Skip to content
rude.one

Freelance web & software developer

Websites that do not just look good — they work.

I build digital products from the first sketch to the running server: design, frontend, backend, AI integration and the processes behind them. And because I am responsible for information security at a group operating in six countries, security here is not a checkbox ticked afterwards.

Discuss a project See my work
01 Work

Selected work

4 shown · 10 under NDA

Four projects, four very different demands — from an AI-driven shop to a law firm at the German Federal Court of Justice.

All work
02 InfoSec

Information Security Officer

Pixida · since 2024

Since 2024 I have been responsible for information security across a group of around 600 people at sites in Germany, Brazil, Portugal, the USA, China and the United Arab Emirates — holding ISO 27001, TISAX, SOC 2 and NIS2. On top of that comes a GRC tool I build myself, which by now covers thirteen standards.

People
~600 People
Countries
6 Countries
Standards owned
4 Standards owned
Standards in the platform
13 Standards in the platform
Locations
  • DE
  • BR
  • PT
  • US
  • CN
  • AE

Owned by me

  • ISO 27001
  • TISAX
  • SOC 2
  • NIS2

Audits led and supported with: DEKRA (Germany) · Johanson Group LLP (USA)

In-house build

GRC platform — built from the ground up

No off-the-shelf product covered what a group with six sites and a dozen parallel standards actually needs. So I built the platform myself — from the data model through backend and interface to the permission concept and operations. By now it covers what elsewhere requires a licensed specialist application.

  • SvelteKit
  • TypeScript
  • Node.js
  • PostgreSQL
  • AWS
  • M365
  • SCF

Governance & evidence

  • Risk management with assessment and follow-up
  • Opportunities and risks in one register
  • Controls across thirteen standards
  • Committees, meetings and minutes
  • Audit evidence management

Workflows

  • Software approval workflows
  • Tasks with owners and deadlines
  • Onboarding for new staff
  • Annual planner and QM calendar
  • Policies with approval and validity

Integration

  • Microsoft 365 and SharePoint
  • AWS environment
  • Calendar integration
  • Role-based access control

Reporting

  • Dashboards with key figures
  • Exports for auditors and management
  • The Secure Controls Framework (SCF) as the basis for cross-standard consolidation

Additionally covered by the platform

  • ISO 9001
  • ISO 14001
  • ISO 27017
  • ISO 27018
  • ISO 27701
  • ISO 42001
  • IATF 16949
  • IEC 62443
  • C5:2020
03 Agency

Agency years

anfema · 2015 – 2024

As lead frontend engineer at the agency anfema in Munich and Augsburg I led a team of permanent developers, working students and freelancers. These projects were built during that time.

See all projects →
  • anfema
  • MYSTAFFPILOT
  • Boston Consulting Group
  • Knauf
  • RECRUITEER
  • Lokato
  • HAIR HAUS
  • BMW
  • Audi
  • IDnow
  • Pingonaut
  • Takeda
  • Zurich
  • Paulaner
  • Unitymedia Kabel BW
  • CLX Europe
  • Seven.One Entertainment
04 Services

What I do

10 areas

One point of contact for the whole journey: concept, design, build, integration, operation.

Web design & UI

Design that fits the subject: a law firm at the Federal Court of Justice needs a different tone than a shop for 3D figurines. I design both — from concept to finished interface.

Frontend development

Fast, server-rendered interfaces built with SvelteKit and TypeScript. No framework ballast, no loading spinners for content that could simply be there.

Backend & interfaces

Everything that has to happen behind the interface: APIs, data models, authentication, payment handling and integration with systems that already exist.

Information security & GRC

In my day job I am responsible for information security across a group of around 600 people in six countries, taking it through ISO 27001, TISAX, SOC 2 and NIS2. That knowledge feeds into every project — and is available as standalone consulting.

Cloud security (AWS)

A cloud environment is set up quickly — and opened up too far just as quickly. I build and review network architectures in which only what should be reachable actually is.

TYPO3 development

TYPO3 where it belongs: with editorial teams that publish a lot and often. I build site packages that fit the editors — instead of editors having to fit the CMS.

All services
05 Process

How I work

  1. 01

    Understand the actual problem

    Before a single line of code: what should the site achieve, for whom, and how will we know it worked? These questions save the expensive loops later on.

  2. 02

    Design and build as one

    Because design and build sit in the same pair of hands, nothing is lost in handover — and there is no debate about what is "unfortunately not possible".

  3. 03

    Integrate, do not duplicate

    A website is rarely alone. It has to talk to CRM, production, newsletters and accounting — otherwise it creates exactly the manual work it was meant to remove.

  4. 04

    Hand over and stay available

    You get a system your team can maintain itself. And me as the person to call when something needs to be added after all.

Got a project that needs someone who can do both?

Drop me a line about what you have in mind. A first assessment is free — even if it does not turn into a project.

Discuss a project hallo@rude.one