TISAX Experts in Berlin
for secure automotive collaboration, matched in minutes with vetted and available freelancersHire experts who prepare TISAX assessments, map controls to the VDA ISA catalog and strengthen information security for automotive supply chains. Get precise, fast matching with vetted, available freelancers who fit your project.
Meet FRATCH Experts in Berlin, who have recently used TISAX
Fred K.
Last position:
Project Manager Digital Restructuring at Northrop Grumman LITEF GmbH
Assignment focus: Leading digital restructuring in a highly regulated Defence and Aerospace environment. Focus areas: improving data flows and data quality, introducing paperless data collection in production, integrating machine data for automatic SPC calculation and process control, as well as cybersecurity analyses.
Main objectives:
- Analyze, structure and improve data flows and data quality in production
- Introduce paperless data collection in manufacturing areas
- Integrate machine data for automatic SPC data calculation and process control
- Implement digital restructuring while meeting regulatory requirements in the Defence environment
Measures and results:
- Analyzed and structured existing production data flows as a basis for control and reporting
- Established mechanisms to ensure data quality and availability across manufacturing areas
- Introduced paperless data collection in production — replacing manual and paper-based processes
- Integrated machine data for automatic SPC data calculation (control charts, Cp/Cpk) and real-time process control
- Conducted cybersecurity analyses in the production and IT environments
Area of responsibility: Project management for digital restructuring, paperless production, data management and data quality in a highly regulated Defence and Aerospace environment.
Flamur A.
Last position:
Fractional Chief Information Security Officer at VR Smart Guide GmbH
- Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
- Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
- Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
- Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
- Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
- Implement continuous monitoring solutions to detect and respond to threats in real time.
- Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
- Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
- Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
- Collaborate with project teams to address findings and ensure that security risks are managed effectively.
- Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
- Facilitate a culture of security awareness throughout the organization through training and regular communication.
- Lead security initiatives that align with the organization’s long-term strategic goals.
- Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
- Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.
Albrecht N.
Last position:
Senior Project Manager IT at HAYS Technology Solutions GmbH
- Leasing, lifecycle and process management for Apple iPhones, maintenance and expansion of the MDM system, coordination of leasing, device integration into DEP and MDM, followed by a rollout and hardware swap process, plus a BYOD and Android option
- Migration of the IT ticket system from ManageEngine ServiceDesk Plus to Atlassian Jira Service Management: project management, definition of ticket types, seamless execution according to a detailed timeline, user communication, decommissioning of the old system
- Project lead: SAP interface in workforce management to automate reading of working hours
- Sub-project lead for inventory software EZO AssetSonar: demand management, software selection, procurement
Ali Y.
Last position:
Principal Product Security Engineer at Payrails GmbH
- Defined and executed a comprehensive security roadmap: integrated Shift-Left Security, CNAPP, and DevSecOps principles to streamline secure product development and reduce risk exposure.
- Established a robust threat modeling framework: embedded security into design processes, enabling early identification of vulnerabilities and reducing potential risks.
- Developed a scalable Vulnerability Management program: accelerated detection and remediation of new vulnerabilities, significantly shortening the risk response cycle.
- Enhanced cloud and container security: leveraged advanced tools such as Tetragon to achieve deeper visibility and implement a defense-in-depth strategy.
- Automated security controls within CI/CD pipelines: integrated security measures into the development lifecycle to maintain continuous delivery with robust safeguards.
- Championed cross-functional collaboration: partnered with developers and infrastructure teams to prioritize threats and align remediation efforts, fostering a unified security culture.
- Ensured regulatory compliance and audit readiness: collaborated closely with the InfoSec team to adhere to internal policies and successfully support audits for standards like PCI-DSS and SOC2.
Tino T.
Last position:
Director Technology at Forte Digital Germany
- Leading 20+ staff in development, site reliability engineering, and architecture.
- Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
- Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
- Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
- Developing prototypes for traditional, AI-based, and agentic AI workflows.
Jan K.
Last position:
Consultant for Information Security & Auditor at Kopiasonsulting GmbH
Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures
Discover over 15,000 top freelancers
Statistics of experts using TISAX
Aggregated from the professional profiles of matched freelancers.
Experience
20 years (Germany: 23 years)
Position duration
3.2 years (Germany: 2.9 years)
Positions per freelancer
11 (Germany: 12)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Professional Services, Automotive
Certification focus areas
Information Technology, Quality Assurance, Audit
Bachelor's degree or higher
100% (Germany: 87%)
Master's degree or higher
83% (Germany: 46%)
Doctorate
33% (Germany: 10%)
Certifications per freelancer
6 (Germany: 7)
Most common languages
English, German, Spanish
Speak two or more languages
100% (Germany: 96%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Berlin using TISAX
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
TISAX experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Professional Services (50%)
- Automotive (33%)
- Education (33%)
- Banking and Finance (33%)
- Manufacturing (33%)
- Media and Entertainment (33%)
- Real Estate (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What TISAX covers
TISAX, the Trusted Information Security Assessment Exchange, is a security assessment and sharing scheme for the automotive industry. It helps companies demonstrate that they protect confidential information, prototypes, personal data and connected production environments. The exchange is operated by ENX on behalf of the automotive sector.
VDA ISA foundation
TISAX assessments use the VDA ISA catalog as their control framework. It covers information security governance, risk management, physical security, identity and access management, supplier controls, incident response and business continuity. Specialists translate these requirements into practical evidence, policies and operating procedures.
Typical assignments
- Prepare a company for a TISAX assessment and define its assessment scope
- Perform a gap analysis against relevant VDA ISA requirements
- Build policies, risk registers, control descriptions and evidence repositories
- Coordinate with an approved assessment service provider
- Improve handling of prototypes, customer data and restricted information
Ecosystem and adjacent skills
TISAX work connects governance with daily technology operations. Useful expertise includes ISO 27001 principles, IT service management, data protection, supplier risk, cloud security, endpoint protection, identity management and security awareness. Professionals may also work with GRC tools, document management systems, vulnerability processes and audit-ready reporting.
When companies bring in specialists
Companies often seek freelance support when a customer requests a TISAX label, an assessment scope changes or internal teams lack time to prepare evidence. External specialists can establish ownership, close control gaps and coordinate business, IT, production and procurement stakeholders. In Berlin, collaboration may combine remote work with on-site workshops for offices, laboratories or production-related environments.
What strong professionals deliver
Strong TISAX professionals understand both the formal assessment language and the way automotive companies operate. They distinguish applicable requirements from unnecessary documentation, connect controls to accountable owners and test whether processes work in practice. Look for clear assessment plans, traceable evidence, pragmatic remediation advice and confident communication with assessors, customers and suppliers.
Frequently asked questions
Everything clients usually want to know about TISAX, in one place.
TISAX is used to assess and exchange information about an organisation’s information security maturity within the automotive industry. It gives manufacturers, suppliers and service providers a common way to demonstrate protection for sensitive business information, prototypes and personal data.
TISAX is tailored to automotive information security and uses the VDA ISA assessment catalog. ISO 27001 is a broader information security management standard, so a company may use its management system as a foundation while still addressing TISAX-specific expectations and assessment processes.
A strong TISAX freelancer often combines assessment preparation with ISO 27001, data protection, supplier risk, cloud security, identity management and incident response skills. Familiarity with automotive customer requirements, prototype protection and GRC documentation is also valuable.
The right level of TISAX experience depends on the scope, assessment objective and maturity of the organisation. A focused gap analysis may need a specialist who can work independently, while a complex multi-site programme calls for experience coordinating executives, IT, production, procurement and external assessors.
TISAX preparation can often be completed remotely through interviews, document reviews and evidence tracking. On-site sessions still help when the scope includes offices, laboratories, prototype areas or production environments, especially when controls depend on physical access and local operating practices.
A capable TISAX specialist should clarify the assessment scope, map requirements to owners, identify evidence gaps and maintain a practical remediation plan. They should explain findings in plain language and keep documentation consistent without creating controls that the business cannot operate.
Quality in TISAX work is shown through structured assessment plans, accurate VDA ISA mapping and evidence that reflects real processes. Professionals should be able to describe how they handled stakeholder coordination, sensitive information, corrective actions and communication with an assessment service provider.
A TISAX freelancer in Berlin may work with German automotive companies, international suppliers and distributed security teams. Clear English is often useful for cross-border collaboration, while German can help with local workshops, internal policies and communication with business stakeholders.
The average hourly rate of freelancers in Berlin, Germany who have used TISAX in their recent projects is 109 €, which corresponds to a daily rate of about 875 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used TISAX in their recent projects, 100% hold at least a Bachelor's degree, 83% hold at least a Master's degree, and 33% hold a doctorate.
On average, freelancers in Berlin, Germany who have used TISAX in their recent projects have 20 years of professional experience, with a single engagement typically lasting around 3.2 years.
The most common languages among freelancers in Berlin, Germany who have used TISAX in their recent projects are English (100%), German (83%), and Spanish (17%).
The most common industries among freelancers in Berlin, Germany who have used TISAX in their recent projects are Information Technology (100%), Professional Services (50%), and Automotive (33%).
The most common business areas among freelancers in Berlin, Germany who have used TISAX in their recent projects are Information Technology (100%), Project Management (100%), and Operations (83%).
Main locations of FRATCH Experts, who have recently used TISAX
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Munich Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
