External CISO, Implementation Consultancy & Project Management
Project Management for IT Security
CyberCompare assumes the operational and strategic project management for complex IT security initiatives - particularly in carve-out, M&A, and transformation contexts. Often acting as the right hand of the CIO, and if required, in an interim CISO role.
In doing so, we do not just track tasks, but orchestrate technical, organisational, and regulatory workstreams - in time and budget.
Critical Challenges in M&A Carve-Outs
In carve-out transactions, the primary challenge lies in establishing an entirely new governance and operations infrastructure for the spun-off company: segregating assets and data, migrating access rights, and decoupling IT infrastructure. All of this must be achieved while meeting regulatory compliance, protecting critical intellectual property, and navigating intense time constraints – as the operational cutover date is non-negotiable.
In these projects, our scope of work typically encompasses:
Goal Definition and
Gap Assessment
Assessment of InfoSec requirements for NewCo (e.g., ISO 27001, CRA, NIS2)
Target architecture & acceptance criteria
Make-or-buy analyses
TSA management & transition agreements
Security Workstream
Project Management
Project Management Office
Security Roadmap DefinitionÂ
Action planning, alignment, and tracking
External CISO ServicesÂ
Risk mitigation during business transition
Implementation
beyond closing
Establishment of ISMS policies and processes
Building the security organization and tech stack
Identity & Access Management (IAM)
Tendering & vendor selection (RFPs)
MSSP governance & steering
Business Continuity Management (BCM)
Four-Phase Process
How a project runs with us
Alignment on goals, timeline, and priorities. Clarification of project scope and stakeholder roles.
Assessment of the AS-IS situation, gap analysis against the target state, and creation of a realistic roadmap with defined work packages.
Day-to-day project management with status updates, blockers, and escalations. Steering of internal teams and external partners. Preparing decision templates and reporting to management.
Go-live and cut-off planning, handover documentation, audits, and lessons learned. Optional re-certification and succession planning.
Measurable Value
What specifically changes
30-40%
less internal coordination effort, based on our project experience
- Faster implementation of security objectives such as ISO 27001 or SOC operations
- Prevention of costly wrong decisions regarding tools and role assignments
- Audit readiness and fulfillment of regulatory requirements
- Relief of executive management and a confident, professional presence toward customers, investors, and auditors
Reference Projects
From the field
Carve-Out of a Medium-Sized Industrial Company
Building the security organization, achieving ISO certification readiness, successful planning of network segregation, go-live without critical incidents.
XDR Tool Selection for a Hidden Champion
Full comparison of eight tools, CIO briefing, PoC guidance, and decision templates for the executive board.
Interim CISO in the Automotive Sector
Led the security workstream as part of a broader transformation programme, coordinating SOC, ISMS, and IAM efforts across teams. Handover to the client’s permanent structure in five months.
Our team of hands-on security experts
Experienced operators with deep technical expertise, ready to lead your security initiatives to success
Tino Brunzel
Interim ISB role in the manufacturing sector (500 employees) • Security Architect at Mercedes-Benz • PwC Risk Assurance (including ISO 27001 audits) • Deloitte Cybersecurity
Dr. Ingo Pansa
Interim CISO at Keenfinity • Lead Architect for Access Management at Mercedes-Benz AG • CPO at Planck Security • Head of Europe’s largest procurement project for cybersecurity services
Stev Gödecke
Former CIO at a medium-sized group of companies (>4,000 IT users) • Over 20 years’ experience in network technology • Over 100 successful security projects (including >30 SOC projects, OT, microsegmentation, SASE/SSE)
Lutz Kirsten
Former Head of the In-house SOC at Bausparkasse Schwäbisch Hall (DORA-regulated) • SecOps SIEM/SOAR for the City of Munich • CISSP, IPMA Level D • Co-leader of Europe’s largest SOC procurement project
Niclas Ilg
PhD in Computer Science (thesis on intrusion detection) • NIS2 impact assessments for KRITIS energy suppliers • NDR/SIEM at a major German bank • EDR/SIEM/SOAR at a leading car manufacturer
Dr. Jannis Stemmann
VP Robert Bosch (including Head of Manufacturing) • Senior Engagement Manager at McKinsey • Over 100 security projects • CISSP, GICSP, ISO 27001 Lead Auditor
Our promise to you:
Your initial point of contact
Tino Brunzel
Solution Manager, CyberCompare
