TISAX Experts in Munich
for secure automotive collaboration, matched fast with vetted freelancersHire experts who prepare companies for TISAX assessments, map controls to the VDA ISA catalog and strengthen information security processes across automotive supply chains. FRATCH matches you quickly and precisely with vetted, available freelancers.
Meet FRATCH Experts in Munich, who have recently used TISAX
Andreas Z.
Last position:
Transformation Architect / Business Analyst at IT Consulting
- Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
- Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
- Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
- Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
- Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
- Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
- Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables
Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban
Vicenco K.
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Martin R.
Last position:
TECH DUE DILIGENCE FOR PE, VC & FAMILY OFFICES (UNDER NDA) – AI STRATEGY at PE, VC & family office portfolio companies (confidential, under NDA)
Two parallel workstreams: (1) Tech due diligence for acquisitions and portfolio companies. (2) AI strategy certification and AI governance consulting.
Tech assessments for PE/VC acquisitions: code reviews, architecture analysis, scalability evaluation
Tech assessment frameworks and integration roadmaps for portfolio companies
TÜV SÜD certification program: AI governance, EU AI regulation (EU AI Act)
Strategic AI roadmap development for mid-market companies
Delivered several tech DD reports for investment decisions
Developed integration roadmaps for portfolio companies
TÜV SÜD 'AI Strategy & Application Expert' (expected 04/2026)
Joerg R.
Last position:
Chief Information Officer at CQLT SaarGummi Group
Chief Information Officer with more than two decades of international leadership experience in publicly traded and regulated industrial environments.
Responsible for the structural realignment of complex, long-standing IT organizations to bring transparency, control, and financial stability.
Leading global IT organizations with budgets up to €120 million and up to 320 employees.
Developing and rolling out centrally managed operating models, setting up transparent financial and governance structures, and consistently delivering business-critical platform initiatives (e.g., SAP S/4HANA).
Focused on restoring decision-making, prioritization, and execution power during transformation phases under increased organizational pressure.
Leveraging technology as a strategic tool to increase efficiency, stabilize operations, and support sustainable business development.
Global IT Transformation & Operating Models
SAP S/4HANA & Platform Harmonization
Digital Manufacturing & Industry 4.0
Governance, Compliance & Cyber Resilience
International Organizational Leadership
Sourcing & Location Strategies
Overall responsibility for strategy, governance, budget, and operations of the global IT function with an annual budget of approximately €45 million and an international team of about 95 employees across all locations.
Direct reporting line to the executive management and close strategic coordination with the CFO and COO.
Realigned a historically decentralized IT landscape of 28 legally independent entities and separate budget and control logics into a centrally managed, internationally standardized operating model.
Introduced transparent governance, reporting, and financial structures with clear separation and active management of CapEx and OpEx budgets at the corporate level.
Established group-wide IT financial and performance management with clear investment prioritization, transparent CapEx/OpEx structure, and active portfolio governance to sustainably enhance decision-making at the executive level.
By consistently centralizing, standardizing, and harmonizing platforms (including global rollout of SAP S/4HANA), structural complexity was significantly reduced.
IT cost base was sustainably cut by about 15% while significantly improving performance and service levels and increasing transparency and control for executive management and leadership.
At the same time, strategically expanded the production IT architecture in the context of Industry 4.0 by integrating MES and IoT systems in OEM-related, safety-critical production environments and building audit-ready governance and security structures while meeting regulatory requirements (e.g., automotive standards, TISAX-like frameworks, global compliance rules).
Maintained strict focus on strategically relevant initiatives by clearing parallel projects, reducing redundant structures, and establishing clear responsibilities to noticeably increase speed, commitment, and execution power in the organization.
High international presence with operational responsibility at production sites and an active role as a strategic sparring partner to the executive management.
Nicolas N.
Last position:
Senior Project Manager Digital at BKP GmbH / Mercedes-Benz Driving Events
Responsible for the strategic and operational management of digital platforms in the international environment of Mercedes-Benz Driving Events.
- End-to-end leadership of digital event and e-commerce platforms (webshop, microsites, event pages, on-event mobile apps)
- Interface management between marketing, IT, event management, and external tech partners
- Management of external service providers and development resources
- Introduction and implementation of IT security guidelines
- Successful support and execution of the data protection TISAX assessment
- Budget, timeline, and quality responsibility
Klaus K.
Last position:
Consultant and Trainer, Managing Partner at Opexa Advisory GmbH
- Advising clients on ISO/IEC 27001, TISAX, BSI IT-Grundschutz and GDPR
- Trainer and internal auditor
- Contract management (service and work contracts, framework agreements)
- Coordinating and supporting tender responses
- Developing strategies and measures for clients and new business opportunities (e.g. phishing, online awareness trainings)
- Further developing the governance/risk/compliance offering
- Account management for existing clients and new business acquisition
- Supporting HR with hiring and interviews
Roland S.
Last position:
mediagear GmbH
- Implementation and support of digital transmission of laboratory report data to various practice software systems according to KVB standards
- Ensuring audit-proof archiving of all laboratory reports
- Developing and implementing sustainable optimization measures to increase efficiency in laboratory operations
- Close collaboration with software providers, practice teams, and the Bavarian Association of Statutory Health Insurance Physicians
- Applying agile methods such as Scrum and tools like Jira, Confluence, and MS Office
- Utilizing AI-driven processes to develop innovative solutions
Hans-Peter R.
Last position:
Interim Director Project Management at Heater and air conditioning equipment manufacturer (non-automotive)
- Improved status and performance of the project management department
- Project management "Project Management Excellence"
- Operational coaching in crisis projects
- Root cause analysis
- Developing and implementing improvement measures
- Reporting to Head of R&D
Philipp S.
Last position:
MS365 Consultant/Solution Architect at Self-employed
- Setup and configuration of an M365 tenant on a hybrid basis
- SSO integration of the existing app infrastructure like Metamost, Huhu, etc.
- License consulting, Entra ID initial configuration, MFA, Conditional Access, Privileged Identity Management
- Intune: initial configuration, Windows 11 Autopilot, iPhone AES
- Takeover of the tenant and preparation of a security audit
- Rollout of iPhones with AES (formerly DEP) as COPE (Corporate Owned, Business Enabled)
- Connecting external customers with enhanced security through Conditional Access
- Consulting on cloud-first strategy and migration to a cloud-only business
- Connecting various apps via SSO/SCIM (e.g. Atlassian, Personio, Adobe)
- On-premises AD: security audit and project management for replacing the local AD (migration of file servers, Navision2016, user clients joined to Entra ID)
- Copilot rollout with connection to external data sources and configuration via Intune
- Support for TISAX and ISO27001 preparation
- Setup and hardening of Entra ID, switching MFA to phishing resistant via Conditional Access
- Intune management for Windows and Apple clients, web enrollment switch to AES, introduction of Autopilot, app management, integration of Microsoft Defender
- Building a device baseline for Windows (COBO) and iOS/Android (BYOD)
- Teams/SharePoint Online: access concepts and integration into Teams
- Maintenance and backup of Entra ID and Intune tenants (drift management)
- M365 backup with Veeam
- Extending Conditional Access policies, introduction of Privileged Identity Management with hardware tokens and an on-premises admin tier concept
- Revision of existing GPOs regarding structure, security, and compliance
- Security audit and hardening of on-premises Active Directory and cloud tenant, SAML VPN, PIM introduction
- Support for the HR department in introducing a booking portal and general system engineering administration & security
- Introduction of Conditional Access and passwordless MFA, platform SSO, Defender for macOS/iOS, macOS compliance with Intune, Code2 signature configuration
Discover over 15,000 top freelancers
Statistics of experts using TISAX
Aggregated from the professional profiles of matched freelancers.
Experience
25 years (Germany: 23 years)
Position duration
1.8 years (Germany: 3.1 years)
Positions per freelancer
12
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Banking and Finance, Manufacturing
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
67% (Germany: 85%)
Master's degree or higher
33% (Germany: 44%)
Certifications per freelancer
5 (Germany: 7)
Most common languages
German, English, Spanish
Speak two or more languages
78% (Germany: 95%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Munich using TISAX
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
TISAX experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (89%)
- Banking and Finance (78%)
- Manufacturing (78%)
- Automotive (67%)
- Professional Services (67%)
- Healthcare (44%)
- Education (33%)
- Media and Entertainment (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
TISAX explained
TISAX, or Trusted Information Security Assessment Exchange, is an information security assessment and exchange scheme for the automotive industry. It helps companies demonstrate that they protect sensitive information when working with manufacturers, suppliers and service partners. The framework is based on the VDA ISA catalog and uses assessment results that participating companies can share through the ENX Association exchange.
Automotive use cases
TISAX expertise supports companies that handle product plans, customer data, prototypes, production information or supplier documents. Typical assignments include:
- Preparing for an initial TISAX assessment
- Mapping existing controls to VDA ISA requirements
- Establishing information classification and access rules
- Coordinating remediation across sites and suppliers
- Maintaining evidence for recurring assessments
Ecosystem and controls
Strong professionals connect TISAX requirements with practical security operations. Their work may cover ISO 27001 concepts, the VDA ISA catalog, risk analysis, identity and access management, endpoint protection, encryption, backup, incident response and physical security. They also understand how policies, technical safeguards and documented evidence must support one another.
When to bring in experts
Companies often need freelance support before a customer requests a TISAX label, during a preparation phase or when internal teams lack capacity to close identified gaps. Specialists can establish a clear assessment plan, clarify ownership and turn fragmented documentation into evidence that an assessor can review. In Munich, this is especially relevant for automotive manufacturers, suppliers, software firms and mobility businesses working across complex partner networks.
Collaboration and delivery
A TISAX assignment can combine remote document work with on-site interviews, facility reviews and workshops. Professionals should be comfortable working with security, quality, procurement, production and legal stakeholders. Clear German and English communication may matter when teams, customers and suppliers operate across Germany and international markets.
What strong professionals bring
The best fit is not defined by documentation alone. Look for someone who can interpret VDA ISA questions, test whether controls work in daily operations and explain gaps without creating unnecessary complexity. Strong experts leave behind usable policies, evidence registers, risk decisions and a practical improvement plan. They distinguish between a formal label objective and the broader security capabilities needed to protect automotive information over time.
Frequently asked questions
Quick answers to the questions that come up most around TISAX.
TISAX is used by companies in the automotive value chain to exchange trusted information about information security assessments. It helps organizations show that they manage sensitive data, systems, facilities and suppliers according to the expectations reflected in the VDA ISA catalog.
TISAX is tailored to automotive information security and is built around the VDA ISA assessment catalog and ENX exchange process. ISO 27001 is a broader information security management standard, so companies often use its practices while addressing the automotive-specific requirements of TISAX.
A strong TISAX specialist usually understands risk management, ISO 27001, identity and access management, vulnerability handling, incident response, data protection and supplier security. Experience with evidence management, internal audits and security awareness is also useful.
The right level depends on the assessment scope, the company’s existing controls and the condition of its documentation. A smaller preparation task may need focused support, while a complex automotive supply chain requires a professional who can coordinate several sites, stakeholders and remediation streams.
Much of TISAX preparation can be handled remotely, including document reviews, control mapping, interviews and action tracking. On-site workshops may still help with facility security, operational processes and evidence that is difficult to validate online. German and English may both be relevant in Munich-based projects.
Share the intended assessment scope, relevant locations, customer expectations, existing security policies and any previous findings. It also helps to identify process owners and explain whether the assignment covers preparation, remediation coordination or ongoing evidence management.
Ask the professional to explain how they map VDA ISA requirements to real controls, owners and evidence. High-quality work exposes practical gaps, prioritizes risk and produces documentation that teams can maintain rather than preparing files only for an assessment.
Freelancers working with TISAX may deliver a gap assessment, control mapping, risk register, policy set, evidence plan, remediation backlog or readiness report. They may also facilitate workshops and coordinate responses between internal teams, customers and external assessment participants.
The average hourly rate of freelancers in Munich, Germany who have used TISAX in their recent projects is 130 €, which corresponds to a daily rate of about 1,037 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used TISAX in their recent projects, 67% hold at least a Bachelor's degree and 33% hold at least a Master's degree.
On average, freelancers in Munich, Germany who have used TISAX in their recent projects have 25 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Munich, Germany who have used TISAX in their recent projects are German (100%), English (78%), and Spanish (11%).
The most common industries among freelancers in Munich, Germany who have used TISAX in their recent projects are Information Technology (89%), Banking and Finance (78%), and Manufacturing (78%).
The most common business areas among freelancers in Munich, Germany who have used TISAX in their recent projects are Information Technology (100%), Project Management (89%), and Operations (78%).
Main locations of FRATCH Experts, who have recently used TISAX
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg 
Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Berlin Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
