Jana Bielefeld

Responsible for designing and implementing the Information Security Risk Management framework aligned with ISO 27001 and ISO 27005, including TISAX, NIS2, and KRITIS requirements. Leading the rollout of an ISMS module (GRC tool), defining data and interface requirements, and assessing security risks with business units and international sites. Translating regulatory standards into pragmatic measures and driving continuous improvement to strengthen security posture and risk culture.

Responsible for risk and quality management across all pillars within IT Shared Services and International Administration Services at ALDI SÜD International IT. Managing project, security, and audit risks including reporting to leadership and improving risk reporting. Ownership of KPI-based quality management, facilitation of workshops, and monitoring of continuous improvement initiatives. Strategic consulting including development of a Target Operating Model (TOM).

Main responsible for risks over all pillars in the "IT Shared Services" and "International Administration Services" departments • project risk management for international IT projects • management and support of identified security risks • management and support of identified audit risks • reporting to leadership Strategic consulting: • consulting in regard of strategic topics for our Shared Service Center • development of a target operating model (TOM)

In my role, I advised IT Shared Services teams on compliance, ensuring alignment with legal, tax and in general regulatory requirements. I lead national and international compliance workshops, acted as a liaison between IT, Legal, Tax, and other employees. I also implemented company-wide policies and provided ongoing compliance support to AIS and AIIS teams, offering proactive solutions to ensure adherence to compliance standards.

- Management of legal and project risks in int. projects, incl. assessment, reporting, and monitoring - Development and testing of IT applications in Oracle (APEX) and a group-wide tool for legal risks - Strategical enhancement of the project risk module and promotion of a unified reporting culture - primary contact for int. projects and legal risk evaluations - Collaboration with risk partners such as legal or tax department - Conduction of operational risk workshops and supervision of interns & students

• General experience in Auditing, Accounting, Finance and Tax • Requirement of European and German Bank Authorities • Financial analysis - analysis of profitability and costs, equity and liquidity as well as the tax implications - focus on adequacy of internal controls and potential fraud • evaluating risks and the regulatory landscape • understanding of different organizations and business activities (banks, payment service providers, stock exchange)