mgazelle.

Interim management · available immediately

Interim CIO · CTO · CISO

Dr. Mongi Gazelle

C-level interim executive with 30+ years of international leadership and more than 10 completed mandates across banking, industrial manufacturing, retail and aviation. I take on IT and security accountability where it is vacant, overloaded or under regulatory pressure — and hand it back to the line organisation in a governed state.

Focus: regulatory delivery (NIS2, DORA, BaFin/BAIT, ISO 27001), cyber resilience and group-wide transformation programmes. Programme and portfolio budgets of EUR 100M+, across 60 countries, 1,000+ systems and 30,000+ users.

Dr. Mongi Gazelle, Interim CIO, CTO and CISO

Availability

Immediately · worldwide · on site and remote

  • EUR 100M+

    programme and portfolio budgets

  • 30+

    years of leadership in regulated, international environments

  • 100 %

    of critical audit findings closed — BaFin-regulated

  • ISO 27001

    certification achieved, 100 % audit success, 20,000+ users

01 · Mandates

What you bring me in for.

  1. 01

    NIS2 and DORA readiness

    Scope assessment, gap analysis, remediation plan and evidence trail through to audit readiness — including board and supervisory reporting.

  2. 02

    Covering a CIO, CTO or CISO vacancy

    Immediate credibility at board level — with the management board, BaFin, external auditors and internal audit; closure of open audit findings.

  3. 03

    Stabilisation after a security incident

    Containment, segmentation, restoration of operating capability, and durable governance rather than point fixes.

  4. 04

    Cloud, platform and S/4HANA-adjacent transformation programmes

    Target architecture, programme control, vendor management and demonstrable value delivery to the executive board.

  5. 05

    Standing up enterprise architecture and IT governance

    LeanIX-based capability and roadmap management, architecture board, standards and investment transparency.

02 · Career

Career history, condensed.

  1. since 09/2026

    Interim CIO | Interim CTO | Interim CISO

    Interim management · self-employed

    Worldwide, on site and remote.

  2. 01/2025 – 08/2026

    Group Cybersecurity & Application Protection Lead

    Emirates Group, Dubai · permanent role

    F5 BIG-IP to F5 XC with zero downtime; lateral-movement exposure −70 %. IT/OT protection through the war in the Gulf region; threat intelligence, bot defence, observability, machine identities.

  3. 01/2023 – 01/2025

    Interim Head of Digital Transformation

    Sennheiser Group, Wedemark · interim

    15,000+ users, zero GDPR findings, audit effort −50 %. IoT and microcontroller-firmware security, IP protection.

  4. 01/2021 – 01/2023

    Chief Information Security Officer

    Sparda-Bank, Berlin · interim · BaFin-regulated

    100 % of critical audit findings closed, MTTR −15 %.

  5. 06/2019 – 01/2021

    Head of Enterprise Architecture & Digital Transformation Programme

    ALDI Nord, Essen · interim

    Efficiency +25 %, time-to-market −20 %, LeanIX.

  6. 10/2017 – 06/2019

    Global IT Security Programme Lead

    GEA Group, Düsseldorf · interim

    ISO 27001 certified, phishing susceptibility −60 %. Security assessments, information classification and handling.

  7. 01/2015 – 09/2017

    Head of Enterprise Architecture

    Finanz Informatik Solutions Plus · interim

    Sparkassen financial group.

  8. 01/2005 – 01/2015

    Senior Technology, Architecture & Transformation Leadership

    Microsoft Germany

    Client mandates incl. Deutsche Telekom, Swisscom, KPN, Deutsche Post/DHL, Deutsche Bank, Swiss Re, Munich Re, Lufthansa, Mercedes-Benz, Volkswagen · programmes > EUR 30M.

03 · Regulation & standards

The frameworks I deliver against.

  • NIS2
  • DORA
  • BaFin / BAIT / MaRisk
  • KRITIS
  • ISO/IEC 27001
  • ISO 22301
  • NIST CSF
  • TISAX
  • EU AI Act
  • GDPR

Demonstrated in mandates: ISO/IEC 27001 certification achieved, BaFin / BAIT / MaRisk, GDPR with zero findings. Regulatory focus for 2026: NIS2, DORA, the EU AI Act, KRITIS, NIST CSF, TISAX and ISO 22301.

04 · Education

Education & certification.

  • Doctorate — Artificial Intelligence & Digital Transformation Leadership

    Kennedy University, USA · 2023–2025

  • Dipl.-Ing. Electrical Engineering & Dipl.-Ing. Computer Science

    University of Paderborn, Germany · 1992–1996

  • MSc Information Systems Management

    University of Salford, Manchester (UK) · 2021–2023

  • CTO Certification

    MIT Sloan Executive Education, USA

05 · Terms

Languages, availability, terms.

Languages
German, French, Arabic — native · English, Dutch — business fluent
Availability
Immediately · 4–5 days per week · mandates from 3 months
Coverage
Worldwide — on site and remote · willing to travel · interim or permanent
Based in
Rüthen (NRW), Germany · German national · unrestricted right to work across the EU
Day rate
Discussed on call.

06 · Downloads

CV and one-page profile, in four languages.

PDF, status September 2026. References on request.

07 · Send the brief

Tell me the mandate.

The fields below are the minimum I need for a useful first reply — usually within two working days. NDA on request before discovery.

Your brief is read by me only. NDA on request before any discovery call.