// IT Consultant · Freelancer · Interim CIO · ISO 27001 Auditor

Your IT strategy. Clear. Secure. Future-proof.

Strategy meets experience: We give your IT wings!

Dr. Martin Zambaldi is a freelance IT consultant and interim manager for companies in Germany, Austria, Switzerland, and Northern Italy. Focus areas: NIS2, ISO 27001, IT strategy, digitalization, and IT project management.

25+ years of management experience & IT expertise
ISO
27001
Lead
Auditor
VOREST AG · 2026
ISO
42001
Implementer
AI-MS
DGQ · 2026
Dr. Martin Zambaldi
MAZ Digital Consulting
25+Years of IT management
3+2Academic & ISO certifications
100%Independent & vendor-neutral
DE · IT · ENTrilingual consulting

My services

As an independent IT consultant, I stand on my clients' side – without product interests or conflicts of interest.

🧭

IT Strategy & Governance

Development of a company-specific IT strategy, evaluation of new technologies (incl. AI), and support for strategic IT decisions at management level.

⚙️

Process Digitalization & ITIL

Analysis, revision, and digitalization of business processes following ITIL best practices. Structured requirements gathering and software selection.

🔒

IT Security & ISO 27001

Guidance toward ISO 27001 certification, NIS2 implementation, and building security infrastructure (SOC, BCM).

📋

Project Management & PMO

Management of IT projects including change management and stakeholder engagement. Building PMO structures.

🤝

Vendor Management & Tenders

Commissioning, steering, and monitoring of external IT service providers. Experience with tenders into the millions.

🤖

AI Compliance & ISO 42001

Building AI management systems per ISO/IEC 42001. Compliance strategies for the EU AI Act.

🧩

Data Protection & Compliance

Data Protection Impact Assessments (Art. 35 GDPR), records of processing activities (Art. 30), and Data Processing Agreements – practical, not just paperwork.

Hourly/daily rate upon request

Three topics that matter now

These three areas currently bring most companies to me – all with regulatory deadlines that are already running or fast approaching.

Mind the deadline

Does NIS2 affect you?

NIS2 obligates significantly more companies to minimum IT security standards – with personal liability for management. From assessment to full implementation.

NIS2 Supplier Risk Checklist → Article on the NIS2 situation → Check applicability →
Mind the deadline

Does the AI Act affect you?

The AI Act obligates companies, depending on the risk class of their AI applications, to staggered requirements – from transparency obligations to full conformity assessment for high-risk systems. The first deadlines already apply, with further ones phased in through 2027.

AI Act risk classification → Check applicability →
Mind the deadline

Does the CRA already affect you?

The Cyber Resilience Act obligates manufacturers of connected products to report actively exploited vulnerabilities – the first reporting obligation has already applied since 11 September 2026. From the applicability assessment to full implementation of the security requirements by the end of 2027.

Clarify CRA reporting obligation → Check applicability →

Products & services

From the free self-assessment to a concrete engagement – horizontally by topic area, vertically by Free, Focus service and other services. Hover or tap for details.

🧭IT Strategy⚙️Processes & ITIL🔒Security & ISO 27001📋Projects & PMO🤝Vendors🤖AI & ISO 42001🧩Data Protection
Free
IT Strategy Checklist

10 questions to assess in 5 minutes where your IT strategy stands – and where action is needed most.

View for free →
NIS2 Supplier Risk Checklist

10 questions to assess in 5 minutes the NIS2 security risk of an IT supplier.

View for free →
Vendor Lock-in Checklist

10 questions to assess in 5 minutes your dependency risk on an IT vendor – switching costs, data portability, exit options.

View for free →
AI Governance Checklist

10 questions to assess in 5 minutes where you stand on the EU AI Act and ISO 42001.

View for free →
Focus
IT Strategy Workshop

A one- to two-day workshop with senior management to develop a prioritized, actionable IT strategy.

Inquire →
Interim CIO / Head of IT

Temporary IT leadership during vacancies, transition phases, or capacity shortages – both operational and at management level.

Inquire →
Software Selection & Tender Support

Structured requirements gathering, market screening, and tendering when introducing new software – from requirements to contract negotiation.

Inquire →
Internal ISO 27001 Audit

Conducting the internal audit as an independent, certified Lead Auditor – including audit report and nonconformity management.

Inquire →
ISO 27001 Certification Support

Structured guidance from gap analysis through to certification readiness – practical, not paper-pushing.

Inquire →
IT Project Support

Technical guidance and quality assurance for ongoing IT projects – from requirements clarification to go-live, independent of the contracted vendor.

Inquire →
IT Vendor & Supplier Management Review

Review of existing IT vendor contracts and management, with recommendations for consolidation and cost control.

Inquire →
AI Strategy Development

Developing a company-specific AI strategy: identifying and prioritizing meaningful use cases and aligning them with your compliance requirements.

Inquire →
AI Guideline for Your Company

A customized AI guideline (Standard or Extended with the Cyber Resilience Act) with concrete recommendations for management and staff.

Inquire →
Internal ISO 42001 Audit

Internal audit of your AI management system by a certified ISO/IEC 42001 Implementer – including audit report.

Inquire →
Data Protection Impact Assessment (DPIA)

Conducting a Data Protection Impact Assessment (DPIA) under Art. 35 GDPR for high-risk processing such as AI systems, video surveillance, or profiling – including an action plan.

Inquire →
Other services
Board & Committee Briefings on IT Security and Compliance

Focused briefings for boards and senior management on IT security and regulatory compliance – explained clearly for non-technical audiences.

Inquire →
Digitalization of Processes and Workflows

Analysis of existing business processes and development of a concrete digitalization plan following ITIL best practices – from current-state assessment to implementation support.

Inquire →
Building an IT Service Catalog

Structuring and documenting the IT services offered, including SLAs, for greater transparency toward business departments.

Inquire →
NIS2 Applicability & Gap Analysis

Clarifying whether and how your company falls under the EU NIS2 Directive, comparing this against your current state, and a prioritized action plan with deadlines.

Inquire →
Business Continuity Planning (BCM)

Developing a business continuity plan so your company is prepared for IT outages and security incidents.

Inquire →
Information Security Awareness Training

Hands-on security awareness training on phishing, social engineering, and safe everyday behavior – often a mandatory element of ISO 27001 and NIS2.

Inquire →
Setting Up a PMO

Designing and implementing a PMO structure with standards, reporting, and escalation paths for greater transparency across ongoing IT projects.

Inquire →
Interim IT Project Leadership

Temporary operational project leadership during capacity shortages or critical project phases.

Inquire →
Independent IT Review / Second Opinion

Neutral assessment of existing IT systems, contracts, or vendor decisions before a major investment – with no product interests, only yours.

Inquire →
Tender Preparation & Award Support

Preparation of specifications and tender documents, support through to contract signature.

Inquire →
AI Act / CRA Applicability Consulting

Clarifying which obligations under the EU AI Act and Cyber Resilience Act specifically apply to your company and products – with a prioritized action plan.

Inquire →
Record of Processing Activities (Art. 30 GDPR)

Creating or updating the record of processing activities – often the first concrete step toward GDPR compliance.

Inquire →
Data Processing Agreements (DPA)

Reviewing and drafting Data Processing Agreements (DPAs) with service providers and cloud vendors.

Inquire →
Dr. Martin Zambaldi
2013 · Univ. Salzburg
MBA International Executive (summa cum laude)
2008 · Univ. Paderborn
Ph.D. Computer Science (magna cum laude)
2000 · TU München
Dipl.-Ing. Electrical & Information Engineering

Dr. Martin Zambaldi

As a freelance IT consultant based in Neumarkt (South Tyrol), I combine deep technical know-how with many years of leadership and management experience. My approach is always independent, pragmatic, and focused on tangible client benefit.

After my career at Infineon/Siemens in Munich, my Ph.D., and an Executive MBA, I led IT departments in South Tyrol's public administration and most recently as Head of IT at Raiffeisenverband Südtirol.

Currently certified as ISO 27001 Lead Auditor (VOREST AG, until June 2029) and ISO/IEC 42001 Implementer (DGQ). Active in the DACH region and Northern Italy.

IT StrategyNIS2ISO 27001ISO 42001ITILProject ManagementAI & DigitalizationData ProtectionPublic Management

How we work together

A clear path from the first inquiry to a concrete solution – with no commitment before you know where you stand.

1

Free initial consultation

In a non-binding 30-minute conversation we get to know each other and I provide an initial assessment.

2

Analysis of your situation

Together we capture the current state of your IT, identify risks and define key areas for action.

3

Concrete proposal

You receive a clear, transparent proposal – you decide without pressure whether and how we begin.

Voices from career and academia

// Recommendations from fellow students and former colleagues (LinkedIn)

"Dr. Zambaldi was my fellow student in the MBA. Very efficient, serious, quick to grasp things and actively participating. Always helpful – a committed team player."

ES
Eva Stainer
Program Management, SMBS

"Martin is extremely people friendly and always patient. Excellent interpersonal skills – it was a great pleasure working with him."

SR
Sudhakar Reddy Amireddy
Senior Engineering Manager, Intel

"Excellent team management, decision making and risk analysis skills. His supportive efforts made the true difference in achieving the project milestones."

RG
Ravindra Ganti
Co-Founder, XgenSilicon Inc.

"Martin is an interesting and understanding colleague, very approachable. His engagement in training sessions is amazing – an enthusiastic learner."

CK
Chandra Kypa
SVP Global Delivery, SmartSoCs

„It was a great pleasure for me to work with Dr. Martin Zambaldi at Raiffeisenverband Südtirol. Martin combines professional expertise with an exceptionally pleasant and appreciative way of dealing with people.

As Head of the IT and Organization department, he always had an open ear for concerns, thought in a solution-oriented way, and looked for possibilities even where standard approaches reached their limits. I particularly valued his willingness to take on responsibility and his strong personal commitment to finding good solutions – often far beyond what would have been expected.

His team was clearly close to his heart. He fostered collaboration, treated people as equals, and created an environment where people enjoyed working together on challenges.

Anyone who worked with Martin gains a reliable, creative, and committed partner who thinks strategically, acts pragmatically, and approaches even complex challenges with foresight.“

KL
Klaus Ladurner
Recruiting, Raiffeisenverband Südtirol

"I had the pleasure of working with Martin in two different contexts in the IT world: first as a colleague, and later with him as my coordinator. In both roles, he consistently demonstrated strong commitment and a focus on teamwork. During the period in which he was my coordinator, I particularly appreciated his servant-leader approach: always oriented toward supporting the team."

FT
Fabio Tirapelle
Project Management Consultant

"I had the pleasure of working with Dr. Martin Zambaldi for several years, appreciating his professionalism and utmost correctness. A colleague who is always available, precise, and well-prepared."

VB
Virna Bussadori
Head of Asset Management Department

"Dr. Zambaldi was my fellow student in the MBA. Very efficient, serious, quick to grasp things and actively participating. Always helpful – a committed team player."

ES
Eva Stainer
Program Management, SMBS

"Martin is extremely people friendly and always patient. Excellent interpersonal skills – it was a great pleasure working with him."

SR
Sudhakar Reddy Amireddy
Senior Engineering Manager, Intel

"Excellent team management, decision making and risk analysis skills. His supportive efforts made the true difference in achieving the project milestones."

RG
Ravindra Ganti
Co-Founder, XgenSilicon Inc.

"Martin is an interesting and understanding colleague, very approachable. His engagement in training sessions is amazing – an enthusiastic learner."

CK
Chandra Kypa
SVP Global Delivery, SmartSoCs

„It was a great pleasure for me to work with Dr. Martin Zambaldi at Raiffeisenverband Südtirol. Martin combines professional expertise with an exceptionally pleasant and appreciative way of dealing with people.

As Head of the IT and Organization department, he always had an open ear for concerns, thought in a solution-oriented way, and looked for possibilities even where standard approaches reached their limits. I particularly valued his willingness to take on responsibility and his strong personal commitment to finding good solutions – often far beyond what would have been expected.

His team was clearly close to his heart. He fostered collaboration, treated people as equals, and created an environment where people enjoyed working together on challenges.

Anyone who worked with Martin gains a reliable, creative, and committed partner who thinks strategically, acts pragmatically, and approaches even complex challenges with foresight.“

KL
Klaus Ladurner
Recruiting, Raiffeisenverband Südtirol

"I had the pleasure of working with Martin in two different contexts in the IT world: first as a colleague, and later with him as my coordinator. In both roles, he consistently demonstrated strong commitment and a focus on teamwork. During the period in which he was my coordinator, I particularly appreciated his servant-leader approach: always oriented toward supporting the team."

FT
Fabio Tirapelle
Project Management Consultant

"I had the pleasure of working with Dr. Martin Zambaldi for several years, appreciating his professionalism and utmost correctness. A colleague who is always available, precise, and well-prepared."

VB
Virna Bussadori
Head of Asset Management Department

Professional experience

Over 25 years of IT practice at management level.

Since October 2025
Freelance IT Consultant
MAZ Digital Consulting · Neumarkt (BZ)
Independent strategic IT consulting in the DACH region and Northern Italy. ISO 27001 Lead Auditor and ISO 42001 Implementer.
2019 – 2025
Head of IT & Head of Organization
Raiffeisenverband Südtirol · Bolzano
Overall responsibility for IT strategy, budget, security infrastructure (SOC, NIS2, ISO 27001), MS365 migration, and compliance.
2009 – 2018
Director of Public Administration
Landesverwaltung Südtirol / SIAG · Bolzano
2009–2014 · Director, Office for Geographic and Statistical Information Systems: GIS, statistics, cartography, Interreg projects, PMO setup. Executive MBA (Univ. Salzburg, 2013).

2012–2018 · Head of Support & Contract Management: Contract management, tenders into the millions, ITIL processes.
2000 – 2009
Various management positions
Infineon Technologies AG · Munich
Requirements management, technical project leadership, international collaboration (USA, India). 8 patents. Ph.D. Univ. Paderborn (2004–2008).
📰
New · Article September 2026

Three Countries, One Autumn: How Far NIS2 Really Is in Italy, Austria and Germany

A comparison of NIS2 implementation in Italy, Austria and Germany – deadlines, authorities, and what it means for companies active in all three countries.

Read the article →
📰
Article August 2026

Digital Sovereignty: What's Really Behind the Buzzword

Legal situation, four assessment criteria, and case studies from the DACH region, France and Italy.

Read the article →

Let's talk about your project.

I look forward to your inquiry – whether for a concrete project or an initial consultation.

📞
Phone / WhatsApp +39 335 1315264
📍
Location

Andreas Hofer Straße 7
39044 Neumarkt (BZ), South Tyrol – Italy

🌍
Area of operation

DACH region & Northern Italy · Remote worldwide

Schedule a consultation

In a non-binding 30-minute conversation, I explain my approach and we explore how I can support your company.

Request free consultation