Curriculum Vitae

Martin Fitze Kunkelsberg 20 45239 Essen Germany
Phone +49-201 / 85 64 507 •
Mobile +49-162 / 214 95 02 • E-Mail mailto:martin.fitze@bfcs.de
Day of Birth: 26.10.1967 Place of birth: Essen Marital status: Married Citizenship: German

Employment history

Since 04/2009 Consultant/Manager

Business & Finance Consulting Services GmbH, Düsseldorf (http://www.bfcs.de)

My duties and responsibilities are:
Acquire, plan, organize, perform and manage small and medium range consulting projects and audits, e.g.:

· SAP Basis and Authorisation projects (deployment, design)

· Design of IT security policies, standard operation procedures and process instructions.

· Moderation of IT-security workshops

· Security and data center analysis in respect to IT-environments operating systems, networks and physical security

· Develop SOX process and control documentation in respect to the general computer controls

03/2001 – 03/2009 Manager,
PricewatehouseCoopers WPG AG, Essen.
Division: Technology Risk Management

My duties and responsibilities were:
Acquire, plan, organize, perform and manage small and medium range audits, e.g.:

· Security audits and data center audits in respect to IT-environments operating systems, networks and physical security

· Quality assurance of IT security policies, standard operation procedures and process instructions.

· Plan, manage and perform SOX walkthroughs in respect to the general computer controls

05/1998 – 03/2001 System administrator,
PwC Deutsche Revision AG, Essen
Division: IT operations

· Development and roll out of a Win NT standard installation

· Development of software deployment packages with the Microsoft SMS Installer

· Management of the IT service point and system administration for the PricewaterhouseCoopers Unternehmensberatung in Essen.

05/1998 – 03/1999 IT-Coordinator. Project manager for Windows NT deployment, Heilit+Woerner Bau AG

03/1996 – 04/1998 Trainee technical management und system administrator, Heilit+Woerner Bau AG

Studies and Education

08/1990 – 11/1995 Dipl. Bauingenieur (diploma in civil engineering), Grade 2,4
Universität Gesamthochschule Essen

01/1990 – 08/1990 Computer service technician
Gerono Computer und -Service GmbH

08/1988 – 06/1989 Advanced technical college entrance qualification, Grade 2,8
Schule für Elektrotechnik, Essen

09/1984 – 08/1988 Apprenticeship, telecommunications engineering, Grade 2,0
Siemens AG, Essen

08/1978 – 06/1984 Junior high school exam, Grade 2,0
Bertha Krupp Schule, Realschule, Essen

Further qualification (extract)

05/2008 ITIL Service Manager

06/2004 Certified Information Systems Auditor (CISA)

03/2004 Target related project management

10/2003 Moderation and effective consulting

10/2002 Communication and presentation

05/2001 SAP basics and oracle database operations

02/1997 Integration of Windows NT and Novell NetWare 4

05/1996 NetWare 4.1 Advanced Administration

Languages fluent English

IT Know-How SAP R/3 basics, Windows, IBM AIX, Linux, (administration)

VBA, Internet-Tools, HTML, Java-Script, etc. (development)

Lotus Notes and Domino (administration)

Security Tools, e.g. NMAP, Nessus, Airsnort, (administration)

MS-Office, Project, Access, Visio, etc. (user)

IT standards like COBIT,COSO I, COSO II, ITL, (consulting level)
BS7799, ISO 17799

German legal regulations, e.g. (consulting level)
Bundesdatenschutzgesetz and regulations
of the German IDW (German Institute of
Financial Auditors), e.g. IDW RS FAIT 1, PS330 etc.

Hobbies rowing, biking

Experience Summary

• Eight years experience as an IT system and security auditing and consultance
• Four years experience in system administration and IT operations
• ITIL Service Manager
• Certified Information Systems Auditor
• Expert for IT security, IT infrastructure, and IT process management
• Management of small and medium range projects
• Experience in planning and tracking of project budgets

Main focus

• SAP Basis , SAP Authorisations and SAP GRC
• IT-security, IT-system integration and deployment, IT- and data centre audits
• IT process management, SOX general computer controls
• IT governance, IT security policies

Selected Projects

• Consulting in an SAP GRC deployment project. Definition of Risks, SoD´s, rules etc.
• Managemennt and performance of an SOX attestation audit at a main German mobile phone provider.
• Project audit in respect to operating system, database, and SAP security of SAP deployment projects for companies in the chemistry and pharmaceutical, metals and logistics industries.
• IT-security audits in respect to wireless LAN, infrastructure, and operating system security for a clinical center as well as leading German companies from the metals, insurance and banking industries.
• Data center audits in respect to the physical and environmental security, infrastructure security, and adequateness of the processes and procedures for IT-operations and software development lifecycle for service providers in the insurance and banking industries.
• Moderation of security workshops and development of a security policy for a company in the in the metals industry and for a clinical center.
• Consulting for a metals industry company to achieve the readiness for BS7799 certification.
• Security penetration tests at companies in the energy and mining and metals industries.
• Licensing audits for a big American web-server software manufacturer to assure the adherence with the agreed licensing conditions.