12.11.2025 aktualisiert
100 % verfügbar
ICS/OT Cybersecurity, Risk Management
Frankfurt, Deutschland
Deutschland
Master in Computer ScienceÜber mich
18+ years of experience leading cybersecurity programs in industrial and critical infrastructure environments. Proven expertise in ICS/OT security, risk management, compliance, and incident response. Skilled in aligning cybersecurity strategy with business objectives, managing cross-functional teams
Skills
Cyber securityIT/OT CybersecurityISO 2700x-FamilieISO 21434IT Risk ManagementVulnerability-ManagementGRC Governance
Summary
Results-driven Cybersecurity Manager with 18+ years of experience leading cybersecurity programs in
industrial and critical infrastructure environments. Proven expertise in ICS/OT security, risk
management, compliance, and incident response. Skilled in aligning cybersecurity strategy with
business objectives, managing cross-functional teams, and implementing security frameworks (ISA/IEC
62443, NIST, ISO 27001)
Core Competencies
• OT/ICS Security Architecture & Strategy, Purdue Enterprise Reference Architecture.
• Risk Assessment & Vulnerability Management,
• Regulatory Compliance (IEC 62443, NIST, ISO 27000 series, TISAX, GDPR, EU CRA)
• Security Operations & Incident Responses, Team leadership.
• Network Segmentation & Zero Trust for IT/OT
• Industrial Protocols (Modbus, DNP3, OPC UA, Profibus, Profinet)
• PLCs, HMIs, SCADA, DCS systems, and common protocols and their operational risks.
• SIEM, IDS/IPS, Firewalls, Endpoint Protections, Network Security, Data Security.
• Vendor, Stakeholder Engagements & Third-Party Risk Management
• Business Continuity & Disaster Recovery
Sprachen
DeutschGrundkenntnisseEnglischMuttersprache
Projekthistorie
Oversee multiple OT cybersecurity projects across various global plant locations.
• Lead comprehensive assessments of ICS/OT systems (PLC, HMI, SCADA, DCS), networks,
and assets to identify and mitigate potential security risks by using ISA/IEC 62443, NIST SP
800-82, NIST CSF 2.0.
• Collaborate with internal and external stakeholders to integrate security throughout all product
phases, connecting the centralized IT organization with business units and production plants.
• Successfully implemented IT/OT network segmentation/Risk Management projects to reduce
the attack surface of our OT network and developed an OT cybersecurity strategy that
decreased cyber risk by utilizing ISA/IEC 62443 and NIST Standards.
• Conduct risk management, perform vulnerability assessments, and offer recommendations for
mitigating IT and OT cybersecurity risks.
• Establish standards and regulations, baseline controls, and security protocols for IT and OT
infrastructures, ensuring compliance with ISA/IEC 62443, ISO/SAE 21434, ISO 27000 series,
and NIST Frameworks.
• Provide security training, raise awareness, and promote a security-first culture.
• Knowledge of the Perdue Enterprise Reference Architecture (PERA)
• Lead comprehensive assessments of ICS/OT systems (PLC, HMI, SCADA, DCS), networks,
and assets to identify and mitigate potential security risks by using ISA/IEC 62443, NIST SP
800-82, NIST CSF 2.0.
• Collaborate with internal and external stakeholders to integrate security throughout all product
phases, connecting the centralized IT organization with business units and production plants.
• Successfully implemented IT/OT network segmentation/Risk Management projects to reduce
the attack surface of our OT network and developed an OT cybersecurity strategy that
decreased cyber risk by utilizing ISA/IEC 62443 and NIST Standards.
• Conduct risk management, perform vulnerability assessments, and offer recommendations for
mitigating IT and OT cybersecurity risks.
• Establish standards and regulations, baseline controls, and security protocols for IT and OT
infrastructures, ensuring compliance with ISA/IEC 62443, ISO/SAE 21434, ISO 27000 series,
and NIST Frameworks.
• Provide security training, raise awareness, and promote a security-first culture.
• Knowledge of the Perdue Enterprise Reference Architecture (PERA)
- Responsible for creating tools and systems to detect and prevent vulnerabilities and weaknesses.
- Created and managed cybersecurity standards, baseline, and security procedures for IT and OT (Operational Technology) infrastructures.
- Develop the schedule, budget, and resource planning for the project.
- Communicate progress reports to senior management and project stakeholders.
- Working closely with Cybersecurity Engineers, Product Managers, and QA teams.
TTT Moneycorp Ltd. - Commercial Foreign Exchange (CFX)
A London based leading Money transfer and foreign exchange Company offering foreign exchange
services to individual and corporate customers. It operates in a number of countries and also
provides bulk foreign notes and travel money services via a number of travel companies and airlines.
Technologies & Tools
Visual studio 2015, .NET, C#, ASP.NET, Web API, MVC, Restful services, AngularJs, JavaScript,
Require JS,
Scrum Agile Development, TFS, Perforce, MS SQL Server, MongoDB.
Contribution
* Define the architecture of the application and design the framework for the application in
AngularJS 1.2 and .NET 4.6
* Design Restful services using ASP.NET Web APIs.
* Prepared technical design documents for the system
* Identified areas for growth and improvement and applied performance engineering on
applications.
* Coding and unit testing of the system
* Code mantainece and enhancement of the system
* Mentor Technical team members.
A London based leading Money transfer and foreign exchange Company offering foreign exchange
services to individual and corporate customers. It operates in a number of countries and also
provides bulk foreign notes and travel money services via a number of travel companies and airlines.
Technologies & Tools
Visual studio 2015, .NET, C#, ASP.NET, Web API, MVC, Restful services, AngularJs, JavaScript,
Require JS,
Scrum Agile Development, TFS, Perforce, MS SQL Server, MongoDB.
Contribution
* Define the architecture of the application and design the framework for the application in
AngularJS 1.2 and .NET 4.6
* Design Restful services using ASP.NET Web APIs.
* Prepared technical design documents for the system
* Identified areas for growth and improvement and applied performance engineering on
applications.
* Coding and unit testing of the system
* Code mantainece and enhancement of the system
* Mentor Technical team members.