10/28/2026 updated

**** ******** ****
verified
Premium member
100 % available

Senior IT Project Lead & Consultant (Compliance, Strategy, M&A)

Zug, Switzerland
Worldwide
MBA University St. Gallen, M.Sc. IT-Management, B.Sc. Business Informatics, B.A. International Mgmt.
Zug, Switzerland
Worldwide
MBA University St. Gallen, M.Sc. IT-Management, B.Sc. Business Informatics, B.A. International Mgmt.

Profile attachments

Philipp Loeffler_CV_D.pdf
Philipp Loeffler_CV_E.pdf

Audit TrailCertified Information Systems Security ProfessionalComplianceInformation Technology ConsultingInformation Technology Infrastructure Libraries (ITIL)IT Risk ManagementIT ManagementISO/IEC 27001IT Service ManagementSAP ERPSystems IntegrationIso/iecGDPRServicenow
Profile
  • 16 years of IT/management consulting, IT strategy and transformation projects based on many years of experience as project manager
  • Numerous international projects focus on insurance companies, banking/financial services, pharmaceuticals, automotive
  • Strong analytical and conceptual thinking skills
Consulting Portfolio (Focus Topics)
  • IT compliance projects (e.g. DORA, GDPR, ISAE 3402, SOC 1/2, IT general controls, ICS, Avaloq)
  • IT due diligence and IPO readiness assessment
  • IT integration and separation project coordination
  • Development/review of IT strategies and roadmaps
  • IT governance/optimisation of organisational structures and processes (COBIT, target operating model)
  • IT service management consulting (ITIL v3/4)
  • ISO implementation projects (ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2022)
Certifications
  • ISO/IEC 27001 Senior Lead Auditor, 2026
  • Certified Information Systems Security Professional (CISSP), 2024
  • Certified Internal Systems Auditor (CISA), 2023
  • ServiceNow Platform Implementation, 2021
  • ITIL 4 Managing Professional, 2020
  • Project Management Professional (PMP), 2019
  • Certified Trainer, 2016
  • COBIT® 5 Foundation, 2016
  • ITIL v3 Expert, 2015
  • SAP Certified Associate - Business Process Integration with SAP ERP 6.0 EhP6 (TERP10), 2015

Experience

Professional experience10+ years
Freelancer since2017

Languages

DeutschNative speakerEnglischFluentFranzösischBasic knowledge

Project history

Interim Head of IT Strategy

Global Security Company

Industry & Mechanical Engineering

>10.000 team member

  1. Define IT Strategy Scope and Roadmap: Align IT priorities with business objectives and transformation goals
  2. Develop Target Operating Model (TOM): Design organization, governance, processes and sourcing strategy
  3. Establish IT Service Operating Model: Implement ITIL-aligned service structures and processes
  4. Lead Outsourcing Initiatives: Drive vendor selection, service design, SLA/OLA definition and transition governance
  5. Implement Governance Framework: Define policies, decision structures and accountability models
  6. Ensure Stakeholder Alignment: Coordinate executive leadership, IT and business units
  7. Define KPIs and Performance Metrics: Measure service quality, efficiency and vendor performance
  8. Support Risk and Compliance Alignment: Integrate regulatory requirements and prepare for audits

External Advisor - IT Risk Management Expert (DORA)

Private Bank

Banking & Financial Services

5000-10.000 team member

  • Gap Analysis and Compliance Assessment: Conduct a comprehensive gap analysis of the organization's IT risk management practices against DORA and BAIT, identifying required actions for compliance.
  • IT Risk Management Framework: Develop and implement an IT risk management framework, incorporating BAIT requirements such as risk identification, assessment, mitigation, and monitoring, while aligning with DORA’s resilience objectives.
  • Operational Resilience Measures: Establish and test operational resilience measures, including business continuity and disaster recovery plans, ensuring compliance with DORA and BAIT standards for critical business processes.
  • Third-Party Risk Oversight: Implement a third-party risk management process to monitor and assess service providers, fulfilling BAIT’s outsourcing requirements and DORA's focus on supply chain resilience.
  • Incident Management and Reporting: Develop a robust incident management and reporting process, ensuring timely communication to regulatory authorities per DORA and BAIT guidelines.

External Advisor - Project Lead IT Governance Implementation

Battery Cell Manufacturer

Automotive & Vehicle Manufacturing

5000-10.000 team member

  • Define Project Scope and Objectives: Establish a clear project scope, timeline, and objectives for implementing IT Governance aligned with the client's business needs and regulatory requirements.
  • Develop IT Governance Framework: Design an IT governance framework based on industry best practices (e.g., COBIT, ITIL), tailored to the organization’s specific needs and regulatory requirements.
  • Establish Policies and Procedures: Develop, document, and implement IT governance policies, standards, and procedures that support consistent IT decision-making and risk management.
  • Stakeholder Engagement and Alignment: Work closely with key stakeholders, including executive leadership, IT management, and business units, to ensure alignment on governance priorities and accountabilities.
  • Risk Management and Compliance: Identify and manage IT risks, establish risk mitigation strategies, and ensure compliance with relevant standards, laws, and regulations.
  • Implement Performance Metrics and KPIs: Develop key performance indicators (KPIs) and metrics to measure the effectiveness of IT governance practices and ensure they contribute to organizational goals.
  • Prepare for Audits and Reviews: Set up documentation and processes that facilitate internal and external audits (e.g. IATF 16949), ensuring that all governance activities are transparent and compliant with standards.

External Advisor - Project Lead ISAE 3402 & ISO 27001 Implementation

LYNQTECH GmbH

Energy, Water & Environment

50-250 team member

  • Project Planning and Scope Definition: Develop a detailed project plan, including milestones, resource allocation, and timelines. Define the project scope and specific requirements in alignment with the client.
  • Gap Analysis: Conduct a comprehensive gap analysis to assess current security practices and control mechanisms, identifying deviations from ISAE 3402 and ISO 27001 standards.
  • Risk Assessment: Evaluate security risks and vulnerabilities, prioritize the identified risks, and develop a risk management plan that meets the standards’ requirements.
  • Policy and Process Development: Assist in building and documenting security policies, processes, and controls that align with the requirements of ISAE 3402 and ISO 27001.
  • Implementation of Security Controls: Guide and monitor the implementation of physical and logical security controls in compliance with the standards.
  • Internal Audits and Readiness Assessment: Coordinate and conduct internal audits to verify compliance readiness and address any identified gaps or issues before the external audit.
  • External Audit Coordination: Prepare for and coordinate with external auditors, including the collection of documentation and evidence needed to demonstrate compliance with ISAE 3402 and ISO 27001.

Head of IT Assurance & Advisory / Senior Manager - Technology & Digital Consulting

Forvis Mazars AG

Auditing, Taxes & Law

>10.000 team member

Technology & Digital Consulting: Project management of various IT M&A projects (including integration, separation, IT due diligences, IPO readiness assessments), IT compliance projects (including DORA, NIS2, GDPR, IT General Contols, IT Risk Management)

Manager - Digital Transformation

KPMG AG

Auditing, Taxes & Law

>10.000 team member

Digital Transformation Advisory: Project management of various IT strategy assessments, IT M&A projects, esp. IT due diligence (buy-side, sell-side, vendor DD, IPO readiness assessments), IT governance and target operating model projects, ServiceNow implementation projects, DSGVO and GDPR compliance projects

Assistant Manager - Digital Compliance

KPMG AG

Auditing, Taxes & Law

>10.000 team member

Digital Compliance Advisory: IT audit manager with focus on internal control systems (ICS) and IT governance, project management of GDPR compliance and certification projects (e.g. ISO 20'000-1:2018, ISAE 3402), PMO for IT implementation and compliance projects

IT Service Management Consultant

TUI InfoTec GmbH

Internet & IT

500-1000 team member

IT Service Management: Project manager for the implementation of process mining for IT service management, process owner in the IT governance department for the ITIL processes Service Design, Service Transition, Service Level Management and IT Service Continuity Management

Junior Workplace Support Analyst

TUI InfoTec GmbH

Internet & IT

500-1000 team member

Second-Level Support: Project member of a VDI infrastructure implementation project, project member of a Windows 7 client and software rollout project, VIP customer support

IT Application Developer

TUI InfoTec GmbH

Internet & IT

500-1000 team member

Appenticeship: IT specialist in application development with the passage through various departments of a classic IT service company (e.g. service desk, second level support, network, ERP, application development)

Certificates

ISO 27001 Senior Lead Auditor

PECB

2026

Certified Information Systems Security Professional (CISSP)

ISC2

2024

Certified Internal Systems Auditor (CISA)

ISACA

2023

Certified Information Systems Security Professional (CISSP)

ISC2

2023

ServiceNow Platform Implementation

ServiceNow

2021

ITIL 4 Managing Professional

PeopleCert

2020

Project Management Professional (PMP)

Project Management Institute

2019

Certified Trainer

Junior Enterprises Europe

2016

COBIT® 5 Foundation

APMG International

2016

ITIL v3 Expert

AXELOS Global Best Practice

2015

SAP Certified Associate - Business Process Integration with SAP ERP 6.0 EhP6

SAP

2015

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in