Sven Zehl · Information Security Leader · Berlin
I build and lead information security functions in regulated, internationally distributed organisations: security strategy, Group-level governance across legal entities, and advising executive management and the board on security, risk and resilience.
BaFin-regulated payments institution · Berlin
I lead a multi-layered organisation with team leads across Security Engineering, Security GRC and Technical Operations, own the security budget, and run a live DORA programme under supervisory scrutiny.
B2B SaaS company, part of a European software group
Security and internal IT end to end, including a 24/7 security operations approach, application and infrastructure security, and full budget ownership.
European health platform, four European entities
Delivered the first BSI C5 attestation for a healthcare SaaS provider in Germany, and led the investigation of a major security incident.
Global industrial and IoT group
Lead editor of the binding Secure SDLC for all business units, representing the group in ISO/IEC JTC 1 SC 27, ETSI TC CYBER and CEN/CENELEC JTC 13.
Engineer and researcher before moving into security leadership. Peer-reviewed publications at IEEE, ACM and IFIP venues with more than 300 citations, and standardisation work at ISO, ETSI and CEN/CENELEC.