I am an IAM architect, interim manager, and senior consultant with many years of professional experience, including over 25 years of international project experience in identity & access management, authorization management, information security, and data protection.

My focus is on the technical design, optimization, and implementation of governance, control, and process structures in regulated environments, particularly in the banking sector.

I support clients in

• realigning IAM and authorisation processes from a technical perspective and making them audit-ready
• develop and refine role and authorisation concepts,
• integrate privileged and technical authorisations into the governance framework in a controlled manner.
• translate regulatory requirements from DORA and related ISO 27001 requirements into viable technical concepts, and
• Implement data protection and security requirements effectively at both organizational and operational levels.

My experience includes, among other things, assignments in the following areas:

• bank-wide authorisation management in accordance with DORA
• IAM processes and role management
• interim management of authorisation management
• ISO 27001-related audit and governance issues
• data protection organization and operational data protection responsibility.

My particular strength lies in the combination of

• technical governance
• regulatory understanding
• process analysis
• stakeholder management and
•  the practical structuring of complex projects.