Information Security Officer at emnos, a leading retail insights company, providing analytical services and big data software tools worldwide

• Responsible for information security, risk and compliance
• Responsible for maintaining ISO/IEC 27001 aligned Information Security Management System (ISMS)
• Responsible for big data analytics platform and client portal security
• Vulnerability and threat management, software bill of material
• Secure Software Development Lifecycle (SDLC)
• Vendor risk management
• Business continuity management
• Managing external IT security audits
• Compliance management
• Responsible for GDPR roll-out ? data inventory, processes, documentation
• Responsible for compliance with clients? security requirements during contract negotiation and project execution
• Member of big data analytics platform migration project team. Migration from hosted platform to Google Cloud native services. Responsible for security and compliance, cloud environment security controls and security relevant aspects of cloud architecture. Auditing the solution as part of the acceptance.
• Member of carve-out project team, migrating workplaces and business applications to Azure cloud / Microsoft365 in scope of carving-out. Responsible for security and compliance.

• Responsible for security of client data processing
• Responsible for emnos? ISO/IEC 27001 aligned ISMS
• Vulnerability and threat management
• Vendor security management
• Responsible for compliance with clients? security requirements during contract negotiation and project execution
• Support in all security related topics to IT operations, software development and testing, HR and client teams.
• Defining security controls for data analytics platform and customer portal
• Managing external IT security audits

• Developing concept for integrating physical access into identity and access governance processes
• Supporting ISO 27001 process implementation
• Supporting worldwide operations of the Identity and Access Governance platform

• Designing IT risk management process based on ISO/IEC 27005
• Developing IT security risk estimation method for DTAG internal use
• Supporting international roll-out in all DTAG subsidiaries
• Project security manager in international IT and telco projects, responsible for adequate IT security and data protection controls. Advising in all security relevant design and implementation topics. Acceptance audits and approvals.

• Developing and implementing complex IT security concepts incl. risk and gap analysis, designing and implementing mitigating controls, audit and acceptance support
• Developing security concepts for Cisco based core network infrastructure components
• Developing IT security service processes
• Defining security requirements on product development in the context of ISO/IEC 27001, EU directives 95/46 EU and 2002/58 EU
• Designing secure network solutions for telecommunications operators
• Pre-sales support for IT security topics for worldwide Telco BSS projects ? security requirements analysis, developing customer specific security solutions
• Security auditing telecommunications platforms

• Developed IT security management processes based on ISO/IEC TR13335 and BS 7799
• Developed IT security services portfolio, standardised IT security policies, project documentation standards, and internal processes for service delivery
• IT security trainer ? rework and extension of Siemens SCITPP training course (security focus), SCITPP training for Siemens ICM employees worldwide
• Diverse customer specific security projects for major telecommunications customers ? risk analysis, selection of safeguards, security implementation, audit, acceptance support

• Customer specific systems integration solutions for mobile data telecommunications platforms for major telecommunications clients
• Developing effort estimation method for systems integration process
• IT network and infrastructure planning in mobile data customer projects
• Project specific IT security solutions for mobile data telecommunications platforms

• Fully responsible for IT team (5 employees)
• Responsible for IT services and support for 50 users (CAD, business applications, office applications), LAN planning and roll-out, supplier management
• Responsible for LAN planning and roll-out
• Member of the ERP-Swap steering comitee, responsibility for IT within the project
• Member of the ISO 9001 implementation team, responsible for quality in IT

• Software design and implementation - data logger for processing industry
• Design and implementation of a SCADA graphical user interface
• System design and software implementation of a ticketing system
• Embedded system design and software implementation