Services: Interim CISO, ISMS, Certifications & AI Governance

From full step-in leadership to focused, hands-on advisory — engaged the way that fits your stage.

01

Interim / Fractional CISO

Step-in security leadership when you need it. I take on full CISO responsibility — strategy, roadmap, budget, team, and board-level reporting — on a fractional or interim basis.

  • Security strategy & roadmap ownership
  • C-level and board reporting
  • Team leadership & coaching
  • Budget planning and vendor management
02

Security Consulting

Hands-on advisory across your security posture — from quick assessments to embedded, ongoing support.

  • Security assessments & gap analyses
  • Risk management & ISMS design
  • Policy and process development
  • Secure-by-design & security architecture guidance
03

Certifications & Compliance

End-to-end certification readiness and audit management that accelerates enterprise deals.

  • ISO 27001, 27701, 42001
  • SOC 2 Type 2
  • TISAX, Cyber Essentials, TX-RAMP
  • Internal & external audit management
04

AI Governance

Prepare your organization for AI risk and regulation — a genuine differentiator with enterprise buyers.

  • ISO 42001 (AI Management System) readiness
  • AI risk assessments
  • AI governance frameworks & vendor AI reviews
  • EU AI Act awareness
05

Regulatory & Risk Advisory

Navigate the regulatory landscape with confidence.

  • NIS2 readiness & posture
  • Third-party / vendor risk management
  • Incident & crisis management support
  • Data protection alignment (GDPR)

Zusätzlich über mein Kooperationsnetzwerk abgedeckt

Von mir koordiniert, aus einer Hand.

01

Custom Software & Web Apps

Custom portals, SaaS products and internal tools that fit how your business actually works — coordinated end-to-end.

  • Full-stack web applications
  • Database schema & API design
  • Authentication, RBAC & audit trails
  • CI/CD, documentation & handover
02

AI, Automation & RAG

AI that removes manual work — custom RAG systems and automation on your data, without the hype.

  • Custom RAG on your documents & data
  • Document extraction & classification
  • Workflow automation across your stack
  • Model selection & accuracy monitoring
03

AI Site Rescue & Hardening

Make AI-generated sites production-grade — secure, fast, maintainable and findable.

  • Codebase audit (security, architecture, performance)
  • Security hardening & CSP configuration
  • SEO & performance fixes
  • Tests, CI/CD & documentation
04

Consulting, Server & DevOps

Senior engineering on tap — sized to the question, from architecture to operations.

  • Architecture reviews
  • Server & cloud setup
  • CI/CD pipelines
  • Monitoring, logging & alerting
05

Security & OWASP / LLM Audits

Hands-on technical audits that find vulnerabilities before someone else does.

  • Manual + automated web application testing
  • OWASP Top 10 audit with verified findings
  • OWASP LLM Top 10 review for AI applications
  • Cloud security assessment & re-test
06

Incident Response & Threat Intel

Calm, senior leadership when it matters — during the incident and before the next one.

  • Incident leadership, containment & recovery
  • Forensic analysis
  • Runbooks & severity model
  • Post-incident review with remediation actions
07

SEO & AI Search (AEO)

Be findable on Google — and cited by ChatGPT, Perplexity and Claude.

  • Technical SEO audit
  • Per-route metadata & Open Graph
  • JSON-LD structured data
  • Sitemap, robots.txt, llms.txt & Search Console

Depth across standards, domains, and leadership

Standards & Frameworks

  • ISO 27001
  • ISO 27701
  • ISO 42001
  • ISO 27017
  • ISO 27018
  • SOC 2 Type 2
  • TISAX
  • Cyber Essentials
  • TX-RAMP
  • NIS2
  • GDPR

Domains

  • ISMS
  • Risk Management
  • AI Governance
  • TPRM
  • Incident Response
  • Threat Intelligence
  • IAM
  • Zero Trust

Leadership

  • Strategy
  • C-level reporting
  • Team building
  • Coaching
  • Budget ownership

How we'll work together

  1. 01

    Assess

    Understand your business, risks, and goals.

  2. 02

    Build

    Design pragmatic, business-aligned security.

  3. 03

    Enable

    Turn security into a driver of trust and sales.