VisualCV

• Working as a freelance consultant on General Management projects and programs. The focus is mostly on corporate governance and compliance projects using my strong skills in the organisational and business process areas.  Responsible for project management offices on a variety of projects. Involved in the development and provision of the clients’ in house training on business process topics with the objective to raise efficiency amongst all relevant staff. 

Programme manager for a Biotechnology company on their business process control and compliance project throughout the Eurasian region. Objective of this project is the design and implementation of sound business processes and control measures throughout the regional country offices. Development and implementation of a scorecard model for key performance indicators as well as applicable training modules for business processes. Facilitation of training modules to support business process owners in their training efforts. Initiated and drafted a training system for further use by the HR function to monitor training needs, define responsibilities and track training requirement execution. 

Development of a framework to document internal control systems in a life insurance company, which will be linked in with the companies risk management system (MaRisk project). Exemplary use of the framework on behalf of the customer for one business process, providing the customer with in depth documentation on existing processes, relating controls and process inherent risks as well as recommendation to reduce the risks where appropriate and in line with the business strategy. 

• Vice President Corporate Security O2 Germany, covering all strategic aspects of security including Disaster Recovery, IT Security, Physical Security, Network and Mobile Security, Health and Safety, Business Continuity Management and Lawful Intercept. The area of Lawful Intercept operations was managed by my team
  
• Data Privacy Officer for O2 Germany and as such main link to the Data Privacy authorities within Germany
  
• Security Officer as required by the German Telecommunications Act and the Chief Security Officer according to SOX
  
• Ensuring redundancy of critical systems
  
• Implementation of  a crisis management function and a Business Continuity Management Programme within the company
  
• Improvement of assessment results from external insurance auditors (operational risk reviews) in all relevant areas and thus keeping insurance fees stable for the company. 
  
• Implementation of a security risk management system, using actual financials to assess risks
  
• Establishment of a risk acceptance process to ensure progress of projects within critical timelines with clearly defined deadlines to mitigate the security risks.
  
• Development of a security policy set based on ISO 17799 (27001)
  
• Management of company crisis, avoiding penalties from the authorities and establishment of formal communication channels with relevant authorities thus avoiding any regulatory penalties in the security area
  
• Introduction of an automated system for legal intercept measures and thus significantly reducing the increase of headcount while authority measures were increasing
  
• Data Privacy Trainer - focussing on Call Centre employees 
  
• Conference speaker on international conferences
  
• Development of a security strategy in line with the company strategy to outline security into the future
  
• Management of the unit including cost centre responsibility and member of the top 50 senior management team
  
• Growing the business unit from 8 to 32 staff with 4 departments in the unit and a significant extension of responsibility
  
• Significantly improving the relationships of the security business unit with relevant other business units resulting in the involvement of the security function in core projects, thus reducing the risks to the company

• Security Director at Interxion, a European Collocation Company. The areas of responsibility included physical security for all European Data Centers, Information Security for the internal as well as for the management network, security responsibility for product development, especially in the area of managed services. 
  
• Achieved suntone certification for Interxion together with a dedicated team within a few months 
  
• Development of a security policy in line with ISO 17999 (27001) binding for all daughter companiesthroughout Europe.  
  

Senior Manager, Regional Information Security Coach, International Headquarters, Amsterdam, The Netherlands (1999 - 2001)

• Secondment from KPMG Austria to KPMG International Head Quarters, Amsterdam as Regional Information Security Coach for Europe, Middle East and Africa with responsibility for the implementation of the KPMG security standards within the region (main security contact for 86 countries within the region). Position held was member of the office of the Global Chief Information Officer.

• Member of the core team defining the global information security management system policy and standards for deployment throughout the company
• Project Coach within the region, actively working in over 40 countries around the globe
• Trainer for security awareness programs and business process control related topics

Manager Information Risk Management, Vienna, Austria (1998 - 1999)

• Manager at KPMG Consulting, Vienna in the Information Risk Management Department consulting to clients on information security management topics, either as part of financial audits or as standalone projects, like e.g. the Y2K topic or the Euro induction in Austria
• Trainer for business process control management systems and involved in the roll out of the KPMG methodology relating to this topic
• Preparation of the company for passing the security section of the SuntoneTM certification

Manager Information Risk Management, Cape Town/ Johannesburg, South Africa (1995 – 1998)

• Information risk management projects involved computer assisted audit techniques, process control design during the set up of major companies, process definition during e.g. SAP/R3 implementations, IT audits, definition of security management systems. Mayor focus was in the area of business process control and facilitation between IT and business requirements.
• First leadership role and second in charge in the Information Risk Management assignment in Cape Town
• Trainer for business process control management systems.

Audit Assistant, Munich, Germany (1992 – 1995)

• Audits of financial statements and special (fraud) investigation assignments