IT Security, Compliance and DevSecOps – On-Premise & in the Cloud
I support you in securing and designing your IT infrastructure and software architectures.
Over the past 10 years, I have built comprehensive expertise and deep project experience at the intersection of modern software architecture, cloud infrastructure, and regulatory IT security:
Holistic protection of IT landscapes and implementation of regulatory frameworks according to ISO 27001, ISO 27002, German BSI Standards (200-1 & 200-2), and PCI-DSS.
Secure and legally compliant integration of Artificial Intelligence into business processes in accordance with the European AI Act (KI-VO).
Automated security testing and compliance checks embedded directly into your CI/CD pipelines – enabling fast, secure releases across cloud and on-premise environments.
Design of resilient software and infrastructure architectures, IT Service Management (ITSM), and securing complex ETL pipelines and Big Data platforms.
Establishment, continuous improvement, and audit preparation of Information Security Management Systems (ISMS) in line with ISO/IEC 27001, ISO 27002, and BSI Standards 200-1 and 200-2.
Risk classification, governance frameworks, and technical hardening of AI systems and machine learning pipelines in compliance with the European AI Regulation.
Advisory and technical guidance on implementing the Payment Card Industry Data Security Standard (PCI-DSS) to safeguard sensitive payment and cardholder data.
Supporting SaaS developments and cloud migrations since 2007. Secure design of hybrid and cloud-native infrastructures from initial concept to production operations.
Shift-Left Security: Integrating automated vulnerability scans, container security, and Infrastructure-as-Code (IaC) checks into modern software delivery workflows.
Architectural consulting for high-availability systems, structured IT Service Management processes, and secure data flows in ETL pipelines and Big Data platforms.
After completing my engineering degree in Telecommunications Engineering (University of Applied Sciences Kiel) and postgraduate studies in Computer Science (Saarland University), I initially worked as a software developer (embedded, frontend, and backend) and later as a Requirements Engineer and Business Analyst, before shifting my focus to SaaS and cloud development and migration in 2007.
Since 2016, alongside project management responsibilities, I have focused heavily on the technical and regulatory aspects of IT—particularly Security and Compliance. From then until today, I have worked extensively with leading security standards and compliance frameworks (ISO 27001, ISO 27002, BSI Standards 200-1 & 200-2, PCI-DSS, and the EU AI Act).
"10 years of my professional experience I gained working both as a freelancer and permanent employee in the Airline Industry. I support you in securing and designing your IT infrastructure and software architectures."
Most of my project experience has been gained in critical and highly regulated industries:
ISO/IEC 27001 • ISO/IEC 27002 • BSI IT-Grundschutz (200-1 / 200-2) • EU AI Act (KI-VO) • PCI-DSS
Are you looking for support in Cybersecurity, Cloud Architecture, DevSecOps, or AI Compliance? Send me a message directly or give me a call.
EU AI Act (KI-VO): Secure and compliant adoption of AI systems in enterprise environments.
DevSecOps & Cloud: Automated security checks in modern CI/CD and cloud architectures.
Available for on-site and remote consulting mandates. Feel free to reach out for a non-binding initial consultation.