Skip to main content
🇩🇪GDPR-compliant
Hire the best

TISAX Experts in Munich

matched in minutes from over 15,000 CVs with the power of AI

Work with specialists who lead VDA ISA readiness audits, implement automotive information security controls, and secure ENX labels, quickly matched from our network of vetted, available professionals.

Meet FRATCH Experts in Munich, who have recently used TISAX

Verified expert

Andreas Z.

View profile

Senior IT Project Manager · Service Owner · ITSM · SIAM · Operating Models & Governance

München
Andreas Z.

Last position:

Transformation Architect / Business Analyst at IT Consulting

  • Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
  • Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
  • Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
  • Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
  • Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
  • Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
  • Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables

Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban

Verified expert

Vicenco K.

View profile

Interim IT Team Lead / IT Service Management / IT Project Management / Solution Architect

Brunnthal
Vicenco K.

Last position:

ITSM Project Manager (self-employed)

Unified ITSM framework

  • Definition of a company-wide ITSM target picture
  • Introduction of a uniform service structure across all business units

SLA and OLA management

  • Building a standardized SLA framework
  • Definition of service classes (Business Critical, Standard, Low Priority)
  • Introduction of OLAs between internal teams
  • Building meaningful SLA reporting
  • Definition of KPI and service dashboards for business units

Service portfolio management

  • Definition of service descriptions
  • If needed, preparing possible cost and service billing

Ticketing & processes

  • Incident management
  • Uniform ticket categories
  • Standardized prioritization
  • Escalation matrix
  • Automations
  • Self-service optimization

Request fulfillment

  • Service catalog across all business units
  • Approval workflows

Problem management

  • Introduction of root cause analysis
  • Known error database
  • Problem review process

Complete asset management concept

  • Hardware lifecycle management
  • Software lifecycle management
  • Leasing lifecycle
  • Mobile device lifecycle
  • Monitor lifecycle
  • Phone lifecycle

Processes

  • Procurement
  • Goods receipt
  • Inventory
  • Assignment
  • Return
  • Disposal
  • Leasing return Goal: single source of truth for all assets

CMDB design

  • Definition of all configuration items:
  • Workplace
  • Notebooks
  • Monitors
  • Mobile phones
  • Printers

Infrastructure

  • Servers
  • Firewalls
  • Switches
  • WLAN
  • Storage
  • Backup systems

Cloud

  • Azure resources
  • Microsoft 365
  • SaaS services

Relationships

  • User ↔ Asset
  • Asset ↔ Service
  • Service ↔ Infrastructure
  • Location ↔ Asset
  • Goal: make all service dependencies visible

Software asset & license management

  • License management concept
  • License balancing
  • Compliance reporting
  • Microsoft license management
  • Adobe license management
  • SaaS management
  • Contract management
  • Renewal management

Interfaces & automation Existing systems

  • Workday
  • Joiner
  • Mover
  • Leaver

TESMA

  • Leasing data
  • Contract data

Matrix42

  • Asset synchronization
  • User synchronization

Active Directory / Entra ID

  • User management

Microsoft 365

  • License assignment
  • Group management

Dormakaba

  • Access processes

  • Lifecycle services

Monitoring platforms

  • PRTG
  • Palo Alto
  • Cisco

Reporting & KPI framework

  • Definition of a management dashboard
  • KPIs
  • Ticket volume
  • SLA fulfillment
  • MTTR
  • First resolution rate
  • Asset accuracy
  • License compliance
  • Change success rate
  • Service availability
  • Degree of automation

Network redesign support

  • Governance
  • Support of the network redesign from an ITSM point of view
  • Definition of affected services
  • Change management structure
  • Communication concept

CMDB integration

  • Recording of all network components
  • Service mapping
  • Dependency analysis

Validation of documentation and knowledge base articles

  • Network documentation
  • Operations documentation
  • Standard changes

Monitoring & event management

  • Target picture
  • Central monitoring concept
  • Event management process
  • Alerting strategy
  • Escalation model

Systems

  • Cisco

  • Palo Alto

  • Fortinet

  • Rubrik

  • Veeam

  • Matrix42

  • Azure

  • Microsoft 365 Automation

  • Ticket creation from monitoring

  • Escalations

  • Standard actions

Audit, compliance & information security

  • ISO 27001 consulting
  • TISAX consulting
  • NIS2 preparation - consulting
  • Audit-ready processes
  • Documentation structure
  • Evidence tracking in Matrix42

Roadmap

  • 12-month roadmap
  • Prioritization of all measures
  • Quick wins
  • Medium-term projects
  • Long-term target picture
  • Documentation
Verified expert

Hans-Peter R.

View profile

Interim Director Project Management

Starnberg
Hans-Peter R.

Last position:

Interim Director Project Management at Manufacturer of heating and climate control equipment (non-automotive)

  • Improved the status and performance of the project management unit
  • Project leadership for “Project management excellence”
  • Operational coaching in crisis projects
  • Root cause analysis
  • Development and implementation of improvement measures
  • Reporting to Head of R&D
Verified expert

Joerg R.

View profile

Chief Information Officer

München
Joerg R.

Last position:

Chief Information Officer at CQLT SaarGummi Group

  • Chief Information Officer with more than two decades of international leadership experience in publicly traded and regulated industrial environments.

  • Responsible for the structural realignment of complex, long-standing IT organizations to bring transparency, control, and financial stability.

  • Leading global IT organizations with budgets up to €120 million and up to 320 employees.

  • Developing and rolling out centrally managed operating models, setting up transparent financial and governance structures, and consistently delivering business-critical platform initiatives (e.g., SAP S/4HANA).

  • Focused on restoring decision-making, prioritization, and execution power during transformation phases under increased organizational pressure.

  • Leveraging technology as a strategic tool to increase efficiency, stabilize operations, and support sustainable business development.

  • Global IT Transformation & Operating Models

  • SAP S/4HANA & Platform Harmonization

  • Digital Manufacturing & Industry 4.0

  • Governance, Compliance & Cyber Resilience

  • International Organizational Leadership

  • Sourcing & Location Strategies

  • Overall responsibility for strategy, governance, budget, and operations of the global IT function with an annual budget of approximately €45 million and an international team of about 95 employees across all locations.

  • Direct reporting line to the executive management and close strategic coordination with the CFO and COO.

  • Realigned a historically decentralized IT landscape of 28 legally independent entities and separate budget and control logics into a centrally managed, internationally standardized operating model.

  • Introduced transparent governance, reporting, and financial structures with clear separation and active management of CapEx and OpEx budgets at the corporate level.

  • Established group-wide IT financial and performance management with clear investment prioritization, transparent CapEx/OpEx structure, and active portfolio governance to sustainably enhance decision-making at the executive level.

  • By consistently centralizing, standardizing, and harmonizing platforms (including global rollout of SAP S/4HANA), structural complexity was significantly reduced.

  • IT cost base was sustainably cut by about 15% while significantly improving performance and service levels and increasing transparency and control for executive management and leadership.

  • At the same time, strategically expanded the production IT architecture in the context of Industry 4.0 by integrating MES and IoT systems in OEM-related, safety-critical production environments and building audit-ready governance and security structures while meeting regulatory requirements (e.g., automotive standards, TISAX-like frameworks, global compliance rules).

  • Maintained strict focus on strategically relevant initiatives by clearing parallel projects, reducing redundant structures, and establishing clear responsibilities to noticeably increase speed, commitment, and execution power in the organization.

  • High international presence with operational responsibility at production sites and an active role as a strategic sparring partner to the executive management.

Verified expert

Nicolas N.

View profile

Senior Digital Leader

München
Nicolas N.

Last position:

Senior Project Manager Digital at BKP GmbH / Mercedes-Benz Driving Events

Responsible for the strategic and operational management of digital platforms in the international environment of Mercedes-Benz Driving Events.

  • End-to-end leadership of digital event and e-commerce platforms (webshop, microsites, event pages, on-event mobile apps)
  • Interface management between marketing, IT, event management, and external tech partners
  • Management of external service providers and development resources
  • Introduction and implementation of IT security guidelines
  • Successful support and execution of the data protection TISAX assessment
  • Budget, timeline, and quality responsibility
Verified expert

Klaus K.

View profile

Consultant and Trainer, Managing Partner

Munich
Klaus K.

Last position:

Consultant and Trainer, Managing Partner at Opexa Advisory GmbH

  • Advising clients on ISO/IEC 27001, TISAX, BSI IT-Grundschutz and GDPR
  • Trainer and internal auditor
  • Contract management (service and work contracts, framework agreements)
  • Coordinating and supporting tender responses
  • Developing strategies and measures for clients and new business opportunities (e.g. phishing, online awareness trainings)
  • Further developing the governance/risk/compliance offering
  • Account management for existing clients and new business acquisition
  • Supporting HR with hiring and interviews
Verified expert

Roland S.

View profile

IT/Digital Consultant and Project Manager (Dipl.-Ing. FH)

München
Roland S.

Last position:

mediagear GmbH

  • Implementation and support of digital transmission of laboratory report data to various practice software systems according to KVB standards
  • Ensuring audit-proof archiving of all laboratory reports
  • Developing and implementing sustainable optimization measures to increase efficiency in laboratory operations
  • Close collaboration with software providers, practice teams, and the Bavarian Association of Statutory Health Insurance Physicians
  • Applying agile methods such as Scrum and tools like Jira, Confluence, and MS Office
  • Utilizing AI-driven processes to develop innovative solutions
Verified expert

Philipp S.

View profile

MS365 Consultant/Solution Architect

München
Philipp S.

Last position:

MS365 Consultant/Solution Architect at Self-employed

  • Setup and configuration of an M365 tenant on a hybrid basis
  • SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
  • License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
  • Intune: initial configuration, Windows 11 Autopilot, iPhone AES
  • Takeover of the tenant and preparation of a security audit
  • Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
  • Connecting external customers with enhanced security through Conditional Access
  • Consulting on cloud-first strategy and migration to a cloud-only business
  • Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
  • On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
  • Copilot rollout with connection to external data sources and configuration via Intune
  • Support for TISAX and ISO27001 preparation
  • Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
  • Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
  • Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
  • Teams/SharePoint Online: access concepts and integration into Teams
  • Maintenance and backup of Entra ID and Intune tenants (drift management)
  • M365 backup with Veeam
  • Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
  • Revision of existing GPOs regarding structure, security, and compliance
  • Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
  • Support for the HR department in introducing a booking portal and general system engineering administration & security
  • Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration

Discover over 15,000 top freelancers

Statistics of experts using TISAX

Aggregated from the professional profiles of matched freelancers.

Experience

25 years (Germany: 23 years)

TISAX experts in Munich have 25 years of professional experience on average. It is 2 years more than in Germany, where the average stands at 23 years.

Position duration

1.9 years (Germany: 2.9 years)

TISAX experts in Munich stay in a single position for 1.9 years on average. It is 1 year less than in Germany, where the average stands at 2.9 years.

Positions per freelancer

12

TISAX experts in Munich have completed 12 positions on average over the course of their careers.

Top business areas

Information Technology, Project Management, Operations

TISAX experts in Munich have gathered most of their hands-on project experience in Information Technology, Project Management, and Operations.

Top industries

Information Technology, Automotive, Banking and Finance

TISAX experts in Munich are most in demand in Information Technology, Automotive, and Banking and Finance.

Certification focus areas

Information Technology, Project Management, Audit

TISAX experts in Munich earn their certifications most often in Information Technology, Project Management, and Audit.

Bachelor's degree or higher

67% (Germany: 87%)

67% of TISAX experts in Munich hold at least a Bachelor's degree. It is 20% lower than in Germany, where the rate stands at 87%.

Master's degree or higher

33% (Germany: 46%)

33% of TISAX experts in Munich hold at least a Master's degree. It is 13% lower than in Germany, where the rate stands at 46%.

Certifications per freelancer

5 (Germany: 7)

TISAX experts in Munich hold 5 professional certifications on average. It is 2 fewer than in Germany, where the average stands at 7.

Most common languages

German, English, Czech

TISAX experts in Munich most often speak German, English, and Czech.

Speak two or more languages

78% (Germany: 96%)

78% of TISAX experts in Munich speak two or more languages. It is 18% lower than in Germany, where the rate stands at 96%.

Based on our profile pool as of 29 Oct 2026.

Daily rate distribution

0% 25% 50% 75% 100%
22% of TISAX experts in Munich charge less than €800 per day.
44% of TISAX experts in Munich charge between €800 and €1200 per day.
11% of TISAX experts in Munich charge between €1200 and €1600 per day.
22% of TISAX experts in Munich charge €1600 or more per day.
<€800 €800-​1200 €1200-​1600 €1600+

The chart shows how the daily rates of experts in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.

Average rates of experts in Munich using TISAX

Rates are based on recent contracts and do not include FRATCH margin.

1200
900
600
300
Rate comparison chart
Daily rate avg. 1045 €
Germany avg. 990 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1200
900
600
300
Rate comparison chart
Median rate 1000 €
Germany median 1000 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.

TISAX experts industry focus

See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.

  • Information Technology (89%)
  • Automotive (78%)
  • Banking and Finance (78%)
  • Manufacturing (78%)
  • Professional Services (67%)
  • Healthcare (44%)
  • Education (33%)
  • Media and Entertainment (33%)

Please note that freelancers can work across multiple industries, so percentages overlap.

About the technology

Standardized Automotive Information Security Assessment

Trusted Information Security Assessment Exchange establishes a common standard for information security across the automotive supply chain. Governed by the ENX Association and grounded in the VDA ISA catalog, it eliminates duplicate audits by creating recognized assessment levels. Organizations achieve defined labels covering data protection, prototype parts handling, and third-party connection security.

Core Assessment Objectives and Security Scopes

Specialists prepare organizations for defined assessment levels based on supplier risk and data classification.

  • Information security evaluations mapped to ISO/IEC 27001 foundations
  • Prototype protection for physical testing facilities and vehicle components
  • Connection to third parties for secure supply chain communication
  • Data privacy modules aligned with European and German regulatory mandates

The Munich Automotive and Supplier Ecosystem

Munich serves as a central hub for major vehicle manufacturers, engineering service providers, and mobility software vendors. Local suppliers and technology partners frequently face strict contractual mandates to publish assessment labels on the ENX portal before entering procurement pipelines. Freelance specialists assist Bavarian businesses with on-site facility audits and hybrid compliance roadmaps.

Deliverables of Information Security Implementations

Specialists design the documentation and operational controls necessary for audit verification. They establish Information Security Management Systems, draft policy frameworks, harden network segments, and train employees. Their work culminates in addressing non-conformities, orchestrating corrective action plans, and liaising directly with accredited audit providers during formal reviews.

Key Competencies in Assessment Readiness

Experienced professionals combine deep familiarity with the VDA ISA questionnaire with pragmatic technical execution. They understand physical access management, secure software development lifecycles, and cryptographic standards. Strong candidates demonstrate a track record of guiding Tier 1 and Tier 2 suppliers through successful assessment cycles without operational disruption.

When Organizations Require External Expertise

Companies hire external professionals when entering Tier-level automotive contracts or facing renewal deadlines with strict timelines. Outside specialists spot compliance gaps early, preventing costly audit failures and remediation delays. They provide immediate technical guidance, allowing internal engineering and security teams to focus on everyday product delivery.

Published on:
FRATCH GPT

FRATCH GPT delivers freelancer proposals with clear reasoning and transparent pricing in minutes, helping your hiring department quickly and compliantly find the best talent.

Give it a try:

Try FRATCH GPT

Frequently asked questions

Quick answers to the questions that come up most around TISAX.

The TISAX framework standardizes information security assessments across the automotive supply chain. Governed by the ENX Association, it allows suppliers to share verified audit results through a central platform, eliminating redundant proprietary audits for vehicle manufacturers.

While ISO/IEC 27001 certifies a general information security management system, Trusted Information Security Assessment Exchange tailors controls specifically to automotive risks. It builds directly on the VDA ISA catalog, adding strict requirements for prototype protection and inter-company connections that general audits do not inspect.

Munich is home to premier German vehicle manufacturers and extensive mobility tech corridors that require immediate TISAX labels before awarding production contracts. Local specialists help suppliers meet precise original equipment manufacturer mandates quickly, supporting physical site visits and German-language documentation requirements.

Specialists generally guide organizations through Assessment Level 2 or Assessment Level 3 under TISAX. Level 2 relies on plausible evaluations and remote interviews, whereas Level 3 involves rigorous on-site verification, which is standard for companies handling highly confidential prototypes.

Much of the policy creation and documentation under TISAX proceeds effectively in remote setups. However, when prototype protection or physical facility security is part of the scope, specialists usually perform on-site inspections at Munich premises to evaluate barriers, cameras, and badge access controls.

A competent VDA ISA specialist brings expertise in cloud security architecture, network segmentation, and identity governance. Familiarity with GDPR, incident management systems, and secure coding guidelines ensures that technical controls hold up during thorough audit inspections.

Achieving an exchange label through TISAX usually spans three to six months depending on baseline maturity. An experienced professional accelerates gap analysis, remediation, and pre-audits, ensuring the company is completely ready before the accredited audit provider begins evaluation.

Review whether the expert has successfully accompanied previous assessments resulting in published labels on the ENX portal. Strong professionals clearly explain specific catalog differences between standard versions, provide structured corrective action plans, and speak fluent German and English for seamless audit coordination.

The average hourly rate of freelancers in Munich, Germany who have used TISAX in their recent projects is 131 €, which corresponds to a daily rate of about 1,045 € based on an 8-hour working day.

Of the freelancers in Munich, Germany who have used TISAX in their recent projects, 67% hold at least a Bachelor's degree and 33% hold at least a Master's degree.

On average, freelancers in Munich, Germany who have used TISAX in their recent projects have 25 years of professional experience, with a single engagement typically lasting around 1.9 years.

The most common languages among freelancers in Munich, Germany who have used TISAX in their recent projects are German (100%), English (78%), and Czech (11%).

The most common industries among freelancers in Munich, Germany who have used TISAX in their recent projects are Information Technology (89%), Automotive (78%), and Banking and Finance (78%).

The most common business areas among freelancers in Munich, Germany who have used TISAX in their recent projects are Information Technology (100%), Project Management (89%), and Operations (78%).

Main locations of FRATCH Experts, who have recently used TISAX

Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.

Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg

Request a free demo

Get in touch with the FRATCH team and we will get back to you within 4 hours.

Contact form

Would you rather directly get in touch?
We always have the time for a call or email!

FRATCH CEO avatar

Philipp Thomaschewski

FRATCH CEO

LinkedInFRATCH