Thorsten, how did you come to Xella? 

I discovered the position at Xella rather by chance—at a time when I was looking for a new professional direction. I had previously worked in various large industrial companies and was searching for an environment where Cyber Security is taken seriously—not just technically, but culturally. The job posting immediately appealed to me, and my first conversation with my manager confirmed that impression: here, security is not treated as a side issue. 

What attracted you most to the role at Xella?

The opportunity to build a Cyber Defense Department consisting of CSIRT and Information Security and to continuously develop it—a team that not only reacts to incidents but works proactively and thinks strategically. Cyber Security for us is a very broad field that goes far beyond IT security and information security. It’s about processes, people, data spaces—and how we as an organization deal with risks.

How do you define Cyber Security compared to IT or Information Security?

IT security is a sub-area of information security that focuses on technical protective measures. Information security goes further and also considers aspects of physical security—for example, how classified paper documents are handled in our offices. Cyber Security combines these two disciplines and gives us a complete picture of physical and digital threats, enabling us to design the protection of data spaces at Xella with a future-oriented approach. Cyber Security therefore affects all areas where information is processed, stored, or transmitted. It’s clearly about holistic protection concepts—there’s no room for silo thinking.

Which topics are currently most important to you?

A key topic is dealing with Artificial Intelligence. The development is rapid—comparable to the rise of the Internet. AI is here to stay, and we must learn to handle it responsibly. That means recognizing risks, setting guardrails, and rethinking authorization concepts. Because AI can also hallucinate—generate false information—and that is a security concern.

What do you expect from colleagues when it comes to Cyber Security?

More awareness and active thinking. Everyone is part of the first line of defense. If something seems off—whether it’s an unusual email or technical behavior—report it. There are no wrong questions. The cyber world is evolving extremely fast, and we must keep pace as an organization. That’s only possible together.

How did you originally get into information security?

My entry point was in 2005 with the German Armed Forces, where I was trained in computer forensics. It was very hands-on and court-proof—not standard solutions, but individual analyses. I learned there that forensics is often more art than science. You have to think unconventionally and put yourself in the attacker’s shoes. “Know your enemy”—that’s still my guiding principle today.

And privately—what moves you outside of work?

Movement is a central principle of life for me. I have a private pilot’s license for helicopters, which I obtained in 2001 in the USA—shortly after the September 11 attacks. It was an intense time, but also a great adventure. Flying means freedom to me. I’ve logged over 500 flight hours and also earned a sailing license in Germany. Movement—whether in the air, on the water, or in thinking—is essential for me.

What do you want to achieve at Xella?

I see many people at Xella who truly want to make a difference—not only in their own field but beyond. This attitude is special. It creates space for new ideas and for a culture where security, responsibility, and innovation are thought of together. I want to help make Cyber Security a natural part of this movement.