Hire the Best Compliance Specialists
in Germany

I help financial institutions, fintechs, and regulated technology firms strengthen DORA readiness, technology risk governance, outsourcing controls, and operational resilience. My work is practical, audit-ready, and focused on helping organisations improve governance, control ownership, resilience, and regulatory readiness without creating unnecessary paperwork. I bring 15+ years of experience across technology compliance, operational resilience, business continuity, third-party governance, and financial-sector regulatory frameworks. I can support projects such as: • DORA readiness reviews and remediation planning • technology risk and control framework improvement • outsourcing and vendor risk governance • operational resilience and tabletop exercises • business continuity and disaster recovery framework enhancement • policy, procedure, and governance documentation improvement • audit-ready control and evidence structuring • incident management and crisis response framework support • ISO 22301 / ISO 27001-aligned governance and resilience work • GDPR and data protection control framework support Relevant background: • 15+ years in financial and regulated environments • hands-on experience across governance, policies, dashboards, testing, and remediation • strong understanding of how business, support, and control functions work together • practical experience with DORA, MaRisk, GDPR, ISO 22301, ISO 27001, outsourcing governance, and resilience frameworks • leadership experience across cross-functional and international environments Certifications & achievements: • Member of the Business Continuity Institute (MBCI) • Certified by the Business Continuity Institute (CBCI) • PMP – Project Management Professional • Certified in Data Protection & Outsourcing in Financial Institutions • Winner of the BCI Global & European Awards for Most Effective Recovery (2016) My approach is structured, business-aware, and focused on delivering usable outcomes that support audit readiness, governance improvement, and practical implementation. If you need practical support with DORA, operational resilience, outsourcing governance, or broader technology compliance work, I can help define the right scope and deliver structured, usable outcomes.

I'm a native German Virtual Assistant with a professional background in banking, customer service, and compliance. I support businesses with administrative tasks, customer communication, email management, scheduling, and research. Thanks to my experience in highly regulated environments, I work with accuracy, confidentiality, and a strong sense of responsibility. My goal is to help businesses stay organized while providing reliable and professional support. • Native German speaker with professional customer service experience • Administrative support, email management, scheduling, and data entry • Strong communication, customer focus, and conflict resolution skills • Reliable, organized and able to work independently with great attention to detail • Clear communication and longterm collaboration are important to me

Marketing Consultant | Airbnb Superhost & Co-Host | Short-Term Rental Specialist ⭐ 12+ years marketing experience (Ford, Lincoln, agencies) ⭐ Founder of Zen Stays Dubai | Superhost on Airbnb I combine corporate marketing expertise with hands-on hosting experience. I’ve led international brand campaigns and events, and I also built my own short-term rental company in Dubai — earning Superhost status by creating seamless, guest-focused stays. • Marketing strategy, content & communications • Airbnb setup, listing optimization & co-hosting • Guest experience, SOPs & automation systems Whether you need support with marketing or hosting, I bring structure, creativity, and reliable communication to every project.

I help businesses achieve full product compliance with EU, UK, and international regulations, including CE marking, UKCA, REACH, RoHS, and Eco-Design. With over 10 years of experience in regulatory compliance, technical documentation, and quality audits, I ensure your products meet all legal and safety standards efficiently and cost-effectively. Why Choose Me ✔ 10+ years in compliance & documentation ✔ Experience across retail, manufacturing, and industrial sectors ✔ Hands-on work with suppliers, test labs, and certification bodies in EU and Asia Core Expertise • CE & UKCA Certification • REACH & RoHS Compliance • Technical Documentation (DIN EN 82079-1) • Risk Assessment & Quality Audits • FSC Auditing & Eco-Design (ErP Directive) • Private Label Compliance & Recall Strategy • ISO 9001 Quality Management Systems • CSR Standards (BSCI, Sedex, amfori) Regulatory Coverage ⚡ Electronics & Safety: EMC Directive, LVD, RED 🛡️ PPE: PPE Regulation (EU 2016/425) 🏭 Machinery & Pressure Equipment: Machinery Regulation, PED 🌱 Environment & Packaging: Ecodesign Regulation, PPWR, Digital Product Passport ♻️ Waste & Recycling: WEEE, EPR 🧪 Chemical Compliance: RoHS, REACH Additional Services ✅ Risk Assessment & Quality Audits ✅ Complaint Analysis & 8D Reporting ✅ Corrective & Preventive Action Planning (CAPA) ✅ Factory Audits & Supplier Development ✅ Authorized Representative Setup ✅ Label Review & Technical File Creation Sustainability & Packaging ♻️ Ecodesign Regulation (EU 2024/1781) 📦 Packaging & Packaging Waste Regulation (PPWR) (2025/40) 🔗 Digital Product Passport (DPP) ♻️ Extended Producer Responsibility (EPR) Additional Expertise 🔍 Complaint Analysis & 8D Reporting 🛠️ Corrective & Preventive Action Planning (CAPA) 🏭 Factory Audits & Supplier Development 📊 Risk-Based Product Evaluation & Testing Coordination Social & Supply Chain Compliance 🌍 CSR Standards (BSCI, Sedex) 🏭 Occupational Safety & Social Compliance in Manufacturing Industries Served 🔌 Electronics & Electrical Equipment 🏗️ Machinery & PPE 🛍️ Consumer Goods & Retail 📦 Packaging & Sustainability Solutions How I Help You I guide companies through EU and UK compliance requirements from design to certification. Whether you need CE marking, RoHS/REACH checks, packaging compliance, or complete technical files, I provide fast, reliable solutions. Next Steps 📩Send me: - Product details & intended use - Target markets - Specific compliance questions Let’s make your products market-ready and risk-free!

# ISO 27001, GDPR, SOC 2, GRC, AI GOVERNANCE AND AUDIT READINESS I help SaaS, technology, fintech, marketplace and service companies become audit-ready for ISO 27001, GDPR, SOC 2 readiness, EU AI Act readiness, ISO 42001 readiness, security questionnaires, vendor risk, AI governance and GRC documentation. Many companies have policies, procedures and security documents, but struggle to prove they are followed. The same problem now exists with AI: teams use AI tools, but often lack ownership, risk assessment, approval workflows, monitoring and evidence. That is where my work creates value. My focus is simple: * Requirement * Risk * Policy * Control * Process * Evidence * Monitoring * Audit Readiness This makes your compliance and AI governance program easier to manage, explain and defend during audits, customer reviews, vendor checks and AI risk reviews. # WHAT CLIENTS HIRE ME FOR * ISO 27001 AND ISMS SUPPORT - ISMS documentation - ISO 27001 readiness - Gap assessments - Control mapping - Risk treatment tracking - Evidence review - Management review input * AI GOVERNANCE, ISO 42001 AND EU AI ACT READINESS - AI governance documentation - ISO 42001 readiness support - EU AI Act readiness support - AI system inventory - AI use case register - AI risk assessment structure - AI impact assessment support - AI control mapping - AI vendor risk review - AI approval workflow - AI monitoring and evidence structure - Responsible AI documentation * GDPR, PRIVACY AND DATA PROTECTION - GDPR documentation - Privacy process reviews - Vendor privacy checks - Data protection evidence - Regulatory requirement mapping - Privacy risk documentation - Legal and privacy requirements translated into controls * GRC PROGRAM DEVELOPMENT - Compliance obligation registers - Regulatory change tracking - Control libraries - Risk registers - Remediation trackers - Audit plans - Evidence repositories - Policy lifecycle management - KPI and KRI tracking - Management reporting * RISK ASSESSMENT AND VENDOR RISK - Information security risk assessments - Compliance risk workshops - Vendor risk reviews - AI vendor reviews - Control self-assessments - Outsourcing risk reviews - Third-party risk documentation - Remediation planning * AUDIT AND EVIDENCE PREPARATION - Audit planning - Evidence collection - Evidence review - Interview preparation - Control testing documentation - Audit finding analysis - Corrective action tracking * POLICIES, PROCEDURES AND QUESTIONNAIRES - Information security policies - AI governance policies - Access control procedures - Incident response documentation - Business continuity documentation - Vendor risk procedures - Data protection documentation - Control narratives - Audit reports - Decision records - Security questionnaire responses # WHY WORK WITH ME Auditors, customers and management do not only want policies. They want ownership, working controls, traceable evidence, measurable follow-up and proof that the process is followed. With AI, companies need to know which AI tools are used, who owns them, what data they process, what risks exist, what approvals are required, what controls are in place and what evidence proves responsible use. I translate regulatory, security, privacy, AI and framework requirements into clear actions for engineering, IT, product, management and business teams. This reduces confusion and speeds up evidence collection. # TYPICAL PROJECTS - ISO 27001 gap assessments - GDPR documentation review - AI governance setup - ISO 42001 readiness support - EU AI Act readiness support - AI system inventory creation - AI risk assessment structure - Security policy creation - Risk register setup - Compliance obligation registers - Internal audit checklists - Audit evidence preparation - Vendor risk assessments - Security questionnaire responses - AI vendor risk reviews - Control mapping - KPI and KRI setup - Management review preparation - Corrective action tracking - GRC documentation cleanup # MY WORKING APPROACH I start by understanding your audit goal, documentation, risks, ownership, evidence, AI usage, stakeholders and deadlines. Then I structure the work into clear priorities, deliverables and next steps. My approach is detailed, calm and evidence-driven. I avoid unnecessary complexity and focus on what auditors, customers, management and internal teams need to see. The goal is to build a working compliance and AI governance structure that your team can understand, maintain and improve. # WHAT YOU GET Clear documentation, control mapping, audit-ready evidence structure, AI governance structure, risk and remediation tracking, and business-friendly explanations for all stakeholders. You get someone who connects compliance, privacy, security and AI requirements with real processes, owners, evidence and improvement actions. If your company is preparing for an audit, certification, customer security review, AI governance project, vendor assessment or internal compliance

Senior Android Engineer | 10+ Years Experience | Fintech & E-commerce Specialist I help businesses build high-performance, production-grade Android applications that scale to millions of users. Based in Munich, Germany, I bring a decade of experience from industry leaders like thinkorswim (top-rated trading platform) and Wildberries (Europe's retail giant). What I bring to your project: ✅ Fintech Expertise: Deep understanding of real-time data, complex trading tools, and secure payment integrations. ✅ Modern Tech Stack: Expert-level Kotlin, Jetpack Compose, Coroutines, and Flow for building responsive, maintainable UIs. ✅ Architecture at Scale: Proven track record of migrating legacy Java codebases to modular Clean Architecture (MVVM/MVI) and Hilt/Dagger. ✅ Product Ownership: I don't just write code; I take features from architectural design to Google Play release, ensuring stability and 99.9% crash-free rates. Core Technical Stack: • UI: Jetpack Compose, Material 3, Custom Views. • Logic: Kotlin, Coroutines, Flow, Dagger/Hilt. • Data: Room, Retrofit, GraphQL, OkHttp. • Quality: Unit Testing, Performance Profiling, CI/CD. Whether you are a startup looking for an MVP or an established enterprise needing to refactor a complex module, I provide clean, scalable solutions and clear communication. Available for part-time/full-time contracts. Let's build something stable together!