11/14/2025 updated


verified
Premium member
100 % availableSenior Cybersecurity Consultant (CISA | ISO 27001 / 27701 / ISO 22301 Lead Auditor | NIS2 | DORA
Talinn, Estonia
Worldwide
Elektrotechnik, B.Eng, TUAbout me
ich berate Organisationen zu ISO 27001, NIS2, DORA, Cyber Resillience Act, EASA Part-IS, TISAX und Datenschutz. Mein Fokus liegt auf praxisnaher Umsetzung und Audits. Gerne vernetze ich mich mit Ihnen, um Erfahrungen auszutauschen und mögliche Anknüpfungspunkte für Projekte zu entdecken.
Cyber securityInformation SecurityInformation ManagementBCMISO 22301 Lead AuditorISMS Spezialist & Lead Auditor ISO 27001Datenschutzmanagememtsystem ISO 27701 BS 10012VDA / TISAXArtificial intelligenceEASA Part-IS
Fachliche Kompetenzen & Expertise
Als europaweit tätiger Berater für Cybersecurity, Compliance und KI-Governance verfüge ich über mehr als zwei Jahrzehnte Erfahrung in der Entwicklung widerstandsfähiger, konformer und zukunftssicherer Managementsysteme. Ich verbinde technische Informationssicherheit mit strategischer Governance, um Unternehmen in der digitalen und regulatorischen Transformation ganzheitlich zu begleiten.
Kernkompetenzen
- Informationssicherheit & Datenschutz: Konzeption, Implementierung und Optimierung von ISMS (ISO 27001) und PIMS (ISO 27701) in den Branchen Luftfahrt, Finanzen, Automobil und Technologie.
- KI-Governance & Ethik: Anwendung der ISO 42001-Grundsätze zur Sicherstellung von Transparenz, Verantwortlichkeit und vertrauenswürdigem KI-Management im Einklang mit dem EU AI Act und internationalen Standards.
- Regulatorische Compliance: Erfolgreiche Umsetzung von NIS2, DORA, EASA Part-IS und TISAX, mit Fokus auf rechtliche Konformität, operative Resilienz und Zertifizierungsfähigkeit.
- Risikomanagement & Governance: Fundierte Erfahrung in Enterprise Risk Management, Business Continuity und Governance-Strukturen zur Stärkung strategischer Entscheidungen und organisationaler Widerstandsfähigkeit.
- Audit & Beratung: Zertifizierter Lead Auditor (ISO 27001, 27701) und CISA, erfahren in internen, Lieferanten- und Zertifizierungsaudits sowie in vCISO-Beratung zur kontinuierlichen Verbesserung.
- Strategische Umsetzung: Fähigkeit, komplexe regulatorische Anforderungen in praxisnahe, wertschaffende Strategien zu übersetzen, die Vertrauen, Compliance und Nachhaltigkeit fördern.
Beratungsansatz
Ergebnisorientiert, interkulturell und praxisnah – ich verbinde europäische Regulierungskenntnis mit globalen Best Practices, um Organisationen auf ihrem Weg zu messbarer Verbesserung, erfolgreicher Zertifizierung und digitalem Vertrauen zu begleiten.
Languages
GermanFluentEnglishFluentTurkishNative speaker
Project history
Main business services include, but not limited to
* Strategic IT and Business Alignment (Consultancy & Workshops)
* Business Analysis & IT Architecture (Consultancy & Workshops)
* Building & Optimizing ICT Organizations (Consultancy & Workshops)
* Process optimization (Consultancy & Workshops)
* Information Security (Consultancy, Audit and Workshops)
My job and responsibilities cover
* Building and maintaining advisory relationship with C-level and senior executives
* Overall P/L responsibility for the operations
* Demand Generation & Business Development for the services and partner products
* Program Management
* Strategic IT and Business Alignment (Consultancy & Workshops)
* Business Analysis & IT Architecture (Consultancy & Workshops)
* Building & Optimizing ICT Organizations (Consultancy & Workshops)
* Process optimization (Consultancy & Workshops)
* Information Security (Consultancy, Audit and Workshops)
My job and responsibilities cover
* Building and maintaining advisory relationship with C-level and senior executives
* Overall P/L responsibility for the operations
* Demand Generation & Business Development for the services and partner products
* Program Management
Since I am self-employed I worked at SGS Turkey as a contractor and held the
position Principal Auditor.
Our business unit was called "Certification and Business Enhancement" which
means we certify our clients that they are compliant with standards and we
consult them to enhance their business processes and organization in means of
Digital Transformation.
Leading Audits and holding seminars for the clients to transfer know-how
related with Information Security Management, Cyber Security, Risk Management,
Quality Management, Process Optimization and Business Continuity.
Serve as primary troubleshooter for technical, personnel, and audit related
issues.
Created new business opportunities by understanding the customer needs during
events, audits and seminars.
Since Part-Time Working model has been changed, I have resigned my contractor
position.
position Principal Auditor.
Our business unit was called "Certification and Business Enhancement" which
means we certify our clients that they are compliant with standards and we
consult them to enhance their business processes and organization in means of
Digital Transformation.
Leading Audits and holding seminars for the clients to transfer know-how
related with Information Security Management, Cyber Security, Risk Management,
Quality Management, Process Optimization and Business Continuity.
Serve as primary troubleshooter for technical, personnel, and audit related
issues.
Created new business opportunities by understanding the customer needs during
events, audits and seminars.
Since Part-Time Working model has been changed, I have resigned my contractor
position.
The objective of Consulting Associates International LLC is to become a high calibre team of
consultants and auditors serving companies in fields such as
* Program & Project Management
* Risk and Business Impact Analysis
* Business Analysis and Process Optimization
* Business Continuity Planning
* Information Security and/or Quality Management Systems
* PCI DSS, Implementing Cobit, ITIL, ValIT and Risk IT
This company transformed itself to Gucer Auditing & Consulting recently.
My job and responsibilities covered
* Building and maintaining advisory relationship with C-level and senior executives
* Overall P/L responsibility for the operations
* Demand Generation
* Business Development
consultants and auditors serving companies in fields such as
* Program & Project Management
* Risk and Business Impact Analysis
* Business Analysis and Process Optimization
* Business Continuity Planning
* Information Security and/or Quality Management Systems
* PCI DSS, Implementing Cobit, ITIL, ValIT and Risk IT
This company transformed itself to Gucer Auditing & Consulting recently.
My job and responsibilities covered
* Building and maintaining advisory relationship with C-level and senior executives
* Overall P/L responsibility for the operations
* Demand Generation
* Business Development
Portfolio

Our Services
List of Services

Our Approach
Our Approach to the security