Cybersecurity Specialist
Hi, I'm Christopher.
Cybersecurity and IT specialist with 22+ years in IT governance, regulatory compliance and technology risk — now focused on product security for connected devices and SaaS.
About
I'm an IT and cybersecurity professional with over 22 years of experience delivering secure, mission-focused solutions — IT governance, regulatory compliance, technology risk management and security operations. I'm currently a Cybersecurity Specialist at Diehl Metering in Nuremberg, working on product security for smart meters with digital elements and the SaaS platforms built around them.
My focus there is regulatory: making sure the product portfolio meets EU requirements — GDPR, the Cyber Resilience Act, NIS2 and RED cybersecurity — and holds up against standards frameworks like ISO 27001. It's the same discipline I spent years applying to large regulated infrastructures, pointed at connected products rather than enterprise networks.
The throughline across that career has been policy development, operational support and cybersecurity planning that improves system resilience and organisational readiness — alongside hands-on network infrastructure design and troubleshooting. I hold a BSc in Cybersecurity with a minor in Information Networks, I'm working toward CISSP, and I treat staying current on emerging threats as part of the job rather than an extra.
What I care about most is making security something people can actually follow — clear procedures, plain-language training, and tools that help rather than obstruct. Most of this work is collaborative: security initiatives only land when they're carried out across teams that don't all share your vocabulary.
I live in Rhineland-Palatinate, Germany. Outside work I'm a volunteer firefighter, qualified on breathing apparatus, and serve on the Donnersberg district drone and rope-rescue teams. I also volunteer as an emergency first responder with the German Red Cross.
The answer is always yes. The question is how — and how do we do it securely?
CV
Experience
Diehl Metering — Nuremberg, Germany
- Provide governance, compliance and risk assessment for smart meters with digital elements and SaaS platforms placed on the market by Diehl Metering.
- Ensure the product portfolio meets EU regulatory policy — GDPR, the Cyber Resilience Act (CRA), NIS2 and RED cybersecurity requirements.
- Align the portfolio against standards frameworks including ISO 27001.
US DoD Defense Logistics Agency — Kaiserslautern, Germany
- Served as ISSM in support of the Agency's Chief Information Officer, and as cybersecurity SME to Program and System Managers.
- Supported the Senior Information Security Officer on the DLA Cybersecurity Program and Risk Management Framework implementation.
- Performed control analysis for confidentiality, integrity, availability and non-repudiation; managed POA&Ms against DoD/DLA RMF policy.
- Guided development of Cybersecurity Program Plans and strategy for the PMO — architecture, requirements, objectives and policy.
- Served as Alternate COMSEC Responsible Officer for Secret and Top Secret keying material and assets within a SCIF.
US Army 21st TSC DMC — Kaiserslautern, Germany
- Managed cybersecurity for over 500 users across the European region under the Command Cybersecurity program.
- Maintained readiness for Cyber Readiness Evaluations across all 15 functional areas using the Cybersecurity Assessment Readiness Tracker.
- Responded to and investigated reported cyber incidents; ran cybersecurity walkthroughs for asset classification, labeling and PII compliance.
- Ran ACAS, SCAP and SCCM scans for STIG compliance and patch management; tracked and closed DoD IAVA alerts.
- Developed security SOPs and policy, and coordinated awareness training at all levels.
US Army 81st Readiness Division — Columbia, South Carolina
- Alternate Information System Security Manager for the command, and primary point of contact for incident response handling.
- Tier II technician for hardware, software and network connectivity; delivered systems and application training to over 500 end users.
- Led development of the command's Information Awareness standard operating procedures, and provided IA risk analysis and vulnerability assessment.
- SharePoint Site Collection Administrator — drove the migration to SharePoint 2016, working with site owners on templates, metadata and capacity.
- Administered knowledge management across SharePoint sites in accordance with the Army Records Information Management System (ARIMS).
US Army EUCOM J5/8 — Stuttgart, Germany
- Information System Administrator for Offices of Defense Cooperation across 40 countries in the USEUCOM area of responsibility.
- Executed a $3.8M contract to design and deploy a secure VPN network solution connecting the ODCs.
- Manager and point of contact for all Security Assistance Network information management at Headquarters USEUCOM.
- SharePoint Site Collection Administrator for the EUCOM portal, supporting 40 individual country sites.
- Ensured updates met DoD, Department of the Army and EUCOM regulatory and information assurance guidance.
US Army V Corps — Heidelberg, Germany
- System analysis, design, development and integration for V Corps G1 automated systems.
- Administered Windows Server 2003/2008 and SQL Server systems, managing accounts, network rights and access.
- Served as Information Assurance Security Officer advisor to the G1 Chief of Staff on technical operations and requirements.
- Resolved hardware/software interface and interoperability problems to maintain availability and integrity.
- Oversaw military personnel assigned to the section, setting priorities and providing technical guidance.
Certifications
- Certified Ethical Hacker (CEH) — EC-Council
- Certified Network Defense Architect (CNDA) — EC-Council
- CompTIA SecurityX, Security+, Network+, A+
- Risk Management Framework (RMF) / eMASS certified
- KMI certified (COMSEC)
- ITIL v3 — Axelos
- Army Information Assurance Security Officer, Level II — Ft. Gordon Signal School
- Microsoft SharePoint for Power Users & Site Collection Administrators
- CISSP — in progress
Skills
- Governance, Risk & Compliance
- IT Governance
- Technology Risk Management
- Product Security
- EU Cyber Resilience Act (CRA)
- NIS2
- GDPR
- RED Cybersecurity
- ISO 27001
- NIST / Risk Management Framework
- IT Security Operations
- Incident Response
- Penetration Testing
- Cyber Defense & Analysis
- System Administration
- Network Design & Troubleshooting
- COMSEC
- SharePoint Administration
- Knowledge Management
- Security Awareness Training
Education
Bellevue University — Bellevue, Nebraska
ITT Technical Institute — Miami, Florida
Also
Contact
Open to conversations about product security, cybersecurity governance and EU regulatory compliance — in Germany or remote.