Josh H.

Head of Security & Privacy Engineering

Germany

About

Strategic IT and Security Executive with extensive global experience leading cybersecurity, IT operations, and enterprise risk management. Proven success in building, improving, and scaling security programs, driving cloud and application security initiatives, and aligning IT and security strategies with business goals to enhance resilience and operational efficiency. Certified in CISSP, CCSP, CISA, I combine executive leadership with hands-on technical expertise across vulnerability management, threat detection, incident response, and security operations. Adept at fostering secure, innovative environments and leading diverse, high-performing teams across international markets.

Experience

  • Head of Security & Privacy Engineering at METRO AG
    Jan 2026 - Present · 7 mos

    Own the security engineering function and target operating models across application, cloud, network & infrastructure, and data privacy, domains, translating the Information Security Strategy into capabilities delivered across covering 30+ countries, over 45 business entities, supported by 25+ security engineers. * Direct the cloud security posture management protection program across hybrid and multi-cloud environments, establishing controls to satisfy business, regulatory, and compliance requirements. * Secure the end-to-end SSDLC pipeline ensuring the integration of scanning, threat modelling, and remediation embedded in platform teams, unified vulnerability reporting, and risk-based prioritization * Own network and infrastructure security programs across the organization including baselines for endpoints, servers, networking, mobile, and IOT workloads towards zero trust patterns. * Run privacy engineering as a build function in partnership with the Data Protection Officer, converting GDPR and data protection requirements into reusable technical patterns, services, and the technical and organizational measures behind them. * Direct the AI security and enablement program, covering both securing AI systems and applying AI to security engineering work * Support the CISO in defining annual objectives and the KPIs reported to METRO AG board.

  • Director of Information Security & Technology at Caseware
    Jan 2024 - May 2025 · 1 yr 5 mos

  • Various at Various Companies
    Jan 2012 - Jan 2024 · 12 yrs 1 mo