Expertise in information security and data protection paired with a technical background as software developer. Specialised in healthcare and life science industry. Open to other industries. Information Security - Consulting for the establishment, operation, and enhancement of IT infrastructures - Design and implementation of security concepts according to ISO 27001, BSI IT Grundschutz and NIS2 - Design and implementation of Information Security Management System (ISMS) - Design and implementation of Risk Management Information System (RMIS) - Technical and non-technical risk analyses (Threat Modeling) - Implementation of secure software architectures (on-premises, hybrid, cloud) - Implementation of secure software development processes - Planning, coordinating, and conducting internal and external audits - Planning and execution of training concepts in the field of information security - External Information Security Officer (ISO)Data Protection - Consulting in all areas of data protection (GDPR, BDSG, TTDSG, PDSG) - Design and implementation of Data Protection Management System (DPMS) - Consultation for the implementation of technical and non-technical data protection requirements - Data protection documentation (Data Protection Impact Assessment, Records of Processing Activities, Privacy Policy, Consent) - Planning and execution of training concepts in the field of data protection - Planning and conducting audits to ensure compliance with data protection regulations - Review of contracts, projects, and complaints related to data protection - External Data Protection Officer (DPO)

Assistance and support of the global CISO for data protection topics:- Education and training on GDPR, BDSG and other privacy laws- Cross-company GDPR gap-analysis- Cross-company data transfer- Data protection impact assessments (DPIAs)- Risk assessments- Internal audits

Maintenance and improvement of the ISMS according to ISO 27001 based on BSI IT-Grundschutz (Standard 100-x and 200-x).

Data protection compliance assessment (GDPR, BDSG, DDG) of a B2B SaaS cloud-service and development and implantation of identified gaps. Technical security risk assessment (Threat modeling) of of a B2B SaaS cloud-service product.

Assessment of security and data protection compliance according to the Health Insurance Portability and Accountability Act (HIPAA).

Data4Life is non-profit organisation offering digital solution for healthcare. The Compliance department comprises the Information Security department and the Data Protection department. Both departments under one umbrella ensures the efficient handling of of the full spectrum of requirements, i.e. from legal regulation to technical implementation. As the Director of the Compliance department responsible for: - Leading the information security and data protection teams - Central contact person for all information security, data protection and compliance topics - Monitoring all operational processes and procedures to ensure compliance with legal regulation, company policies and best practices. - Revenue protection by ensuring information flow between all departments of the company, e.g. communication of risks - Constant monitoring, evaluation and communication of changes in laws, regulations and requirements - Consultancy in contract negotiations with partners - Planning and management of department budget - Professional development of team members

Responsible for all information security manners: - Ownership of all ISO 27001 based on IT-Grundschutz certification activities - Leading the conceptual improvement of the ISMS - Information security risk management - Continuous coordination with company-wide stakeholders e.g. management, team leads, data protection, certification body - Development and enforcement of company-wide security policies - Conduction of internal audits and coordination of external audits - Planning and execution of information security awareness campaigns - Identification, evaluation and handling of security incidents

Design, implementation and documentation of incident response, forensic analysis and recovery after serious compromise and disaster recovery according to ISO 27001 based on BSI IT-Grundschutz.Maintenance and improvement of the ISMS according to ISO 27001 based on BSI IT-Grundschutz (Strukturanalyse, Schutzbedarfsfeststellung, Modellierung, IT-Grundschutz Check, Risikoanalyse).Evaluation and implementation of NIS2 requirements.

Responsible for all data protection related manners: - Implementation and maintenance of the DPMS (ROPA, DPIA, TIA, DP concepts, consents & privacy policies) - Company-wide consultancy in data protection topics, e.g. for management, teams, projects - Company-wide training and education in data protection - Assessment of data protection relevant laws and regulations - Internal audits - Communication with the data protection authorities - Contract negotiations with partners - Third country data transfer

Responsible for all product security manners: - Technical risk assessment (Threat modelling) - Security incident handling & forensics - Planning, implementation and maintenance of security relevant product functionality - Documentation

Responsible for all data protection manners: - Consultancy of technical teams for the planning, implementation and maintenance of data protection requirements - Data protection incident handling & forensics - Documentation

Dual function in SAP Health for data security, privacy, and compliance. Responsible for all projects of the Potsdam located branch of SAP Health. Part of a cross-location (Germany, USA, India, China) team working on international healthcare compliance topics (GDPR, HIPAA, etc.).

Project-based software development with a focus on data security & privacy in SAP Health.

Project-based software development in areas of healthcare, life sciences, and research at SAP Healthcare & Life Sciences.

Development of analytic software for ion mobility spectrometers in the open source software project OpenMS (www.openms.de).

Consulting for integration, adaption and maintenance of a software module for searching chemical patterns in molecules. The software module was adapted and optimized for different operation systems.

Scientific research in the field of cheminformatics. Software integration into a large code basis (C/C++) and maintenance of the current software as well as lecturing and supervison of student theses were my responsibilities.

Implementation (C++) of a linear program to optimize penalty terms of a genome alignment algorithm.

Title: ”Searching for non-coding RNA secondary structure elements in large genomes”. A method for searching ncRNA secondary structure elements was developed and implemented in C++ and later integrated into my M.Sc. thesis.

HOBIT project (http://hobit.sourceforge.net)

Group Alignment & Threading on Massively Parallel Computers

Group Alignment & Threading on Massively Parallel Computers