Mohamed Aboelfotouh

Own privacy and data protection topics for TRS-related processes, systems, websites, logon pages and business requirements. Translate data protection requirements into technical, organizational and audit-ready measures with IT, information security, architecture, business and compliance stakeholders. Drive GDPR-compliant deletion and retention concepts and prepare evidence for technical implementation and audit discussions. Support TIA, PIA and DPIA processes, cloud readiness reviews, contract management an

Developed and evolved security and privacy architectures for telematics ECUs and Connected Drive services. Performed threat and risk analyses and derived technical and organizational security controls. Managed security and privacy requirements across the product lifecycle, including implementation, penetration testing and code audits. Owned security and privacy requirements in the Vehicle-to-Everything (V2X) context.

Designed and aligned security and privacy architectures for information and communication electronics. Performed risk and threat analyses and assessed technical protection measures. Owned security requirement specifications and aligned security-relevant requirements across stakeholders. Contributed to the standardization of cryptographic interfaces in Automotive Open System Architecture (AUTOSAR).

Worked on security engineering for banking applications with a focus on secure software development. Analyzed and implemented security-relevant software requirements in agile development environments.

Conducted research in IT security, cryptography and cryptanalysis. Supervised numerous master’s and bachelor’s theses in IT security. Published more than 30 international papers in IT security, cryptography and cryptanalysis.