Experience/Requirements

Security experience: 20 years in security business, started with technical security projects (security solutions in production environments). Last 10 years added process management to security solutions (Security management, Incident management, Availability management, Security monitoring and event evaluation for networks, systems and applications).

I understand the technical and operational role for ISMS (Information Security Management System) very tight connected, incl. many relations to ITSM (IT Service Management). I actively participated by development of international standard ISO/IEC 27013 „Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000-1“ first time published 2012 with second edition in 2015.

To follow latest technical and operational information I take regularly part by work groups activities in ISO structures, specifically in JTC1 SC27 (Information Security) and JTC1 SC38 (Cloud Computing).

I use my wide and deep technical experiences from provided projects in my process work. I have experience to create and implement policy, procedures and operational instructions in to production environment for all aspects of information security and also for IT service management. I'm able to provide also operational activities of security manager or security officer including collecting, documentation, evaluation of events and make decision solutions to take appropriate activities for Information security management. These abilities give me also competencies to provide auditing for information security.

Based on my technical, operational and processional experiences I'm providing also lecturing and teaching of ISMS by individual consultations or classroom trainings.

Character/Professionalism

My strong analytical and logical thinking skills were developed during my study of Technical Cybernetics on TH Ilmenau (today Technische Universität Ilmenau). It was very exiting study. All these my professional quality have been fortified by many challenging projects including financial sector.

My work in many international security projects and also in ISO work groups structure demands very good level of verbal and communication English skills. But I use very glad some advices from native English speakers to extend my language skills.

Certifications

I'm owner of CISA and CRISC certificates. I´m certified CISA for more as 10 years. I provide regularly all requested activities to refresh my certificates.

I'm proudly planning to finalize CISSP and CEH certificates this year (2016). I'm now preparing for exams and my skills and experiences look very helpful to reach my goal.

I completed certification for PRINCE2 to be able to manage all my project according requirements.