14.10.2025 aktualisiert
100 % verfügbar
AI Governance & Transformation Advisor | BPM/GRC Architect | SAP Signavio · LeanIX · WalkMe | PhD
Frankfurt, Schweiz
Weltweit
PhD: Economics & Management - Operationalize AI GovernanceÜber mich
I help executives turn regulation and complexity into competitive advantage. I design compliance-embedded operating models—connecting AI Governance, BPM, Enterprise Architecture, and Digital Adoption—so organizations can move faster without breaking the rules. PhD in AI Governance
Skills
SignavioProcess Analysis & DesignProcess Intelligence IKSSOX TestingCorporate GovernanceAI GovernanceAuditEU AI ActGRC
About me
What I Do
Toolchain & Skills
Industries
Example Engagements (typical)
Why Me
Deliverables You Get
Credentials
Engagement & Rates
I help executives turn regulation and complexity into competitive advantage. I design compliance-embedded operating models—connecting AI Governance, BPM, Enterprise Architecture, and Digital Adoption—so organizations can move faster without breaking the rules. PhD in AI Governance (operationalization focus), MBA in Digital Engineering, and a track record of winning and delivering cross-LOB solutions across DACH, CEE, Middle East & Africa.
AI Governance & EU AI Act Readiness: risk classification, policies, controls library, Model/Use-Case Register, audit trails.
BPM + GRC Integration: process mining–driven controls, control owners/RACI, evidence automation, audit readiness.
Enterprise Architecture for Change: capability maps, target architectures, and transformation roadmaps (LeanIX/SAP).
Digital Adoption & Change: WalkMe playbooks, in-app guidance, KPI trees, and “time-to-value” acceleration.
Boards & Executives: strategy offsites, decision frameworks, and narrative decks that align ops, risk, and finance.
Audit, Cyber & Forensics Alignment: control testing design, continuous monitoring concepts, incident→process feedback.
SAP Signavio (BPM/Mining/Collab), LeanIX (EA), WalkMe (DAP), SAP GRC; ServiceNow GRC, Power BI, Python, Notion, Miro, Figma.
Methods: COSO/ISO 31000, ISO 27001, NIST, CRQ, process mining, operating-model design, KPI/OKR, value engineering.
Aerospace & Defense · Public Sector · Financial Services · Healthcare & Life Sciences · Manufacturing · Energy/Utilities.
AI Act Fast-Track (2–3 weeks): gap assessment, risk register, policies & controls, implementation roadmap.
GRC × BPM Audit (3–4 weeks): map top value streams, embed controls, evidence model, audit playbook.
Transformation Playbook (4–6 weeks): EA capability map, process blueprint, adoption plan, ROI & CLV model.
Executive Strategy Day: 1-day workshop + decision memo + board-level narrative deck.
PhD in AI Governance → practical controls that auditors accept and teams can run.
Hands-on with the SAP toolchain (Signavio/LeanIX/WalkMe/SAP GRC) → faster time-to-value.
Operator mindset: deliverables you can ship next week, not just slides.
Global, regulated contexts: comfortable with CxO, legal, cyber, and plant-floor stakeholders.
Control & Policy Suite (docs + Notion)
AI/Model & Use-Case Register + risk classifications
Process/Control Maps (BPMN) + Mining findings
EA Capability Map + Heatmap
Adoption Flows (WalkMe)
Executive Deck with KPIs, roadmap, and budget ask
PhD, AI Governance (BPM operationalization)
MBA, Digital Engineering
Former professional athlete (discipline, team leadership)
Languages: English, German (working), basic Portuguese (improving)
Location: Zurich/DE (CET) · Remote-first · Travel as needed
Available for sprints, retainers, and board-level advisories. Day rate on request; fixed-fee packages available.
Sprachen
DeutschMutterspracheEnglischMutterspracheItalienischGrundkenntnissePortugiesischGrundkenntnisse
Projekthistorie
Build an integrated Business Process Management (BPM) × Governance, Risk & Compliance (GRC) operating system that is auditor-ready, aligns with BaFin/MaRisk & BAIT, and prepares the bank for external certification and recurring audits.
ScopeOperating model & governance: Defined BPM/GRC roles, RACI, and decision rights; established a Controls & Policies Council.
Process architecture: Mapped priority value streams (Client Onboarding/KYC, Payments, Lending, Treasury, IT & Security) from L0–L4 with clear inputs/outputs and KPIs.
Control library & risk taxonomy: Standardized risks, controls, and tests; mapped to MaRisk, BAIT, ISO 27001control families, GDPR, AML/KYC.
Evidence & audit model: One evidence catalogue; sampling rules; end-to-end audit-trail and issue/CAPA workflow
Dashboards & metrics: Compliance KPIs (coverage, test pass rate), process health (SLA, throughput), issue aging, and remediation velocity.
Change & enablement: Playbooks, training, and “process owner” coaching; runbooks for quarterly control testing.
What I DeliveredProcess & Control Repository (single source of truth) with L4 procedures and work instructions.
Policy lifecycle (draft→review→approve→publish) with versioning and read-&-understand tracking.
Certification/Audit Dossier (SoA, risk assessment, control matrix, evidence index).
Data & Integration spec between Signavio and the GRC platform for control attestations.
Executive pack: target architecture, 12-month roadmap, budget, KPIs.