Stuttgart Region
CISO & Head of Resilience at MANN+HUMMEL | Enterprise Risk & Cyber Resilience Leader | Military-Trained Manager Leading enterprise resilience for a €4.5B global filtration leader across 80+ locations worldwide. As Head of Resilience, I integrate Information Security, Data Protection, Business Continuity, Crisis Management, and Group Risk Management – creating unified defense ecosystems that protect operations while enabling growth. 🛡️ Resilience at Scale Managing comprehensive operations with my team in Germany and Czech Republic, directing 30+ local ISO specialists and 30+ Data Protection Coordinators and building next-generation BCM capabilities. Our integrated GRC system seamlessly connects all management frameworks while navigating NIS-2, Cyber Resilience Act, and AI Act compliance. 🎖️ Military-Forged Leadership Twenty years of leadership experience (teams up to 80+) shapes my approach to building resilient, high-performing teams under pressure. Combined with family values as father of two, this creates leadership that balances operational excellence with human-centered management. 🌟 Community Impact Honored to serve Germany's cybersecurity leadership through: - President, SEKOP2026 – Germany's premier CISO executive conference - Guest Lecturer – TUM Executive MBA & DHBW Stuttgart - Security Advisory Board – Foundation for Family Businesses and Politics - Cybersecurity Councils – KPMG Germany & KuppingerCole Analysts - CIO Award Jury Member – Evaluating Germany's top IT executives 📱 Building Communities Created and moderate Signal groups connecting 200+ DACH security experts for knowledge sharing, regulatory discussions, and peer support – including specialized NIS-2 and DORA implementation communities that have become essential resources for compliance professionals. 💡 Vision Passionate about building resilience that doesn't just protect organizations, but enables them to thrive in uncertainty. True resilience comes from integrated systems, empowered teams, and leaders who make confident decisions when stakes are highest. Always eager to connect with fellow resilience leaders, CISO's and professionals who understand that protecting what matters requires both technical excellence and smart governance. Building tomorrow's resilience, today.
Head of Resilience - Information Security, Data Protection, BCM, Crisis Management & Enterprise Risk Management Leading enterprise-wide resilience strategy and operations for MANN+HUMMEL Group, a €4.5B global automotive and industrial filtration leader with 22,000+ employees across 80+ locations worldwide. Stakeholder Engagement: Collaborating with C-suite, business units, and external partners to embed resilience into organizational DNA. 🎯 Strategic Leadership & Scope ⦁ Integrated Resilience Portfolio: Orchestrating Information Security & Data Protection, Business Continuity Management, Crisis Management, and Enterprise Risk Management as unified resilience ecosystem ⦁ Global Team Leadership: Managing high-performing teams in Germany and Czech Republic (Resilience Infrastructure Service Center) ⦁ Community Management: Directing 30+ local Information Security Officers and 30+ Data Protection specialists worldwide, with expanding BCM community 🛡️ Operational Excellence ⦁ One of a kind GRC Integration: Championing integrated Governance, Risk & Compliance system connecting all management frameworks for seamless operations ⦁ Regulatory Mastery: Leading enterprise compliance with NIS-2, Cyber Resilience Act, AI Act, and emerging regulations ⦁ Crisis-Ready Operations: Building a resilient organization capable of maintaining business continuity under any relevant threat scenario 🚀 Innovation & Transformation ⦁ Service-Oriented Architecture: Establishing Resilience Infrastructure Team as cross-functional capability provider serving all resilience functions Passionate about building resilience capabilities that protect operations while enabling sustainable growth, innovation, and competitive advantage in an increasingly complex threat landscape.
🚀 GRC Platform Transformation ⦁ Led complete transformation from fragmented legacy systems (Verinice single-user, SharePoint DPMS) to integrated Alyne-based management platform connecting ISMS, DPMS, and enterprise risk management. ⦁ Built comprehensive solution spanning policy controls, asset management, risk assessments, Monte-Carlo risk aggregation, and individualized risk owner dashboards. 🛡️ World-Class Security Culture Development ⦁ Development of a first-class program to raise awareness of security issues with innovative campaigns: custom-built games (Who Wants to Be a Millionaire, Escape Rooms), QR-code campaigns, guest CISO presentations on ransomware experiences, and more. 🔐 Enterprise Encryption & Compliance Excellence ⦁ Successfully implemented Microsoft MIP end-to-end document encryption, achieving significant data protection coverage safeguarding against breach exploitation. ⦁ Led TISAX coordination globally, achieving 100% audit success rate through pre-audit assessments and systematic finding remediation. 🌐 Global Program Scaling ⦁ Built and managed worldwide ISO and DPC communities, providing centralized expertise to distributed teams. ⦁ Expanded team strategically, including dedicated data protection specialist conducting global legislative risk assessments and gap analyses across all operational jurisdictions. ⚖️ NIS-2 Thought Leadership ⦁ Recognized NIS-2 subject matter expert in Germany, regularly presenting implementation strategies at industry conferences. ⦁ Successfully delivered early NIS-2 compliance through proactive stakeholder engagement, comprehensive gap analysis, and timely remediation ahead of regulatory deadlines. 📈 Measurable Impact ⦁ Transformed MANN+HUMMEL's security posture from disparate point solutions to integrated enterprise resilience platform, establishing foundation for current Head of Resilience role while building internationally recognized expertise in regulatory compliance and security culture development.
🏆 Virtual Leadership Excellence During Crisis ⦁ Successfully led remote team transformation during COVID-19 lockdowns, converting a disparate team into a cohesive, high-performing team of 14 specialists ⦁ Achieved remarkable team bonding across virtual environment - over 50% of team members met physically for the first time at departure celebration, yet maintained exceptional collaboration and personal connections beyond the term ⦁ Scaled team operations 100% from 7 to 14 professionals while maintaining quality and team cohesion under challenging remote work conditions 🛡️ Information Security Governance Leadership ⦁ Strategic accountability for enterprise-wide Information Security Governance (distinct from advisory consulting), encompassing InfoSec strategy development, policy framework, and comprehensive risk management architecture ⦁ Shaped the design and implementation of the new Information Security Risk Management program, including systematic risk assessments, aggregated risk reporting to enterprise risk management, and strategic risk treatment planning ⦁ Established governance frameworks ensuring regulatory compliance and strategic alignment with business objectives across Mercedes-Benz Bank operations ⚖️ BaFin Regulatory Program Excellence ⦁ Served as primary Information Security subject matter expert across multiple high-stakes projects, providing strategic guidance and technical oversight for critical business transformations ⦁ Shaped future organizational capabilities through active involvement in process design, methodology development, and strategic planning initiatives 💡 Strategic Innovation & Process Development ⦁ Co-architected next-generation security processes and methodologies that became organizational standard, demonstrating forward-thinking approach to information security governance Immersive learning environment enabling deep expertise development while actively contributing to Mercedes-Benz Bank's security transformation
🏆 Comprehensive IT Governance Leadership Led complete IT Governance team encompassing all IT activities except operations and development: IT Project Management, IT Controlling, strategic vendor management, and regulatory compliance oversight Dotted line management of Information Security Officer (ISB), establishing integrated security governance across organization Successfully managed Individual Development Processes (IDV) ensuring regulatory compliance and operational efficiency ⚖️ Banking Regulatory Excellence ⦁ Deep immersion in German banking regulation including MaRisk (Minimum Requirements for Risk Management) and BAIT (Banking Supervisory Requirements for IT), becoming subject matter expert in financial services compliance ⦁ Primary interface with external auditors, internal audit, and LBBW Group InfoSec team for all IT-related examinations and regulatory assessments ⦁ Findings management leadership - systematically addressed audit findings, implemented remediation strategies, and established sustainable compliance frameworks 💡 Strategic Technology Innovation ⦁ Co-developed and implemented IT procurement tool with development teams, creating efficiency gains that attracted adoption requests from multiple business units across organization 🤝 Rapid Network Building & Stakeholder Management ⦁ Built comprehensive professional network at Pariser Platz 7 within record time ⦁ Horizontal IT integration - established strong relationships across all IT functions and leadership levels ⦁ Vertical business alignment - created strategic partnerships spanning all business units and management tiers ⦁ Became trusted advisor to senior leadership on IT governance, regulatory compliance, and strategic technology initiatives This role provided intensive exposure to financial services regulation while building comprehensive IT governance capabilities and establishing proven track record in stakeholder management across complex organizational hierarchies.
🏗️ Security Architecture Leadership & Governance Served as P-ISA (Principal Information Security Architect) for Communications, HR, Corporate Security, and External Affairs IT units, establishing comprehensive security architecture governance across critical business functions Strategic advisory role to IT colleagues on Information Security Architect procurement, engagement management, deliverable governance, and results implementation, ensuring consistent security standards across diverse technology environments Enterprise Architecture Board member representing cybersecurity perspective in group-wide technology decision-making, influencing strategic IT investments and architectural standards 🌐 Global Cybersecurity Network Integration ⦁ Active participant in group-wide P-ISA community, collaborating with Principal Information Security Architects across all Daimler IT units through regular Global Cyber Security meetings 💡 Enterprise-Wide Technology Innovation ⦁ Cross-collaborative project leadership as key member of 10-person global MFA implementation team, successfully deploying PingID multi-factor authentication solution across entire Daimler enterprise 🎯 Post-Military Career Foundation ⦁ First civilian role after military service, successfully transitioning from military leadership to corporate security architecture while maintaining high performance standards ⦁ Recognized personal preference for leadership responsibilities, identifying individual contributor limitations and setting foundation for future management roles This role provided comprehensive exposure to enterprise-scale security architecture while building strategic relationships across global technology organization and establishing expertise in enterprise governance frameworks.
🎯 Leadership & Program Management ⦁ Directed comprehensive military communications training programs as "Hörsaalleiter" (Training Cource Director), managing 36 Non-Commissioned Officers (Feldwebel to Oberstabsfeldwebel) annually across multiple cohorts (2x 3-month and 1x 6-month programs) ⦁ Led and coordinated a team of five instructors (Hauptfeldwebel, Oberleutnant, and Hauptmann level), overseeing curriculum development, training delivery, and program quality assurance ⦁ Served as Hauptmann (Captain) with full responsibility for advanced training curricula and mobile military communication systems supporting critical field operations 🛡️ Technical Training & Expertise ⦁ Delivered expert-level instruction on mobile communication infrastructure connecting satellite communications, radio relay, tactical radio, and cable transmission systems to local networks ⦁ Achieved Cisco CCNP Voice and CCNP Service Provider certifications, translating advanced networking concepts into practical military applications ⦁ Trained Non-Commissioned Officers (Feldwebel) in deployment and operation of mission-critical communication systems for field operations 👥 Military Leadership Excellence ⦁ Managed 12-student cohorts through intensive technical training programs with >90% completion rates ⦁ Balanced dual responsibilities as technical expert and program administrator, ensuring both educational excellence and operational efficiency ⦁ Developed junior leaders' technical capabilities while maintaining military standards and discipline This role combined advanced technical expertise in military communications with proven leadership capabilities, preparing skilled communications specialists for critical military operations while managing comprehensive training programs.