TISAX Experts in Berlin
in minutes from over 15,000 CVs with the power of AIHire experts who support TISAX assessments, VDA ISA controls, and evidence preparation for automotive security requirements. They help teams close gaps, document controls, and prepare for customer audits with fast, precise matching to vetted, available freelancers.
Meet FRATCH Experts in Berlin, who have recently used TISAX
Andreas Rühl
Last position:
Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting
Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations
Flamur Abdyli
Last position:
Fractional Chief Information Security Officer at VR Smart Guide GmbH
- Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
- Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
- Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
- Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
- Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
- Implement continuous monitoring solutions to detect and respond to threats in real time.
- Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
- Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
- Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
- Collaborate with project teams to address findings and ensure that security risks are managed effectively.
- Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
- Facilitate a culture of security awareness throughout the organization through training and regular communication.
- Lead security initiatives that align with the organization’s long-term strategic goals.
- Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
- Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.
Albrecht Noack
Last position:
Senior Project Manager IT at HAYS Technology Solutions GmbH
- Leasing, lifecycle and process management for Apple iPhones, maintenance and expansion of the MDM system, coordination of leasing, device integration into DEP and MDM, followed by a rollout and hardware swap process, plus a BYOD and Android option
- Migration of the IT ticket system from ManageEngine ServiceDesk Plus to Atlassian Jira Service Management: project management, definition of ticket types, seamless execution according to a detailed timeline, user communication, decommissioning of the old system
- Project lead: SAP interface in workforce management to automate reading of working hours
- Sub-project lead for inventory software EZO AssetSonar: demand management, software selection, procurement
Ali Yazdani
Last position:
Principal Product Security Engineer at Payrails GmbH
- Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
- Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
- Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
- Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
- Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
- Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
- Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.
Tino Truppel
Last position:
Director Technology at Forte Digital Germany
- Leading 20+ staff in development, site reliability engineering, and architecture.
- Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
- Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
- Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
- Developing prototypes for traditional, AI-based, and agentic AI workflows.
Jan Kopia
Last position:
Consultant for Information Security & Auditor at Kopiasonsulting GmbH
Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures
Discover over 15,000 top freelancers
Statistics of experts using TISAX
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 23 years)
Position duration
3.5 years (Germany: 3.1 years)
Positions per freelancer
8 (Germany: 12)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Professional Services, Education
Certification focus areas
Information Technology, Audit, Quality Assurance
Bachelor's degree or higher
100% (Germany: 85%)
Master's degree or higher
67% (Germany: 41%)
Doctorate
17% (Germany: 9%)
Certifications per freelancer
7
Most common languages
English, German, Persian
Speak two or more languages
100% (Germany: 95%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using TISAX
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
TISAX basics
TISAX stands for Trusted Information Security Assessment Exchange. It is the common assessment scheme used in the automotive supply chain to prove that information security controls are in place. Companies use it to handle customer requirements in a consistent way.
Typical work
- Gap analysis against the VDA ISA catalog
- Scope definition for sites, systems, and services
- Evidence collection for policies, processes, and controls
- Support during assessor questions and follow-up actions
The work often covers access control, supplier handling, data protection, and secure development processes. Strong specialists know how to turn local procedures into clear audit evidence.
Ecosystem and tools
TISAX work is closely tied to the VDA ISA questionnaire, ENX guidance, and internal security management systems. Experts often use GRC tools, ticketing systems, document repositories, and risk registers to keep control evidence traceable.
They also align TISAX tasks with ISO 27001, because many companies already run both programs side by side.
When to bring in help
Companies usually bring in freelance expertise when a TISAX deadline is close, a new site must be added, or a customer asks for stronger proof of controls. Berlin teams in mobility, automotive software, hardware, and supplier networks often need support that can work on-site or remotely.
- First-time TISAX preparation
- Remediation after a failed internal review
- Supplier or site scoping changes
- Audit-ready documentation and process cleanup
What strong specialists do
Good professionals do more than fill in templates. They understand how security controls work in daily operations, ask the right questions, and keep evidence consistent across people, process, and technology.
They also communicate clearly with security, legal, purchasing, and operations teams. That matters when one control depends on several owners.
Berlin hiring context
In Berlin, TISAX work often touches software teams, mobility companies, and suppliers that serve larger automotive customers in Germany and across Europe. English is common in cross-border projects, but German documentation and process reviews are often part of the task.
Freelance specialists help teams move faster without losing control of the scope or the audit trail.
Frequently asked questions
Everything clients usually want to know about TISAX, in one place.
TISAX is used to show that a company meets the information security expectations common in the automotive supply chain. It helps buyers, suppliers, and service providers share a trusted assessment result instead of repeating the same security review for every relationship. In practice, it supports audit preparation, control evidence, and secure handling of customer data.
TISAX is the assessment and exchange scheme, while VDA ISA is the control catalog that many teams work against. ENX operates the scheme, so you may also hear people say ENX TISAX. In day-to-day projects, all three terms often come up together, but they refer to different parts of the same process.
TISAX and ISO 27001 overlap, but they are not the same thing. ISO 27001 is a broad information security management standard, while TISAX focuses on automotive customer requirements and the VDA ISA structure. Many companies use ISO 27001 as a base and then add TISAX-specific scope, evidence, and assessment work.
A strong TISAX specialist understands security controls, risk treatment, and audit evidence, not just policy writing. Useful adjacent skills include ISO 27001, supplier security, access management, business continuity, and secure development processes. Clear stakeholder communication matters just as much as technical depth.
A TISAX project usually needs someone who has already worked through scoping, gap analysis, and evidence preparation in a real environment. The right expert should know how to translate requirements into operating controls and not just into documents. For first-time assessments, senior guidance is especially helpful.
TISAX work can often start remotely, especially for document reviews, control mapping, and evidence preparation. On-site time in Berlin becomes useful when the expert needs to walk through physical security, local processes, or interviews with control owners. Many projects use a mix of both.
Ask whether the TISAX freelancer has handled your type of scope before, such as a site, service, or supplier setup. Check how they approach gap closure, how they document evidence, and whether they can work with German and English stakeholders. A good specialist will explain the audit path clearly and tell you where the real risks are.
Good TISAX work is clear, traceable, and practical. You should see aligned scope, clean evidence, realistic remediation actions, and controls that match how the company actually works. If the output is only a document pack with no operational fit, the quality is not strong enough.
The average hourly rate of freelancers in Berlin, Germany who have used TISAX in their recent projects is 105 €, which corresponds to a daily rate of about 844 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used TISAX in their recent projects, 100% hold at least a Bachelor's degree, 67% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Berlin, Germany who have used TISAX in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 3.5 years.
The most common languages among freelancers in Berlin, Germany who have used TISAX in their recent projects are English (100%), German (83%), and Persian (17%).
The most common industries among freelancers in Berlin, Germany who have used TISAX in their recent projects are Information Technology (100%), Professional Services (67%), and Education (33%).
The most common business areas among freelancers in Berlin, Germany who have used TISAX in their recent projects are Information Technology (100%), Project Management (100%), and Operations (83%).
Main locations of FRATCH Experts, who have recently used TISAX
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Munich Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
