Senior GRC and Information Security Manager

Senior IT Security Manager with sixteen years of experience across global regulated environments. Strong expertise in governance, risk and compliance, including ISO 27001 and 27701, TISAX, GDPR and NIS2. Proven capabilities in SIEM governance, incident response, vulnerability and threat management, cloud security and identity management. Skilled in designing security policies, technical security concepts and IT risk analyses. Experienced in cross functional collaboration with audit, legal and executive stakeholders. Available from August 2026.

Led security and GRC programs across more than one hundred accounts in multiple regulated markets. Implemented ISO 27001 and 27701 control frameworks and ISMS programs to improve compliance maturity. Executed more than two hundred control assessments annually ensuring audit readiness. Governed SIEM monitoring programs including log analysis, threat detection and escalation coordination. Led the full vulnerability and threat management lifecycle from identification to remediation. Developed security policies, technical security concepts and IT risk analyses. Directed incident response processes including root cause analysis and stakeholder communication. Managed cloud security governance with a focus on identity and access management.