03/27/2026 updated
100 % available
Senior AI & Data Security Architect
Leiden, Netherlands
Netherlands
Bachelor CompSci | Advanced Security Programs | Microsoft, Oracle & IBM Enterprise Certifications.About me
Senior Security Architect bridging the gap between strategy and realization. Expert in Sovereign Cloud, Zero Trust, and PQC for Defense & Justice. I translate complex NIS2/BIO frameworks into auditable, resilient operations. Entrepreneurial mindset with a focus on Sovereignty-by-Design.
Artificial IntelligenceAlgorithmsArchitectureAuditingBiometricsComputer SecurityCryptographyData SecurityIncident ResponseEntrepreneurshipXacMLGovernanceGovernance Risk Management and ComplianceIdentity ManagementInfrastructure Management
What I Deliver For Your Organization
Security architecture only creates value when it moves beyond frameworks and documentation — into systems that are auditable, operable, and resilient under real-world pressure. This is where I work.
The problems I solve
Your organization faces mounting regulatory obligations — NIS2, BIO 2.0, eIDAS 2.0, GDPR — but the translation from compliance requirement to working technical control keeps stalling between governance and engineering. Sovereignty ambitions remain aspirational. Audit preparation consumes months. Identity and access controls are too coarse for the sensitivity of your data. Post-quantum risk sits on the agenda, but no actionable migration path exists.
I close exactly these gaps.
What I concretely deliver
- Auditable Zero Trust frameworks — end-to-end architecture with embedded traceability, ready for regulatory scrutiny and procurement requirements
- Sovereignty-by-Design blueprints — jurisdictional control, data residency, and verifiable access governance engineered into the architecture from day one
- PQC migration roadmaps — phased, algorithm-agile transition plans that maintain NIS2/EUCS compliance throughout
- Evidence packs — structured control documentation built for ETSI, ISO 27001, and BIO audits, eliminating last-minute preparation cycles
- Actionable Architecture Decisions — crisp, implementable decisions that engineering teams can execute without re-interpretation
- Identity & Access architectures — XACML/ABAC-based governance for strict Separation of Duties in high-assurance, multi-organization environments
The outcomes for your organization
Sovereignty-by-Design becomes a verifiable architectural property, not a procurement claim. Audit readiness is continuous, not a crisis. Your dependency on hyperscalers is reduced without sacrificing operational continuity. Regulatory obligations are translated into technical controls your teams can own and your auditors can verify.
Typical engagements
- Interim CISO or fractional security leadership in government or critical infrastructure
- Security architecture for platform migrations from legacy to sovereign or hybrid-cloud environments
- Compliance readiness programs for NIS2, BIO 2.0, or eIDAS 2.0
- Identity & Access architecture for classified or high-sensitivity environments
- Post-quantum readiness assessments and crypto-agility roadmaps
Experience
Professional experience10+ years
Freelancer since1990
Languages
GermanFluentEnglishFluentDutchNative speaker
Project history
I lead AXIOV, a strategic security architecture and compliance practice. Following the acquisition of the AXIOV portfolio by SpronQ BV, I continue to operate as a high-level architect and fractional executive, bridging the gap between organizational governance and technical operations.
I specialize in Sovereignty-by-Design, ensuring that boardroom goals regarding data autonomy and EU compliance (NIS2/BIO) are translated into buildable, runnable, and auditable frameworks.
Selected Portfolios & Current Engagements:
Public Sector (The Netherlands): Lead Security Architect for the Public Prosecution Service (Openbaar Ministerie). Defining Case-Management architecture for highly classified domains (BIO, GDPR, EUCS).
ArQiver: COO & Lead Security Architect. Building a post-quantum secure digital archiving platform for sovereign data retention (Integrated with former MOB.ID technology).
EU FED CLOUD / sQram: Fractional COO and Security/Compliance lead for EUCS-oriented sovereign cloud initiatives.
Led the company’s security and product execution for high-assurance digital identity. I architected the bridge between legal identity (ICAO) and cryptographic verifiable credentials.
Key Achievement: Acquisition & Integration: Following the acquisition of the technology portfolio, the MOB.ID capability was integrated into the arQiver platform (under SpronQ BV) to provide trusted identity and long-term compliant access to sovereign archives.
Leadership: Managed specialist teams delivering identity programs for the Ministry of Justice and Eindhoven Municipality.
Led the development and implementation of an EUCS-aligned compliance and policy framework for a cloud service provider. Translated NIS2 obligations and ISO/IEC 27001 requirements into actionable controls, governance structures, and audit-ready evidence.
Key contributions:
• Built and rolled out EUCS-compliant security policies and a control framework aligned with evolving EU
requirements.
• Mapped NIS2 and ISO/IEC 27001 controls into a coherent compliance structure (ownership, procedures,
evidence cadence).
• Designed risk management and incident response playbooks to support operational resilience and
auditability.
• Managed audit preparation, certification documentation, and internal readiness reviews to maintain
compliance posture.
Skills: EUCS, ISO/IEC 27001, NIS2, Risk Management, Policy & Control Frameworks, Incident Response, Compliance Audits, Cloud Security.