
T.I.S.P.
TeleTrusT
ITIL 4 MP
Managing Professional
Lead Auditor & Implementer
PROFILE AS PDF
Download my profile
Career, projects, certifications and focus areas at a glance (document in German). After entering your email address the download starts immediately; you also receive the link by email.
For audit firms there is a compact version focusing on IT audit, IDW standards and audit experience.
PERSONAL
Down to earth and curious
My family and our two dogs are important to me. And I love cooking: just as in security management, good ingredients, care and the right timing determine the result.
My vision: information security as an architecture of trust that protects people and keeps organisations able to act.