Andreas Jüngel

Led a team of five project managers to successfully deliver IT security solutions with a budget of up to €4 million. Ensured the achievement of IT security objectives within various programs while fostering synergies between IT security and product security initiatives. Championed the corporate cybersecurity awareness program, effectively managing the execution of security awareness activities.

Managed IT security policies and standards, identifying operational exceptions and mitigating cybersecurity risks. Executed penetration tests and audits to enhance security posture. Led the organization in preparation for ISMS implementation and ISO 27001 certification. Defined and established a comprehensive security services portfolio, ensuring compliance among IT service providers.

Oversaw the outsourced Security Operation Center to enhance monitoring and response. Led the CSIRT to address and mitigate incidents. Developed and managed security policies, ensuring compliance. Assessed IT security risks and implemented strategies to safeguard assets. Streamlined operational security for greater efficiency. Directed the Bombardier security awareness program to foster a culture of mindfulness.

• managed the daily operations of an international team in worldwide over 50 Projects • consolidated IT services from ex-Nokia Siemens Networks and Redknee • created concept for a tool-based network planning process • fostered cooperation of Redknee with the Club R2GS for security standardization • voordinated cooperation with hardware vendors • responsible for knowledge management and skill development of the team •

• developed organizational and operative structure • managed three reorganizations of the team • led an international team of 15 colleagues responsible for network engineering, service management, competence management, customer support, quality management and security • implemented guidelines for network design, dimensioning and infrastructure planning • implemented guidelines for IT Security • worked with product security management to productize new security Features • published a monthly Newsletter •

• analyzed threats and risks for all products • defined security requirements • created functional specifications • implement security controls for the products • hardened the Operating System • tested the products against known vulnerabilities • consulted customers and created project-specific security concepts • coordinated the work of two team members •

• created project specific security concepts for telecommunication network Operators • analyzed IT systems and operational processes to identify security threats • define protection profiles to be implemented by the operator • moderated security acceptance meetings • advised 3rd party vendors and system integrators • supervised the integration of security controls and customer acceptance •

• integrated security controls with e-commerce systems in customer Projects • certified 3rd party products and testified interoperability with Siemens products • verified functionality and performance of 3rd party software • implemented test tools for automatic test execution • trained new team members •

Open Communication Systems Database and Information Systems