IT Security Manager (GRC)

The candidate has more than 18 years of experience in IT audit, governance risk and compliance, cybersecurity and cloud security. He led global GRC programs, developed IT governance frameworks and ensured compliance across regulated industries including finance, healthcare, automotive and critical infrastructure. His expertise spans ISO standards, BSI Grundschutz, KRITIS, TISAX, DORA, GDPR, HIPAA and multiple regulatory frameworks. He has strong technical depth in cloud security, ITSM, data governance, vulnerability management and incident response. He worked with major international organizations and delivered mature audit and risk management programs with strategic impact.

Developed and implemented a comprehensive IT GRC framework for global enterprise environments. Source: Developed and implemented a comprehensive IT GRC framework Performed risk assessments for data center and cloud platforms including Azure and AWS. Ensured compliance with GDPR DORA MaRisk ISO 27001 and BSI Grundschutz. Coordinated internal and external IT audits ensuring audit readiness and process maturity. Reduced organizational risk exposure through advanced security controls and monitoring. Led global ITSM and cybersecurity compliance programs in regulated industries. Implemented automotive cybersecurity requirements including ISO 21434 and TISAX. Led vulnerability management SAM and ITSM disciplines. Improved audit reporting accuracy through evidence management automation. Advised product teams on regulatory requirements across the product lifecycle.