Maik Iwastschenko

• Group-wide Cyber GRC • Project lead for strategic projects (NIS2 Implementation, Group ISMS, Group IT Risk Management) • KRITIS coordinator • Second-line authority for cyber risks • Strategic advisor to CISO • Audit readiness and regulatory alignment • Control systems

• Advisory and project management (IT Governance, Risk & Compliance), including regulated environments • Technical project lead for data center migration, including regulatory compliance, audit readiness and security governance • Risk-based assessment of architecture and operating models (Compliance & Governance)

• Regional responsibility for IT Governance and Compliance across three production sites • Interface between local operations and central IT, ensuring alignment with Group standards, policies and regulatory requirements • Ownership of IT Compliance topics for the assigned region • Advisory role towards local management and business on IT Risk & Compliance obligations • Contribution to enterprise-wide IT Governance initiatives through regional insights and execution support

• Leadership roles in domestic security and training environments (instructor, group leader, platoon leader) • Responsibilities for training, supervision and qualification of personnel • Enforcement and oversight of compliance with regulations and standards in security-relevant contexts • Risk assessment, situation evaluation and decision-making in structured command environments • Coordination and communication across hierarchical levels and organizational units