15.07.2026 aktualisiert

**** ******** ****
100 % verfügbar

Beraterin & Auditorin für Informationssicherheit, ISO 27001, KRITIS, Cyber Resilience Act

VS-Villingen, Deutschland
Weltweit
Bachelor of Science Wirtschaftsinformatik + MBA
VS-Villingen, Deutschland
Weltweit
Bachelor of Science Wirtschaftsinformatik + MBA

Profilanlagen

cv_2025_05_technicalproductowner_en.pdf

Skills

Microsoft AzureInformationssicherheitDevOpsGitHubISO / IEC 27001Open SourceScrumSicherheitsanforderungenInformationssicherheits-ManagementsystemISO / IECDevSecOps
Beraterin & Umsetzerin für Informationssicherheit & DevSecOps
Ich unterstütze Unternehmen beim Aufbau und der praktischen Umsetzung eines Informationssicherheitsmanagementsystems (ISMS) sowie bei der sicheren und nachhaltigen Entwicklung von Softwarelösungen. Mit meinem Hintergrund als Product Owner und IT-Security Consultant kombiniere ich methodisches Know-how mit technischer Umsetzungskompetenz – insbesondere in sicherheitsrelevanten Projekten im Cloud- und Softwareumfeld (Azure, DevSecOps, Software Supply Chain Security).
Ich berate praxisnah, strukturiert und zielorientiert – mit dem Ziel, Informationssicherheit als Teil der Produktentwicklung und Unternehmensprozesse zu etablieren.

  • Schwerpunkte & Leistungen: ISMS-Aufbau & Sicherheitsprozesse
  • Einführung und Weiterentwicklung von ISMS nach ISO/IEC 27001 oder BSI IT-Grundschutz – von der Gap-Analyse über Policies und Risikoanalysen bis hin zur operativen Umsetzung in Projekten.
  • Security by Design & Produkt-Security
  • Integration von Sicherheitsanforderungen in den Entwicklungsprozess, z. B. durch Secure Development Lifecycles (SDLC), Security-Gates und Threat Modeling.
  • DevSecOps & Software Supply Chain Security
  • Implementierung sicherer CI/CD-Prozesse, Nutzung von SCA- und SAST-Tools, Aufbau von SBOM-Prozessen (CycloneDX, SPDX) und Begleitung von Open Source Compliance nach ISO/IEC 5230.
  • Product Ownership & Umsetzungskompetenz
  • Ich übernehme Verantwortung als Product Owner oder Projektleiterin für sicherheitsrelevante Themen – von der initialen Anforderungsklärung über Architekturentscheidungen bis zur Einführung in Betrieb & Organisation.
  • Agile Entwicklung & Security-Verankerung
  • Einführung agiler Methoden mit Fokus auf Sicherheit und Qualität: z. B. Security Backlog Refinement, Definition of Done mit Security-Kriterien, Security-Champions-Modelle.
  • Technisches Know-how:Cloud & Infrastruktur: Microsoft Azure, Azure DevOps
  • Security Tools: ScanCode, Syft, FOSSA, Mend, OWASP Dependency-Check
  • Prozesse & Integration: GitHub Actions, REST-APIs, PostgresQL, Python, SQL
  • Standards & Frameworks: ISO/IEC 27001, BSI IT-Grundschutz, OpenChain ISO/IEC 5230, CRA

Zertifizierungen:
  • Zusätzliche Prüfverfahrenskompetenz zur Durchführung der Nachweiserbringung i.S. § 39 BSIG (n.F.)
  • Berufene ISO 27001 Auditorin für Zertifizierungsgesellschaften
  • ISMS Auditor according to ISO/IEC 27001:2022
  • ISMS Security Officer according to ISO/IEC 27001:2022
  • IT-Grundschutz-Praktiker gemäß BSI IT-Grundschutz 200-x
  • IREB® Certified Professional for Requirements Engineering Foundation Level
  • Microsoft Certified: Azure AI Fundamentals
  • Certified SAFe® 5 Scrum Master
  • Certified ScrumMaster® (CSM®)
  • Professional Scrum Product Owner™ II (PSPO II)
  • Professional Scrum Master™ I (PSM I)
  • Microsoft Certified: Azure Fundamentals
  • Professional Scrum Product Owner™ I (PSPO I)

Sprachen

DeutschMutterspracheEnglischverhandlungssicherSpanischGrundkenntnisse

Projekthistorie

DevSecOps Strategy & SCA Implementation – Cyber Resilience Act & Open Source Compliance

Industrie und Maschinenbau

>10.000 Mitarbeiter

  • DevSecOps Strategy & Implementation: Defined and implemented a DevSecOps framework aligning with security best practices.
  • SCA Tool Selection & Integration: Evaluated and integrated Software Composition Analysis (SCA) tools for OSS license compliance and vulnerability management.
  • Secure SDLC & Security-by-Design: Embedded security controls and risk-based security assessments into the Software Development Lifecycle (SDLC).
  • Open Source Governance: Strengthened OSS license compliance and automated license management using Open Source tooling.
  • SBOM Management & Security Enforcement: Established SBOM workflows to enhance software supply chain security and regulatory alignment.
  • Security Automation & Shift-Left Approach: Integrated security controls into CI/CD pipelines for early risk detection and mitigation.
  • Stakeholder Collaboration: Worked cross-functionally with Product Security, Engineering, and Compliance Teams to embed security into development lifecycles.
Tech & Tools:
  • SCA Tools: [e.g., Black Duck, Snyk, Mend, FOSSA, Dependency-Track]
  • CI/CD Pipelines: GitHub Actions, GitLab CI, Jenkins
  • SBOM Formats: SPDX, CycloneDX
Security Frameworks & Compliance:
  • Cyber Resilience Act (CRA)
  • ISO 5230 (OpenChain) – OSS License Compliance
  • ISO/IEC 18974 – Secure Software Development

Lecturer for software development and digital products

DHBW Villingen-Schwenningen

Öffentlicher Dienst

500-1000 Mitarbeiter

  • Lecture about prototyping several software frameworks
  • Hands-on class with many practical examples 

Product Owner and IT Security Consultant for Security Solutions

Miele & Cie. KG

Konsumgüter und Handel

>10.000 Mitarbeiter

  • Product Owner for several security systems (e.g.vulnerability management system, PKI services)
  • Identify SCA processes and potential vendors
  • Develop a software to manage SBOMs
  • Defining features and long-term vision for the products
  • Creating user stories and wireframes 
  • Managing the product backlog 
  • Preparing all sprint events and conducting them 
  • Support security related activities in the area of PKI and certificate management 

Product Owner and Coach for a learning management system

Cocomore AG (Project for Samsung)

Marketing, PR und Design

250-500 Mitarbeiter

  • Product Owner for a learning management system for Samsung
  • Create user stories, user flows and wireframes
  • Structure the product backlog and help sharpen the vision of the product 
  • Support software developers during the implementation of new features 
  • Develop an app-concept (scope, technology) for a new to be developed app
  • Coach team members with agile methods and best practices

Referenz: 
Sarah hat sich in beeindruckender Geschwindigkeit in die komplexen Projekt-Details eingearbeitet. Aufgrund von Urlaubs- und Vertretungssituationen unter erschwerten Bedingungen. Trotzdem war sie so gut wie von Tag 1 an produktiv. Eine beeindruckende Leistung. Diese Leistung in Kombination mit Sarahs Team-Geist, Pragmatismus und ihrer wundervoll sympathischen Art macht sie zu einem sehr geschätzten Mitglied unseres Teams.

Product Owner for HR systems and business processes

B&O Service AG

Architektur und Bauwesen

1000-5000 Mitarbeiter

  • Consult IT department on implementation of human resource management system for employee feedback
  • Introduction of system to replace Excel-based process with web application

Product Owner for a semi-conductor marketplace platform

Chipquest Ltd.

Internet und Informationstechnologie

< 10 Mitarbeiter

  • Developing product strategy for a semi-conductor marketplace platform 
  • Concepting the complete product for various target groups 
  • Creating user stories, wireframes and managing the product backlog
  • Support with user-testing based on hypothesis
  • Develop the application with low-code 

Product Owner for a IoT asset management platform

Transaction-Network GmbH & Co. KG

Industrie und Maschinenbau

10-50 Mitarbeiter

  • Requirements engineering based on the company goals of the product ramp-up phase
  • Design system architecture for IoT asset management web application
  • Planning for the integration of the asset management with Single Sign-On (SSO) provider and other third party APIs

Product Owner for a HR employee learning management platform

Nanostone GmbH

Energie, Wasser und Umwelt

50-250 Mitarbeiter

  • Developing product strategy for a HR employee learning management platform
  • Concepting the complete product for various target groups (employees, HR-department, facility lead)
  • Creating user stories, wireframes and managing the product backlog
  • Support with user-testing based on hypothesis
  • Support with go-live and continous development
  • Develop the application with low-code 

Teamlead / Scrum Master for Product Owners and Software Developers for IoT products

Hansgrohe SE

Konsumgüter und Handel

1000-5000 Mitarbeiter

  • Responsible for a team of 5 software developers and product owners ensuring the development of new IoT digital products
  • Working in the area of embedded software, cloud and app development
  • Responsible for IoT device lifecycle management for smart home appliances
  • Acting as Scrum Master to establish agile project methods and new way of working for the digital unit of Hansgrohe 
     

Product Owner and Digital Strategy Lead for car connectivity and emobility

Daimler AG

Automobil und Fahrzeugbau

>10.000 Mitarbeiter

  • Responsible for developing new software solutions in the field of car connectivity and emobility 
  • Strong expertise in the area of IoT along the complete lifecycle
  • Experience in managing software projects within big cooperations in combination with start-ups 
  • Strong focus on on Co-creation and evidence based featured development
  • Development of new business models and digital service 
  • Won Patent in the area of emobility in combination with van-sharing 


 

IT-Security Consultant for Vulnerability Management Systems

Hewlett-Packard

Internet und Informationstechnologie

>10.000 Mitarbeiter

  • Consultant for IT-Security Governance and Compliance
  • Projects for Compliance Security, Risk Management and Vulnerability Management
  • Leading projects with multiple team members and taking responsibility for project success and quality of implementations.

Zertifikate

Prüfverfahrenskompetenz § 39 BSIG (n.F.)

ISACA

2026

ISMS Auditor according to ISO/IEC 27001:2022

ICO

2025

IT-Grundschutz-Praktker gemäß BSI IT-Grundschutz 200-x

ICO-Cert

2024

Microsoft Certified: Azure AI Fundamentals

Microsoft

2024

Certified SAFe 5 Scrum Master

Scaled Agile Inc

2022

Certified ScrumMaster® (CSM®)

Scrum Alliance, Inc.

2022

Professional Scrum Product Owner™ I (PSPO I)

www.scrum.org

2022

Professional Scrum Product Owner™ II (PSPO II)

scrum.org

2022

Professional Scrum Master™ I (PSM I)

scrum.org

2022

Microsoft Certified: Azure Fundamentals

Microsoft

2022

Bewertungen

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden