24.06.2026 aktualisiert
Premiumkunde
nicht verfügbarinfo: nicht verfügbar bis 01.01.2027
Information Security Management Consultant
München, Deutschland
Weltweit
Dipl.-Ing. Elektrotechnik (Uni Zagreb, Kroatien)Skills
Agile MethodologieAuditmanagementMicrosoft AzureTelekommunikationCloud-SicherheitInformationssicherheitKryptographieIdentitätsmanagementInformation GovernanceIt-RisikomanagementInformationssicherheitsmanagementISO / IEC 27001MaterialwirtschaftPersonal Information Protection And Electronic Documents ActSystementwicklungs-Lebenszyklus
Information Security Governance
Information security management (ISMS) – ISO/IEC 27001
Information security risk management – ISO/IEC 27005
DORA, MArisk, BAIT
KRITIS
NIS2
Cyber Resilience Act
Vendor Security Management
IT risk management
Information security processes
Cloud security (GCP, Azure, M365)
Security architecture
Secure SDLC in agile environment
Software Bill of Materials
Identity and Access management
Network and systems security solutions and baselines
PKI and Cryptography
Audit management
General Data Protection Regulation (GDPR)
Business Continuity Management - BCM
OT Security
ICS Security
Vulnerability management
Information security management (ISMS) – ISO/IEC 27001
Information security risk management – ISO/IEC 27005
DORA, MArisk, BAIT
KRITIS
NIS2
Cyber Resilience Act
Vendor Security Management
IT risk management
Information security processes
Cloud security (GCP, Azure, M365)
Security architecture
Secure SDLC in agile environment
Software Bill of Materials
Identity and Access management
Network and systems security solutions and baselines
PKI and Cryptography
Audit management
General Data Protection Regulation (GDPR)
Business Continuity Management - BCM
OT Security
ICS Security
Vulnerability management
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2004
Sprachen
DeutschverhandlungssicherEnglischverhandlungssicherKroatischMuttersprache
Projekthistorie
Information Security Officer at emnos, a leading retail insights company, providing analytical services and big data software tools worldwide
- Responsible for information security, risk and compliance
- Responsible for maintaining ISO/IEC 27001 aligned Information Security Management System (ISMS)
- Responsible for GDPR roll-out - data inventory, processes, documentation
- Responsible for big data analytics platform and client portal security
- Compliance management
- Vulnerability and threat management, software bill of material
- Secure Software Development Lifecycle (SDLC)
- Vendor risk management
- Responsible for compliance with clients' security requirements during contract negotiation and project execution
- Managing external IT security audits
- Business continuity management
- Member of big data analytics platform migration project team. Migration from hosted platform to Google Cloud native services. Responsible for security and compliance, cloud environment security controls and security relevant aspects of cloud architecture. Auditing the solution as part of the acceptance.
- Member of carve-out project team, migrating workplaces and business applications to Azure cloud / Microsoft365 in scope of carving-out. Responsible for security and compliance.
- Responsible for security of client data processing
- Responsible for emnos' ISO/IEC 27001 aligned ISMS
- Vulnerability and threat management
- Vendor security management
- Responsible for compliance with clients' security requirements during contract negotiation and project execution
- Support in all security related topics to IT operations, software development and testing, HR and client teams.
- Defining security controls for data analytics platform and customer portal
- Managing external IT security audits