27.06.2026 aktualisiert
100 % verfügbar
EU AI Act & AI Governance Expert | AI Security & Audit | Risk, Controls & Compliance
Stuttgart, Deutschland
Stuttgart +250 km
Dr. rer. pol. (PhD), Business Informatics, University of FreiburgÜber mich
Mein Fokus liegt auf AI GRC und AI Security und der praktischen Umsetzbarkeit regulatorischer Anforderungen, allen voran der EU AI Act. Mich treibt die Frage, wie Unternehmen belastbar zeigen können, dass ihre KI verantwortungsvoll betrieben wird — ohne in Bürokratie zu ersticken.
Skills
AI AgentsComplianceInformation Governance
AI Regulation & Governance
Expertise in EU AI Act risk classification and high-risk obligations, AI management systems per ISO/IEC 42001, AI governance frameworks, Cyber Resilience Act requirements, and GDPR/data privacy. Translation of regulatory requirements into operational governance within a Three Lines of Defense model.
AI Security & Audit
Proficiency in AI security management (AAISM) and AI audit & assurance (AAIA), including evidence-based audit trails, crosswalk coverage across EU AI Act, ISO 42001, GDPR, and sector frameworks. One of the first global holders of both inaugural ISACA advanced AI credentials.
Risk, Controls & Compliance
Deep knowledge of Three Lines of Defense (3LoD), second-line governance, internal control systems (ICS/IDW PS 980), COSO ERM and IIA standards, operational and IT risk, AML (KWG, GwG, FATF), and BaFin MaRisk & BAIT.
IT-Security Governance
Application of ISO/IEC 27001, BSI IT-Grundschutz, NIST CSF, and ITIL service management frameworks, as well as business continuity management across regulated financial institutions.
Programme & Stakeholder Management
Regulatory programme coordination, milestone planning, implementation-risk tracking, committee and board reporting, and cross-workstream synchronisation in large-scale transformation programmes.
Anti-Money Laundering (AML)
AML lead experience covering KWG, GwG, FATF, MROS reporting, and reporting duties towards BaFin and FIU, including internal audit per IDW PS 980/PS 860 and CAMS certification.
Financial Reporting & CFO Functions
Full responsibility for financial reporting under Swiss Code of Obligations, Dutch and Moroccan GAAP, treasury, IT-portfolio management, tax planning, transfer pricing, and cash management in holding and group structures.
Transaction Banking & Payments
Senior leadership in transaction banking, global payments processing, IT-production, controlling, operational-risk management, and business-continuity management, including open banking and PSD2/EBA guidelines.
M&A Due Diligence
Leadership of M&A due-diligence projects (financial and IT) for bank acquisitions, as well as cost-reduction programmes with cumulative savings exceeding 50 million euros.
Expertise in EU AI Act risk classification and high-risk obligations, AI management systems per ISO/IEC 42001, AI governance frameworks, Cyber Resilience Act requirements, and GDPR/data privacy. Translation of regulatory requirements into operational governance within a Three Lines of Defense model.
AI Security & Audit
Proficiency in AI security management (AAISM) and AI audit & assurance (AAIA), including evidence-based audit trails, crosswalk coverage across EU AI Act, ISO 42001, GDPR, and sector frameworks. One of the first global holders of both inaugural ISACA advanced AI credentials.
Risk, Controls & Compliance
Deep knowledge of Three Lines of Defense (3LoD), second-line governance, internal control systems (ICS/IDW PS 980), COSO ERM and IIA standards, operational and IT risk, AML (KWG, GwG, FATF), and BaFin MaRisk & BAIT.
IT-Security Governance
Application of ISO/IEC 27001, BSI IT-Grundschutz, NIST CSF, and ITIL service management frameworks, as well as business continuity management across regulated financial institutions.
Programme & Stakeholder Management
Regulatory programme coordination, milestone planning, implementation-risk tracking, committee and board reporting, and cross-workstream synchronisation in large-scale transformation programmes.
Anti-Money Laundering (AML)
AML lead experience covering KWG, GwG, FATF, MROS reporting, and reporting duties towards BaFin and FIU, including internal audit per IDW PS 980/PS 860 and CAMS certification.
Financial Reporting & CFO Functions
Full responsibility for financial reporting under Swiss Code of Obligations, Dutch and Moroccan GAAP, treasury, IT-portfolio management, tax planning, transfer pricing, and cash management in holding and group structures.
Transaction Banking & Payments
Senior leadership in transaction banking, global payments processing, IT-production, controlling, operational-risk management, and business-continuity management, including open banking and PSD2/EBA guidelines.
M&A Due Diligence
Leadership of M&A due-diligence projects (financial and IT) for bank acquisitions, as well as cost-reduction programmes with cumulative savings exceeding 50 million euros.
Erfahrung
Berufserfahrung0 - 5 Jahre
Freelancer seit2023
Sprachen
DeutschMutterspracheEnglischverhandlungssicherThaiGrundkenntnisse
Projekthistorie
Board oversight of the AEGIRA AI Trust Platform for AI trust and AI governance in the European mid-market, aligned to the EU AI Act, GDPR, ISO/IEC 42001 and IDW assurance standards. Governing the compliance management system and director-liability gate (§ 43 GmbHG), driving evidence-based audit trails with cryptographically signed evidence persistence, and translating the EU AI Act enforcement timeline into platform and governance roadmaps.
Built and maintained the risk and compliance framework including the internal control system (ICS) for financial and IT risks. Led anti-money-laundering programme (KWG, GwG) with reporting duties towards BaFin and FIU, and internal audit per IDW PS 980/PS 860. Delivered regular risk reporting applying COSO ERM, IIA standards, BaFin MaRisk analogies and ISO 27001 IT controls.
AML lead for banking and financial-services clients; built information-security governance and an information-security risk-management programme. Ran a client-education programme and a data-privacy programme (GDPR readiness 2017/2018). Applied ISO 27001, NIST CSF, BaFin BAIT and FATF AML recommendations.