Sebastian's Resume

Sebastian

IT-Audit and Consulting; Technology Management

Male

30 y/o

Financial Director/Financial Manager/Supervisor/Financial Specialist/Assistant/Consultant/Consulting Project Manager/Financial Consultant/IT Consultant/Strategic Planning/Management/AI/Deep Learning/Machine Learning/Natural Language Processing (NLP)

Live in Germany

Nationality Germany

Summary

Highly skilled IT Auditor with over five years of proven experience managing internal compliance audits, AI risk compliance and governance as well as security assessments for internal and external services in financial institutions. Previously served the Asian Infrastructure Investment Bank (AIIB) directly as Senior Consultant with Grant Thornton China, leading the Third-Party Security Assessment program, evaluated IT outsourcing vendors against ISO standards, conducted AI risk assessments for critical systems, and developed innovative methodologies for geopolitical and sanction risk evaluation. Expert in European, Chinese and American security and compliance frameworks including ISO 27001, EU AI Act, CSL, DORA, PIPL, and GDPR, with hands-on experience conducting vendor due diligence during procurement stages and coordinating IT security initiatives across cross-functional teams. Certified as CISSP, CISA, CISM, PMP, and ISO 27001 Manager with exceptional project management skills, strong data analysis and reporting capabilities, and proven ability to balance technical security with business priorities.

Work experience

Senior in Audit & Assurance for Banking and Financial Services
Grant Thornton AG
2025.09-Current
(a year)
- Management of IT projects, integrating new security components and ensuring regulatory compliance in financial service providers and third-parties. - Execution of technical and compliance audits for two crypto-asset service providers in year-end reporting and internal audit, reviewing asset safety, blockchain security, custody solutions, token lifecycle management (issuance,transfer, storage), and smart contract risk assessment. - Execution of internal audit activities for over 8 banks and financial service providers, with hands on audit management for identity and access management operations, leading to full regulatory compliance. - Management of audit findings remediation activities within 4 mandates, executing review of risk management, operational controls. - Guiding 3 junior auditing staff on audit techniques, timelines, standards and best practice approaches. - Guiding banks in development of AI compliance standards and audit of AI usage within 4 organizations.
Senior Consultant in IT Advisory for Banking and Financial Services
Grant Thornton China (致同)
2024.12-2025.08
(9 months)
- Consulting services for Asian Infrastructure Investment Bank (AIIB), managing third-party risk management and ad-hoc security evaluation necessities. - Executed over 30 third-party service reviews and 7 AI applications reviews. - Consulting services for international banks in the field of digital policy, information security, risk management and third-party management. - Evaluation of AI applications and services for information security and data protection risk at Asian Infrastructure Investment Bank (AIIB). - Developed and defined AI security policies and procedures on information security and third-party risk management. - Execution of 13 compliance reviews with requirements of Chinese Cybersecurity Law (CSL) and Personal Information Protection Law (PIPL).
Senior in Audit & Assurance for Banking and Financial Services
Grant Thornton AG
2023.12-2024.11
(a year)
- Execution of 7 year-end audit projects, integrating new security components and ensuring regulatory compliance in financial service providers. - Execution of 4 Information Security Management Systems health checks in the scope of internal audits for financial service providers. - Developed combined audit processes on substantial financial testing and supervisory compliance evaluations to create efficiency gains. - Successfully led auditing activities conducted on three large multinational banks for compliance with GDPR requirements. - Execution of compliance audits on transaction management in anti-money laundering (AML) schemes for banking clients. - Management of auditing activities within mandates for all activities related to Information Security and Third-Party Management.
IT-Auditor
TÜV TRUST IT - TÜV Austria
2021.03-2023.11
(3 years)
- Auditing and technical evaluation of IT service providers in the areas of encrypted communication, digital signatures, TLS encryption, and digital wallet systems. - Full compliance audit according to Swiss digital signature law (ZertES) of SwissSign AG in Zürich, Switzerland. - Preparation, documentation, execution, and follow-up for over 20 audit projects on public-key service providers and certificate providers. - Audit of AI-based identification systems supporting the issuance of personal signature certificates. - Operational focus: Public Key Infrastructure, AI-based Identification Systems, National Digital Identity Schemes, Asymmetric Cryptography.

Educational experience

Paderborn University, Germany
Business Administration (M.Sc.)
2018.10-2021.02
(2 years)
Master's thesis: Success factors for the implementation of AI applications in strategic management
Paderborn University, Germany
International Business Studies
2014.10-2018.09
(4 years)
Bachelor's thesis: Impact of Brexit on British corporate legal forms established in the EU