Essential Duties & Responsibilities

Duties and responsibilities include the following. Other duties may be assigned.  It is expected that each of the duties listed below will be performed to the highest standards of quality, while striving for maximum customer satisfaction, and continually look for ways to improve the methods, practices and procedures within the area.  Further, a positive work atmosphere must, also, be promoted through professional and effective conduct and communications with customers, clients, suppliers, and employees.  

TISAX Program Management

• Owns and leads the TISAX program, including planning, execution, certification, and ongoing maintenance.
• Acts as the main point of contact for all TISAX-related internal and external stakeholders, including auditors, certification bodies, consultants, and internal business partners.
• Coordinates internal IT teams, business functions, and external vendors to ensure timely and successful completion of TISAX requirements.
• Tracks project milestones, risks, and remediation plans, reports status, risks, and progress to management.

Information Security & Compliance

• Develops, documents, implements, and maintains information security policies, processes, and procedures aligned with TISAX and related frameworks.
• Identifies information security risks, control gaps, and remediation actions, and coordinates mitigation efforts.
• Ensures compliance with TISAX, ISO 27001, and other applicable information security standards and requirements.
• Supports internal and external audits, assessments, and reviews related to information security and TISAX certification.

Stakeholder & Business Collaboration

• Partners closely with IT, business leaders, and site representatives to align TISAX activities with operational and business needs.
• Facilitates clear, consistent communication related to program expectations, timelines, and responsibilities.
• Provides guidance to stakeholders on TISAX and information security requirements.

Project & Program Support

• Manages additional IT and information security projects as assigned, applying standard project management practices.
• Supports continuous improvement initiatives related to cybersecurity, risk management, and compliance processes.

Miscellaneous (Non-Supervisory)

• Acts as a good steward of the Company’s resources and exemplifies the values of the Company.
• Ensures personal compliance with all Company policies, procedures, values, ethics, and rules.
• Maintains and promotes a safe work environment through ownership of Company safety program.  This includes following all safety rules/regulations and proper operating procedures, as well as the proper use of prescribed safety equipment pertinent to the department and immediately reporting all accidents/incidents to supervisor. 
• Supports the Company’s equal employment opportunity and affirmative action policy and actions, immediately reporting violations to supervisor and/or the Human Resources representative.
• Ensures that work area is free from any form of harassment (sexual, racial, religious, etc.), immediately reporting violations to supervisor and/or the Human Resources representative.
• Supports Company’s quality and environmental policies and programs and meets quality requirements specified for position.  Meets quality requirements specified by production drawings, bills of materials, control plans, policies, work instructions, and procedures.
• Actively participates in and successfully completes appropriate training.  As appropriate, submits documentation of specific training to support successful completion (i.e. course description, certificate; Training Completed/Evaluation Form).
• Meets with supervisor at least once per year to review job performance using this job description as a basis for appraisal.
• Maintains complete security and confidentiality of all Company records and employee data.
• Maintains a clean, orderly and professional work environment.
• Performs other miscellaneous duties as may be assigned.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.  The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 2-5 years of experience in IT project or program management.
• Experience working with information security management systems (ISMS).
• Experience with audits, assessments, and security frameworks such as TISAX, ISO 27001, and/or NIST.
• Strong understanding of information security, risk management, and compliance principles.
• Proven ability to manage complex projects with multiple stakeholders.
• Strong organizational, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently, manage priorities, and meet deadlines.
• High level of ownership, reliability, and attention to detail.