Your Security Expert

A little bit about me

Hello, I’m Cecilia.

My philosophy to security encompasses the business, human, and organizational dimensions.

My journey began in top-tier cybersecurity consulting, progressed through a pivotal role as an Information Security Officer, and most recently, I oversaw security for a Big Data Platform within a strictly regulated sector.

At Hands on Security, I use this diverse experience to tackle and simplify complex security issues.

Book a meeting

More on my experience and background

Cecilia Hans

Cyber Security & Platform Security Expert

Previous Roles

  • Credit Suisse / UBS – Big Data Platform Security & Security Process Automation
  • RheinEnergie – Information Security Officer for Critical Infrastructure
  • EY – Senior Cyber Security Consultant – IT & OT Security, Cyber Security Audits
  • Deloitte – Cyber Security Consultant – Cyber Strategy & Assessments

Academic Education

  • M. of Sc. International Business – International Business School London
  • B. of Art Communication Management – University of Applied Science, Cologne

Specialization

  • Cyber Security & Information Security
  • Platform Security Governance & Management
  • Secure and efficient Process design

Certificates

  • IT: ISO 27001 Lead Implementing and Auditing
  • ITIL

Relevant project experience

Implementation of Security Target Operating Model

Planning and implementation of transformation projects to build and optimize cybersecurity organizations on a technical and organizational level (Target Operating Model)

Key Achievements: Established a sustainable Security Target Operating Model

Role: Project Coordination, Content Lead TOM
Duration: 8 Months
Industry: Media
Performance of Cybersecurity Maturity Assessment based of diverse standards

Performing and implementing cybersecurity assessments based on various standards (e.g., NIST, ISO,) with a detailed evaluation, risk assessment and plan of action / roadmap

Key Achievements: Successfully completed tight assessment schedule and satisfied C-Level with suggested roadmap

Role: Assessment Lead, Communication C-Level
Duration: 3 Months
Industry: Telecommunication
Performance Third Party Risk Management Assessment with Focus on Cybersecurity

Independent developing of third-party risk management in order to be able to create synergies between cybersecurity-relevant topics and enterprise risk and to incorporate new efficient processes into customer processes

Key Achievements: Identification and prioritization of potential Third Party Risk with Cybersecurity focus

Role: Cybersecurity SME
Duration: 3 Months
Industry: Automation Digitalisation
Conception of a production greenfield with a security-first approach

Comprehend all critical process steps within the supply chain, identify opportunities for innovation and automation, and ensure process design adheres to a Secure By Design methodology

Key Achievements: Process Optimization and Secure Design Definition

Role: Steering Management Workshops
Duration: 5 Months
Industry: Supply Chain
Leading Internal and External Audits to achieve ISO 27001 Certification

Implementation and further development of the ISMS for a critical infrastructure, leading internal and external audits, Implementation of risk management for existing assets and new developments to identify and assess risks and derive suitable measures

Key Achievements: Achieve Certification of ISO27001 and established constructive safety culture

Role: Information Security Officer
Duration: 10 Months
Industry: Energy Provider
Secure Process Automation

Establishment of a user-friendly and scalable secure process in order to increase efficiency and decrease susceptibility to errors. Beside secure by design, the process incorporates tight access controls and excluded manual input

Key Achievements: Successfully implemeted a fully automated, secure design

Role: Product Owner and SME
Duration: 10 Months
Industry: Banking
Implementation of new Access Control on Big Data Platform on highly regulated environment

Establishment of inevitable access control on big data platform, which works at log-in time in order to validate latest access permission of user to get access to encrypted data and/or location regulated information

Key Achievements: Establishment of Access Control in a sensitive and highly regulared environment

Role: Project Lead and SME
Duration: 5 Months
Industry: Banking
Previous
Next

Cecilia Hans

Cyber Security & Platform Security Expert

Previous Roles

  • Credit Suisse / UBS – Big Data Platform Security & Security Process Automation
  • RheinEnergie – Information Security Officer for Critical Infrastructure
  • EY – Senior Cyber Security Consultant – IT & OT Security, Cyber Security Audits
  • Deloitte – Cyber Security Consultant – Cyber Strategy & Assessments

Academic Education

  • M. of Sc. International Business – International Business School London
  • B. of Art Communication Management – University of Applied Science, Cologne

Specialization

  • Cyber Security & Information Security
  • Platform Security Governance & Management
  • Secure and efficient Process design

Certificates

  • IT: ISO 27001 Lead Implementing and Auditing
  • ITIL

Relevant project experience

Implementation of Security Target Operating Model

Planning and implementation of transformation projects to build and optimize cybersecurity organizations on a technical and organizational level (Target Operating Model)

Key Achievements: Established a sustainable Security Target Operating Model

Role: Project Coordination, Content Lead TOM
Duration: 8 Months
Industry: Media
Performance of Cybersecurity Maturity Assessment based of diverse standards

Performing and implementing cybersecurity assessments based on various standards (e.g., NIST, ISO,) with a detailed evaluation, risk assessment and plan of action / roadmap

Key Achievements: Successfully completed tight assessment schedule and satisfied C-Level with suggested roadmap

Role: Assessment Lead, Communication C-Level
Duration: 3 Months
Industry: Telecommunication
Performance Third Party Risk Management Assessment with Focus on Cybersecurity

Independent developing of third-party risk management in order to be able to create synergies between cybersecurity-relevant topics and enterprise risk and to incorporate new efficient processes into customer processes

Key Achievements: Identification and prioritization of potential Third Party Risk with Cybersecurity focus

Role: Cybersecurity SME
Duration: 3 Months
Industry: Automation Digitalisation
Conception of a production greenfield with a security-first approach

Comprehend all critical process steps within the supply chain, identify opportunities for innovation and automation, and ensure process design adheres to a Secure By Design methodology

Key Achievements: Process Optimization and Secure Design Definition

Role: Steering Management Workshops
Duration: 5 Months
Industry: Supply Chain
Leading Internal and External Audits to achieve ISO 27001 Certification

Implementation and further development of the ISMS for a critical infrastructure, leading internal and external audits, Implementation of risk management for existing assets and new developments to identify and assess risks and derive suitable measures

Key Achievements: Achieve Certification of ISO27001 and established constructive safety culture

Role: Information Security Officer
Duration: 10 Months
Industry: Energy Provider
Secure Process Automation

Establishment of a user-friendly and scalable secure process in order to increase efficiency and decrease susceptibility to errors. Beside secure by design, the process incorporates tight access controls and excluded manual input

Key Achievements: Successfully implemeted a fully automated, secure design

Role: Product Owner and SME
Duration: 10 Months
Industry: Banking
Implementation of new Access Control on Big Data Platform on highly regulated environment

Establishment of inevitable access control on big data platform, which works at log-in time in order to validate latest access permission of user to get access to encrypted data and/or location regulated information

Key Achievements: Establishment of Access Control in a sensitive and highly regulared environment

Role: Project Lead and SME
Duration: 5 Months
Industry: Banking
Previous
Next

Learnings in my professional career

Book a meeting

Big4 Consulting - Cyber Security:

Wholistic view on Cyber security aspects in a great variety of clients. In parallel, work with client needs and focus of efficiency

Information Security Officer:

Raising the relevance and appeal for information security by incorporating everyday examples 

Security Manager Big Data Platform:

Enabling Security features on a big data platform with strong focus on governance, secure and efficient processes and great usability in a highly regulated environment. 

What else defines me

Sport

I value the balance and structure that sports bring into my lives. For me, engaging in sports is essential for maintaining harmony and discipline.

 

This passion for staying active provides a strong foundation that helps me navigate both personal and professional challenges with clarity and focus. Especially though running and cycling allow myself to get there.

Traveling and culture

Traveling and experiencing new cultures are among life’s greatest pleasures.

 

These adventures broaden my perspective, fostering a deeper understanding and reflection on the diverse world we live in. This passion for exploration enriches both my personal growth and the company’s global outlook.

Nature

Outdoor activities and immersing in nature are essential to my well-being.

 

They provide a refreshing escape, invigorate my spirit, and offer a vital connection to the natural world. Always happy to escape.

Ready to boost your business security?

Don’t wait to protect your business from potential threats.

Reach out today and let’s discuss how our tailored, hands-on cybersecurity solutions can secure and elevate your organization.

We’re here to answer all your questions and provide the expertise you need.

Book a meeting

Learn how we helped 100 top brands gain success