TISAX Auditor - Freelance for On-Call activities in Serbia

Company Description

Bureau Veritas is a global leader in testing, inspection and certification, operating in more than 140 countries. Our Cybersecurity & Information Security teams support organizations in the automotive and mobility supply chain in verifying the maturity of their information security controls, protecting sensitive data, prototypes and intellectual property, and meeting customer requirements.

PROJECT TYPE

Automotive / Cybersecurity & Information Security 

SCOPE OF POSITION

Purpose of the role
Conduct TISAX® assessments on behalf of automotive suppliers and OEM partners, verifying the implementation of information security controls against the VDA ISA catalogue and the applicable Assessment Levels (AL2/AL3).

Key responsibilities

• • Plan and perform on-site and remote TISAX assessments according to the ENX/VDA ISA framework and the assessment scope agreed with the client
  • Review documentation, policies and evidence (ISMS, access control, asset management, physical security, business continuity, supplier management, data protection, prototype protection where applicable)
  • Conduct interviews and walkthroughs with management and operational staff, and verify controls through technical sampling
  • Classify findings (major/minor non-conformities, observations) and draft clear, evidence-based assessment reports
  • Support the client in defining corrective action plans and verifying their effectiveness
  • Register and manage assessment results in the ENX portal in line with ENX procedures and deadlines
  • Maintain confidentiality and impartiality in line with Bureau Veritas independence and ethics requirements
  • Operate on an on-call basis, scheduling spot assignments according to client demand

REQUIRED LANGUAGES

•  Serbian
• English

Type of collaboration: Freelance / self-employed or equivalent, on-call basis, with spot assignments