15.09.2026 aktualisiert

**** ******** ****
100 % verfügbar

Senior IT Governance, Risk & Assurance Manager | CISA-Certified | Internal Controls Expert

Cadolzburg, Deutschland
Nur Remote
Doctor of Business Administration (Dr.), Artificial Intelligence, Compliance, Financial Regulatory
Cadolzburg, Deutschland
Nur Remote
Doctor of Business Administration (Dr.), Artificial Intelligence, Compliance, Financial Regulatory

Profilanlagen

CV Martin Hautz.docx

Skills

Interne KontrollenCertified Information Security ManagerCertified in the Governance of Enterprise ITKontrollziele für Informations- und Verwandte TechnologienCertified in Risk and Information Systems ControlCertification in Risk Management AssuranceData GovernanceGlobal Information Assurance CertificationGovernance-Risikomanagement und ComplianceInformation AssuranceInformation GovernanceInformationssicherheitsmanagementIntegritäts-ManagementSAP GRCSicherheit VerwaltungCertified Information Systems AuditorInformationssicherheits-ManagementsystemComptia CertificationISO/IEC 27002
IT Governance and Internal Controls

Extensive expertise in designing, implementing and continuously improving IT governance frameworks, internal control systems and audit-ready operating procedures in regulated financial services environments. Strong track record in aligning business, IT, risk, compliance and control functions.

IT Audit and Assurance (CISA-Certified)

CISA-certified professional with deep experience in conducting IT audit and assurance engagements, assessing IT general controls, process controls, governance structures and regulatory compliance. Proven ability to evaluate control effectiveness and support audit readiness across complex organizations.

Cybersecurity and Information Security Governance (ISO 27001)

Comprehensive knowledge of cybersecurity assurance, information security governance and ISO 27001 implementation and auditing. Certified as ISO 27001 Lead Implementer and Lead Auditor, with hands-on experience in security documentation, risk management and sustainable control frameworks.

Regulatory Compliance and Risk Management

Strong background in translating regulatory and supervisory requirements into practical governance and control practices, supporting risk-based decision-making and compliance in regulated banking and financial services environments.

Stakeholder Management and Consulting

Proven ability to engage effectively with senior management, business functions, IT teams, auditors and external partners. Experience in leading complex assurance, governance and security-related initiatives in global consulting environments including BCG and EY.

IT Security Operations and Network Security

Practical knowledge of IT security operations, network security, database vulnerabilities and IT security process implementation, supported by IBM and CompTIA Security+ certifications.

AI Governance and Compliance

Currently pursuing advanced knowledge in AI governance, risk management and AI auditing tools and techniques through the ISACA Advanced in AI Audit (AAIA) program, with a doctoral research focus on generative AI and regulatory requirements in the financial sector.

Business Administration and People Management

MBA with specialization in People Management from Middlesex University, covering leadership, supervisory skills, business planning and change management in the context of digital transformation.

Legal and Paralegal IT Security Advisory

Experience in supporting advisory work at the intersection of IT governance, information security, compliance, legal analysis and regulatory requirements, including structured assessments for complex legal and business contexts.

Erfahrung

Berufserfahrungmehr als 10 Jahre
Freelancer seit2026

Sprachen

DeutschMutterspracheEnglischverhandlungssicher

Projekthistorie

Senior Manager, IT Governance & Assurance, Internal Controls

Siemens Financial Services
Drive IT governance, assurance and internal control activities in a regulated financial services environment, supporting strategic alignment between business, IT, risk, compliance and control functions. Contribute to the design, documentation and continuous improvement of governance structures, control frameworks, decision processes and audit-ready operating procedures. Support transformation and operational excellence initiatives by translating regulatory, risk and control requirements into scalable, practical and sustainable governance practices.

Career Break

Career Break Bereavement
Short personal career break due to family related bereavement. Prepared for the next senior career step in IT governance, assurance and regulated financial services.

Senior Consultant, Paralegal, IT Security & Governance Expert

Baer Legal
Supported advisory work at the intersection of IT governance, information security, compliance, legal analysis and regulatory requirements. Contributed to structured assessments of governance, security and control-related topics for complex legal and business contexts. Translated technical and regulatory matters into clear documentation, supporting decision-making and stakeholder communication.

Associate Director, IT Governance & Security

Deutsche Pfandbriefbank
Managed IT governance and IT security topics in a regulated banking environment, supporting alignment with risk, compliance and supervisory expectations. Contributed to the development and optimization of governance processes, control structures, roles and responsibilities across IT and business functions. Worked with senior stakeholders on regulatory-driven transformation, audit readiness, risk management and sustainable IT control frameworks.

Inhouse Consultant, IT Security Lead Client Assurance

The Boston Consulting Group (BCG)
Led client assurance activities with a focus on IT security, governance, risk management and strategic stakeholder communication in a global consulting environment. Acted as key interface between clients, internal IT, legal, risk, security and business teams to align requirements, clarify responsibilities and enable consistent assurance responses. Supported scalable assurance processes, security documentation and governance practices to strengthen transparency, consistency and client trust.

Group IT Auditor

INTER Versicherungsgruppe
Performed IT audit activities within the group audit function, assessing IT governance, controls, security processes and operational risk areas. Evaluated control effectiveness, process maturity and compliance with internal governance and regulatory expectations. Supported audit reporting, issue documentation and management communication to strengthen control transparency and remediation planning.

IT Auditor / Risk Consultant

Ernst & Young (EY)
Conducted IT audit and risk consulting engagements with focus on IT general controls, process controls, governance structures and assurance requirements. Assessed IT control environments, identified improvement areas and supported clients in strengthening control maturity and audit readiness. Worked across multiple client environments, building strong consulting, stakeholder management and structured problem-solving capabilities.

Insurance Consultant

BGV Badische Versicherungen
Advised customers on insurance products, risk coverage and financial protection needs, developing strong client-facing advisory and communication skills. Supported business process execution, customer relationship management and contract-related workflows in a regulated insurance environment.

IT Operator

Kardex Remstar
Supported IT operations, infrastructure processes, user support and application-related troubleshooting in an international manufacturing business environment. Contributed to stable IT service delivery, operational continuity and practical implementation of IT security and process requirements. Built hands-on understanding of IT operating models, service processes and the operational impact of governance and security requirements.

Assistant Corporate Security

Bosch
Supported corporate security processes, documentation and organizational control activities in a large industrial company for automotive aftermarket. Assisted with security administration, internal coordination and operational risk-related tasks. Gained practical experience in enterprise security structures, business protection and cross-functional corporate processes.

IT Security Officer Apprenticeship

J. Konig & Co
Completed dual vocational training with focus on IT administration, ERP, CRM, business processes and technology management. Supported IT operations, user administration, technical documentation and security-related process tasks. Established the foundation for a career in IT governance, information security, audit, controls and technology-driven business transformation.

Production Staff

persona service
Supported operational truck production activities in an industrial working environment. Gained early experience in structured workflows, reliability, process discipline and teamwork. Built foundational understanding of operational efficiency, process execution and practical business operations.

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden