Role Purpose & Context
Role Summary
The Integrated Management Systems Director Manager is responsible for overseeing our entire IMS team and making sure our quality, environmental, health & safety, and compliance systems are not just ticking boxes, but actually working for the business. You'll be the one who makes sure our systems are robust enough to handle anything, from a surprise audit to a new regulatory change. This directly impacts our operational efficiency, our reputation with customers, and frankly, whether we get fined or not.
You'll sit at the intersection of our operational teams and senior leadership, translating complex regulatory requirements into practical, everyday processes. You'll also manage our relationships with the vendors who supply our IMS software, making sure we're getting the best value and functionality.
When this role is done well, our operations run smoothly, our audit results are consistently excellent, and our colleagues feel empowered, not burdened, by our systems. When it's not, we risk major non-conformances, regulatory penalties, and a damaged reputation. The challenge is getting everyone on board and seeing the value in what we do, even when it feels like bureaucracy. The reward is knowing you're building a truly resilient and responsible organisation.
Reporting Structure
- Reports to: Director, Integrated Management Systems
- Direct reports: Roughly 10-25 people, including a few IMS Leads and Specialists
- Matrix relationships:
Head of IMS, Quality & Compliance Systems Manager, Senior IMS Lead,
Key Stakeholders
Internal:
- Business Unit Heads (Operations, Manufacturing, Supply Chain)
- Legal & Regulatory Affairs
- Finance Leadership
- HR Leadership
- IT & Infrastructure Teams
External:
- External Certification Bodies (e.g., BSI, SGS)
- Regulatory Authorities (e.g., HSE, Environment Agency)
- IMS Platform Vendors
- Key Clients (for quality assurance discussions)
Organisational Impact
Scope: This role directly shapes the organisation's ability to maintain its ISO certifications, meet regulatory obligations, and operate safely and efficiently. You'll influence how we manage risk, respond to incidents, and continuously improve our processes, which ultimately protects our brand, reduces operational costs, and helps us win new business through demonstrating robust systems.
Performance Metrics
Quantitative Metrics
- Metric: Cost of Poor Quality (COPQ) Reduction
- Desc: Reducing the costs associated with failures, appraisals, and prevention activities related to quality.
- Target: Target: 15% reduction year-on-year across key operational areas.
- Freq: Measured: Quarterly, reported to Management Review.
- Example: If last year's COPQ was £1M, you'd aim to bring it down to £850K through better process control and fewer rework incidents.
- Metric: Leading Indicator Engagement Rate
- Desc: Increasing the proactive reporting of safety observations, near misses, and quality improvement suggestions.
- Target: Target: 25% increase in submissions across all sites annually.
- Freq: Measured: Monthly, by site and department.
- Example: If we had 100 near-miss reports last month, you'd be looking for 125 next month, showing a more proactive safety culture.
- Metric: External Audit Non-Conformance (NC) Count
- Desc: The number of major and minor non-conformances identified during external certification and surveillance audits.
- Target: Target: Zero major NCs; maximum of 2 minor NCs per audit cycle.
- Freq: Measured: After each external audit (typically annually for surveillance, triennially for recertification).
- Example: Successfully completing our ISO 9001, 14001, and 45001 surveillance audits with no major findings and only one minor observation.
- Metric: IMS Platform Uptime & Data Accuracy
- Desc: Ensuring our EHSQ/GRC platforms are consistently available and the data within them is reliable for reporting.
- Target: Target: >99.5% uptime; <1% data entry error rate.
- Freq: Measured: Monthly for uptime; quarterly for data accuracy audits.
- Example: Our Intelex system was available for 99.8% of operational hours last quarter, and a spot check of incident reports showed 0.5% errors.
- Metric: Team Development & Retention
- Desc: Growing the capabilities of your direct reports and keeping them engaged.
- Target: Target: 80% team retention; 100% completion of individual development plans.
- Freq: Measured: Annually during performance reviews and talent calibration.
- Example: All your IMS Leads completed their Lead Auditor training this year, and no one left the team for external opportunities.
Qualitative Metrics
- Metric: Stakeholder Trust & Influence
- Desc: Being seen as a trusted advisor, not just a 'compliance police' officer, whose input is sought on strategic decisions.
- Evidence: You're regularly invited to business unit leadership meetings, not just for audit updates. Operational managers actively seek your advice on process changes before implementation. Your team's recommendations are consistently adopted without significant pushback. People actually listen when you talk about risk.
- Metric: Proactive Risk Management Culture
- Desc: Shifting the organisation from reactive problem-solving to proactive identification and mitigation of risks.
- Evidence: You'll see a noticeable increase in early warning indicators being reported. Business units are conducting their own risk assessments more frequently and effectively. Leadership discussions move from 'what went wrong?' to 'how do we prevent it?'. Your team is seen as a partner in preventing issues, not just fixing them.
- Metric: System Effectiveness & User Adoption
- Desc: Ensuring the IMS is genuinely embedded in daily operations and seen as a useful tool, not a burden.
- Evidence: User feedback surveys show high satisfaction with the IMS platforms. Training completion rates are high. You'll see evidence of continuous improvement ideas coming from front-line staff using the system. People are using the system because it helps them, not just because they have to.
- Metric: Strategic Vendor Partnership
- Desc: Building strong, mutually beneficial relationships with our IMS platform providers.
- Evidence: Our vendors see us as a key client and are responsive to our needs. We're getting early access to new features and influencing product roadmaps. Contract renewals are smooth, and we're getting good value for money. You're not just a customer; you're a partner.
Primary Traits
- Trait: Process-Minded Architect
- Manifestation: You naturally see the big picture of how different systems connect, but you can also dive into the nitty-gritty of a workflow diagram. You're the person who looks at a chaotic situation and immediately starts thinking about the steps, controls, and documentation needed to make it repeatable and auditable. You're frustrated by ad-hoc, 'wing it' approaches because you know they lead to mistakes and audit findings. You'll design a robust system that can stand up to scrutiny, then make sure your team builds it that way.
- Benefit: Our entire Compliance, Quality, Health & Safety framework relies on well-defined, integrated processes. As a Manager, you're not just following them; you're designing them and ensuring your team implements them correctly. Without this, our IMS would be a collection of disconnected systems, making us vulnerable to non-conformances and operational inefficiencies. You're building the backbone of our operational integrity.
- Trait: Influential Leader
- Manifestation: You can get a busy Operations Director to understand why a new safety procedure is crucial, not just a bureaucratic hurdle. You build relationships across departments, earning trust so that when you ask for changes, people listen and act. You're great at explaining the 'why' behind a compliance requirement, linking it directly to business value like avoiding fines or winning new contracts. You're not afraid to challenge the status quo, but you do it in a way that brings people along, rather than alienating them. This means you'll often be coaching your team on how to do the same.
- Benefit: This role isn't about having direct authority over every department, it's about leading through influence. You need to persuade managers and teams to adopt new procedures, embrace system changes, and prioritise compliance, even when they're stretched for time and resources. Your ability to get buy-in determines whether our IMS is truly embedded or just a paper exercise. You're essentially selling the value of compliance every single day, both internally and through your team.
- Trait: Resilient & Objective
- Manifestation: You can deliver tough news—like a major audit finding or a serious incident report—without getting flustered or taking pushback personally. When a business unit pushes back hard on a new control, you remain calm, present the facts, and find a pragmatic solution. You can absorb pressure from external auditors, internal stakeholders, and even your own team without letting it affect your judgment. You don't get defensive; you focus on the solution. You'll also be teaching your team how to develop this thick skin.
- Benefit: Frankly, this job can be tough. You and your team are often the bearers of 'bad news'—non-conformances, incident investigations, audit findings. You'll face constant 'audit fatigue' and resistance from operational teams who see compliance as a burden. If you (or your team) can't handle the pressure and remain objective, you'll burn out quickly, and the effectiveness of our IMS will suffer. We need someone who can stand firm, navigate conflict, and keep the focus on improvement, no matter what.
Supporting Traits
- Trait: Pragmatic Problem-Solver
- Desc: You know when to stick rigidly to a standard and when a 'good enough' solution keeps the business moving without compromising safety or compliance. You're not a purist for the sake of it; you find practical ways to meet requirements.
- Trait: Diplomatic Communicator
- Desc: You can phrase difficult feedback or explain complex regulatory jargon in a way that encourages action, not defensiveness. You're skilled at navigating organisational politics and building bridges, especially when your team needs to deliver challenging messages.
- Trait: Meticulously Detailed
- Desc: You spot the missing signature on a critical form, the inconsistency in a procedure, or the slight deviation from an ISO clause that could lead to an audit failure. You expect this from your team too, and you'll review their work with a keen eye.
- Trait: Patient Culture Builder
- Desc: You understand that changing organisational habits and embedding a true culture of quality, safety, and compliance takes years, not months. You're in it for the long haul, celebrating small wins and steadily driving continuous improvement through your team.
Primary Motivators
- Motivator: Building Robust Systems & Processes
- Daily: You'll get a real kick out of designing a new workflow in Intelex that automates a previously manual compliance check, or seeing a new document control process finally click for the whole organisation. You love seeing a well-oiled machine.
- Motivator: Driving Continuous Improvement
- Daily: You're always looking for ways to make things better, safer, or more efficient. This means analysing audit findings to spot systemic weaknesses, coaching your team on new RCA techniques, and pushing for proactive changes that prevent issues before they happen.
- Motivator: Developing & Leading a High-Performing Team
- Daily: You thrive on mentoring your IMS Leads and Specialists, helping them grow their skills, tackle complex problems, and become more effective auditors and system owners. Seeing your team succeed and take on more responsibility is a big win for you.
Potential Demotivators
Honestly, this job isn't for everyone. If you need constant external validation or get easily frustrated by bureaucracy, you'll find it tough. You're often fighting an uphill battle to justify investment in 'non-revenue generating' activities, and you'll spend a lot of time chasing people for overdue actions. The 'compliance police' stigma can be draining if you take it personally.
Common Frustrations
- The annual battle to justify budget for systems and headcount for a function that doesn't directly generate revenue – it's seen as an 'insurance policy' cost.
- The 'check-box' mentality from some managers and employees who do the bare minimum to pass an audit, completely missing the spirit of continual improvement.
- Chasing overdue CAPAs: Spending an inordinate amount of time reminding senior managers to complete corrective actions they were assigned months ago.
- The chaos of trying to merge a newly acquired company's non-existent or completely different management system into your own – it's often a post-acquisition nightmare.
- Getting 'audit fatigue' from operational teams when you announce yet another internal audit, and the struggle to keep them engaged and cooperative.
What Role Doesn't Offer
- A quiet, predictable routine – expect urgent issues and shifting priorities.
- Direct control over operational teams – you'll need to influence, not command.
- Immediate, tangible revenue generation – your impact is more about risk reduction and efficiency gains.
- A role where everyone immediately understands and appreciates the value of compliance – you'll often have to educate and advocate.
ADHD Positives
- The constant variety of challenges, from incident investigations to system improvements, can be engaging and prevent boredom.
- The need for quick problem-solving and adapting to urgent issues can suit a fast-thinking mind.
- Hyperfocus can be incredibly useful when diving deep into complex audit findings or system configurations.
ADHD Challenges and Accommodations
- Managing multiple ongoing projects and ensuring all CAPAs are tracked can be a challenge; we use robust IMS platforms (like Intelex) with strong task management features and can offer dedicated admin support.
- Detailed documentation and report writing might require more effort; we encourage the use of AI drafting tools and provide templates.
- Meetings can be frequent; we can offer flexible meeting schedules and provide agendas in advance to help with focus.
Dyslexia Positives
- Strong conceptual thinking and ability to see patterns in complex systems (e.g., identifying systemic risks) are highly valued.
- Excellent verbal communication skills, often found in dyslexic individuals, are crucial for influencing stakeholders and leading a team.
- The ability to think 'outside the box' for process improvements can be a significant asset.
Dyslexia Challenges and Accommodations
- Extensive report writing and documentation are a core part of the role; we provide access to proofreading software, AI writing assistants, and can offer support for final reviews.
- Reading dense regulatory texts can be time-consuming; we encourage using AI summarisation tools and offer audio-to-text options.
- We can provide coloured overlays or screen filters, and allow for flexible formatting in documents.
Autism Positives
- A deep commitment to accuracy, logic, and adherence to standards (like ISO) is a massive strength in this role.
- The ability to identify patterns and inconsistencies in data or processes is invaluable for auditing and risk management.
- A preference for clear, structured processes and systems aligns perfectly with the nature of IMS work.
Autism Challenges and Accommodations
- Social interactions, especially influencing diverse stakeholders, can be demanding; we can provide coaching on communication styles and support in challenging meetings.
- Unexpected changes or urgent demands might be stressful; we aim for clear communication on priorities and provide as much advance notice as possible.
- Sensory considerations: We offer a quiet office environment, noise-cancelling headphones, and flexibility for remote work when possible.
Sensory Considerations
Our main office environment is typically open-plan but we offer quiet zones and dedicated focus rooms. There's a moderate level of ambient noise, but we're happy to provide noise-cancelling headphones. Visual stimuli are standard office levels. Social interaction is frequent, especially in team meetings and cross-departmental discussions, but we're mindful of individual preferences and offer hybrid working options.
Flexibility Notes
We believe in output over presence. We offer flexible working hours and a hybrid model (typically 2-3 days in the office) to help you manage your work-life balance and create an environment where you can do your best work. We're open to discussing individual needs and making reasonable adjustments.
Key Responsibilities
Experience Levels Responsibilities
- Level: Integrated Management Systems Director Manager (L5)
- Responsibilities: Lead and mentor a team of 10-25 IMS professionals (including IMS Leads and Specialists), fostering a culture of continuous improvement and high performance. This means regular 1-to-1s, performance reviews, and active coaching.
- Own the strategic relationship with our primary IMS platform vendors (e.g., Intelex, Cority, ServiceNow GRC). This includes contract negotiations, roadmap discussions, and ensuring the platforms meet our evolving business needs.
- Define and oversee the annual internal and external audit programme across all sites and ISO standards. You'll ensure we're always audit-ready and that any non-conformances are addressed effectively and promptly.
- Drive the continuous improvement of our IMS, identifying systemic weaknesses from audit findings, incident reports, and risk assessments. You'll champion projects that enhance our processes and controls.
- Manage the IMS department's budget (typically £500K-£2M), ensuring resources are allocated effectively and justifying expenditure to senior leadership. You'll need to be savvy about showing ROI.
- Represent the organisation in key external engagements related to IMS, such as discussions with regulatory bodies, industry working groups, or major client audits. You're our public face for these systems.
- Report regularly to the Director and other senior leaders on the performance of the IMS, including key metrics, significant risks, and progress on strategic initiatives. They'll expect clear, concise updates and actionable insights.
- Supervision: You'll report to the Director, Integrated Management Systems, with monthly strategic alignment meetings. For day-to-day operations and team management, you're largely self-directed and expected to make independent decisions within your domain.
- Decision: You have full authority over the IMS function's operational decisions, including budget allocation up to £500K, hiring and performance management within your team, and vendor selection for smaller tools (under £100K). Strategic direction for the IMS and major platform changes require alignment with the Director and relevant business unit heads. You'll own the design of new organisational processes related to IMS.
- Success: Your success will be measured by the consistent achievement of our ISO certifications with minimal non-conformances, a demonstrable reduction in the Cost of Poor Quality, high engagement in our proactive safety/quality programmes, and the overall effectiveness and positive perception of the IMS across the organisation. A well-developed, motivated team that delivers consistent results is also key.
Decision-Making Authority
- Type: IMS Strategy & Roadmap
- Entry: Propose minor improvements to a specific process.
- Mid: Recommend changes to a project's approach based on data.
- Senior: Design and implement new IMS modules or significant process changes within a workstream.
- Type: Budget & Resource Allocation
- Entry: Track personal expenses against a project budget.
- Mid: Estimate resource needs for a small project.
- Senior: Manage a project budget up to £50K, making recommendations on resource allocation.
- Type: Team Management & Development
- Entry: Focus on personal learning and development.
- Mid: Provide informal guidance to new joiners.
- Senior: Mentor 1-2 junior team members, providing technical guidance and feedback.
- Type: External Vendor & Partner Management
- Entry: Follow up on support tickets with vendors.
- Mid: Escalate minor vendor issues to senior team members.
- Senior: Manage relationships with specific vendors for a project, ensuring deliverables are met.
ID:
Tool: CAPA & NC Automation Assistant
Benefit: Imagine AI drafting initial Non-Conformance reports from audit notes, suggesting root causes based on historical data, and even auto-generating reminders for overdue Corrective and Preventive Actions. This isn't science fiction; it's happening. You'll spend less time on manual follow-up and more time ensuring systemic issues are truly resolved.
ID:
Tool: Predictive Risk Hotspotting
Benefit: AI can analyse incident, near-miss, and observation data across all our sites to identify emerging trends and predict which locations or processes are most likely to have a future event. This means you can direct your team's audit and training resources to actual high-risk areas, rather than just doing uniform sampling. It's about being proactive, not reactive.
ID: ⚖️
Tool: Regulatory Change Summariser
Benefit: Forget spending hours sifting through dense legal documents. AI can scan regulatory databases and legislative updates relevant to our industry and locations, giving you concise summaries of changes. It'll even flag which internal policies and procedures in our document control system might be impacted. You'll be ahead of the curve, not playing catch-up.
ID: ✍️
Tool: Audit & Management Review Scribe
Benefit: AI can generate first drafts of internal audit reports by structuring notes and evidence from your team. For your critical Management Review meetings, it can synthesise KPI data from various dashboards into a draft executive summary, highlighting key trends and areas for discussion. This streamlines your most time-consuming documentation tasks, letting you focus on the narrative and strategic implications.
You could realistically save 15-25 hours weekly, depending on how much you lean into these tools and encourage your team to do the same.
Weekly time savings potential
We typically invest around £50-150/month per user for these AI-powered tools, but the ROI in time saved and risk mitigated is huge.
Typical tool investment
Competency Requirements
Foundation Skills (Transferable)
Beyond the technical know-how, a successful IMS Director Manager needs a solid set of foundational skills. These are the bedrock upon which all other competencies are built, ensuring you can lead, communicate, and solve problems effectively.
- Category: Leadership & People Management
- Skills: Team Leadership: You'll inspire and guide your team, setting clear expectations, delegating effectively, and fostering a collaborative environment. This means being a coach, not just a boss.
- Performance Management: Conducting regular 1-to-1s, setting SMART goals, providing constructive feedback, and managing performance issues fairly and decisively.
- Talent Development: Identifying skill gaps within your team, creating development plans, and actively mentoring individuals to grow their careers within IMS.
- Conflict Resolution: Mediating disagreements within your team or between your team and other departments, finding common ground and constructive solutions.
- Category: Strategic Thinking & Planning
- Skills: Strategic Vision: Developing a long-term vision for our IMS that aligns with the organisation's overall business strategy and anticipates future regulatory changes.
- Operational Planning: Translating that vision into actionable plans, setting clear objectives for your team, and managing resources effectively to achieve them.
- Risk-Based Decision Making: Making sound judgments under pressure, weighing potential risks and rewards, especially when balancing compliance with operational demands.
- Problem Structuring: Breaking down complex, ambiguous problems into manageable components and guiding your team through the problem-solving process.
- Category: Communication & Influence
- Skills: Executive Presentation: Delivering clear, concise, and compelling presentations to senior leadership and the board, often on complex technical or compliance matters.
- Negotiation & Persuasion: Influencing stakeholders across the organisation to adopt new processes or prioritise compliance initiatives, even without direct authority.
- Stakeholder Engagement: Building and maintaining strong relationships with internal and external partners, from operational managers to external auditors and regulators.
- Active Listening: Truly understanding the concerns and needs of your team and other departments, which is crucial for designing effective and adopted systems.
- Category: Adaptability & Resilience
- Skills: Change Management Leadership: Guiding your team and the wider organisation through significant changes to our IMS, ensuring smooth transitions and managing resistance.
- Pressure Handling: Remaining calm and effective when faced with urgent regulatory demands, critical audit findings, or significant incidents.
- Continuous Learning: Staying abreast of new technologies, regulatory changes, and best practices in IMS, and encouraging your team to do the same.
- Dealing with Ambiguity: Thriving in situations where the path forward isn't always clear, and helping your team navigate uncertainty.
Functional Skills (Role-Specific Technical)
These are the bread-and-butter skills for an IMS Manager. You'll need to be an expert in the core methodologies and the specific tools we use, guiding your team and making strategic decisions about their application.
Technical Competencies
- Skill: ISO Standards Interpretation & Strategic Implementation
- Desc: You'll need deep, practical knowledge of ISO 9001 (Quality), ISO 14001 (Environmental), ISO 45001 (Health & Safety), and often ISO 27001 (InfoSec). This isn't just about knowing the clauses; it's about strategically designing and integrating these systems so they work together seamlessly, rather than as siloed, tick-box exercises. You'll guide your team on how to apply these standards effectively across diverse business units.
- Level: Expert
- Skill: Enterprise Audit Programme Management (ISO 19011)
- Desc: This means overseeing the entire internal and external audit programme. You'll define the annual audit schedule, ensure your team plans and executes audits effectively, and manage relationships with external certification bodies (e.g., BSI, SGS, DNV). You're accountable for ensuring readiness for surveillance and recertification audits, and for the quality of audit reports and findings.
- Level: Expert
- Skill: Advanced Root Cause Analysis (RCA) & Corrective Action Design
- Desc: Moving beyond basic 5 Whys, you'll guide your team in systematically investigating complex incidents and non-conformances using methods like Fishbone (Ishikawa) Diagrams, Fault Tree Analysis, and FMEA. More importantly, you'll ensure that the resulting Corrective and Preventive Actions (CAPAs) are robust, address systemic issues, and prevent recurrence, not just quick fixes.
- Level: Advanced
- Skill: Strategic Risk Management Frameworks (ISO 31000, COSO)
- Desc: You'll be an expert in developing, maintaining, and evolving our enterprise risk registers. This involves guiding your team in conducting risk assessments using methodologies like Bowtie Analysis, and ensuring a clear differentiation between hazards, risks, and controls. You'll also integrate risk management into strategic planning and decision-making processes.
- Level: Expert
- Skill: Process Improvement & System Optimisation (Lean/PDCA)
- Desc: You'll use the Plan-Do-Check-Act cycle as the engine for continual improvement across our IMS. This means applying Lean principles to eliminate waste from compliance processes, using tools like Value Stream Mapping to visualise and optimise workflows, and coaching your team on how to drive efficiency without compromising compliance.
- Level: Advanced
- Skill: Integrated Management System (IMS) Architecture & Design
- Desc: This is about how all our systems fit together. You'll be responsible for designing the overall structure of our IMS, ensuring seamless integration between quality, environmental, health & safety, and information security components. You'll make sure the system is efficient, avoids duplication, and provides a 'single source of truth' for all compliance data.
- Level: Expert
Digital Tools
- Tool: Intelex, Cority, VelocityEHS, Enablon (EHSQ/IMS Platforms)
- Level: Strategic/Architect
- Usage: Leading platform selection (RFP process), owning the technology roadmap for IMS, negotiating contracts with vendors, and ensuring the platform's configuration supports our strategic objectives.
- Tool: ServiceNow GRC, LogicGate, Archer GRC Suite (GRC Platforms)
- Level: Strategic
- Usage: Architecting the enterprise risk framework within the platform, ensuring alignment with COSO/ISO 31000, and integrating GRC with other business systems to provide a holistic view of risk and compliance.
- Tool: Power BI, Tableau (BI & Reporting)
- Level: Strategic
- Usage: Defining enterprise-wide CQHS KPIs and leading indicators, presenting compelling data stories to the board and senior leadership, and ensuring robust data governance for all IMS reporting.
- Tool: SharePoint, Confluence, Veeva QualityDocs (Document Control & Collaboration)
- Level: Strategic
- Usage: Setting enterprise document management policy, selecting platforms for controlled vs. uncontrolled information, and ensuring our document control system meets regulatory and audit requirements.
- Tool: AuditBoard, TeamMate+, Workiva (Audit Management Platforms)
- Level: Strategic
- Usage: Overseeing the entire internal/external audit programme via the platform, using it to track findings and CAPAs at an enterprise level, and reporting audit committee summaries.
- Tool: Diligent Boards, Nasdaq Boardvantage (Executive/Board Reporting Platforms)
- Level: Strategic
- Usage: Directly managing the CQHS section of board packs, using the platform to communicate with directors on critical risk, compliance, and quality performance, ensuring clear and concise messaging.
Industry Knowledge
- Area: Regulatory Landscape & Compliance Obligations
- Desc: A deep understanding of the specific regulatory requirements relevant to our industry and operating regions (e.g., HSE regulations, environmental permits, data protection laws). You'll know how these impact our operations and how to ensure our IMS keeps us compliant.
- Area: Business Operations & Value Chain
- Desc: You'll need to understand how our business actually works, from manufacturing to supply chain to customer service. This helps you design IMS processes that support, rather than hinder, operations, and enables you to speak the language of the business units you support.
- Area: Organisational Change Management Principles
- Desc: Implementing new systems or processes often means changing people's habits. You'll need to understand how to effectively manage organisational change, reduce resistance, and build buy-in for new IMS initiatives.
Regulatory Compliance Regulations
- Reg: ISO 9001:2015 (Quality Management Systems)
- Usage: Leading the strategic implementation and maintenance of the QMS across the organisation, ensuring full certification and driving continuous quality improvement initiatives. You'll be the ultimate authority on this.
- Reg: ISO 14001:2015 (Environmental Management Systems)
- Usage: Overseeing the EMS, including identifying environmental aspects and impacts, setting objectives, and ensuring compliance with environmental legislation. You'll ensure our operations are environmentally responsible and certified.
- Reg: ISO 45001:2018 (Occupational Health & Safety Management Systems)
- Usage: Managing the OH&S MS, focusing on hazard identification, risk assessment, incident investigation, and promoting a strong safety culture to prevent workplace injuries and ill-health. You're accountable for our safety performance.
- Reg: ISO 27001:2022 (Information Security Management Systems) - where applicable
- Usage: If relevant to our business, you'll ensure our IMS integrates information security controls, managing risks related to data breaches and cyber threats in collaboration with IT. You won't be the primary owner, but you'll ensure integration.
- Reg: Local & National Health & Safety Legislation (e.g., Health and Safety at Work etc. Act 1974)
- Usage: Ensuring all our operational sites and activities comply with specific UK health and safety laws. You'll guide your team on interpreting and applying these legal requirements to our procedures and risk assessments.
Essential Prerequisites
- Proven experience (at least 5-8 years) leading a significant workstream or programme within an Integrated Management System, ideally with exposure to multiple ISO standards.
- Demonstrable experience managing and mentoring a team of at least 3-5 professionals, including performance management and development planning.
- A track record of successfully managing external certification audits with minimal non-conformances.
- Strong experience with at least one major EHSQ/IMS platform (e.g., Intelex, Cority) at an advanced configuration level.
- Advanced proficiency in Root Cause Analysis techniques and designing effective Corrective and Preventive Actions.
- Experience in managing budgets and resources for projects or a small team.
- Excellent presentation skills, with experience communicating complex information to senior management.
Career Pathway Context
To step into this Manager role, you'll need to have already demonstrated strong leadership and technical expertise, typically having excelled as a Senior IMS Specialist or IMS Lead. We're looking for someone who has moved beyond just executing tasks to actually designing and improving systems, and critically, has started to lead and develop others. This isn't an entry-level management role; it's for someone ready to take on significant responsibility for a team and a core business function.
Qualifications & Credentials
Emerging Foundation Skills
- Skill: Digital Transformation Leadership for IMS
- Why: Our IMS platforms are becoming more sophisticated, integrating with IoT, AI, and other enterprise systems. As a Manager, you'll need to lead these complex digital transformation projects, ensuring our systems are fit for the future and deliver maximum value. It's about moving from managing a system to architecting a digital ecosystem.
- Concepts: [{'concept_name': 'API Integration Strategies', 'description': 'Understanding how to connect our IMS platforms with other business systems (e.g., ERP, HRIS) to automate data flow and reduce manual entry.'}, {'concept_name': 'Data Governance for Compliance Data', 'description': 'Establishing clear rules and processes for how compliance data is collected, stored, and used, ensuring its integrity and security in an increasingly digital landscape.'}, {'concept_name': 'User Experience (UX) Design for IMS Platforms', 'description': 'Focusing on making our IMS tools intuitive and easy to use for all employees, driving adoption and reducing resistance to new systems.'}, {'concept_name': 'Cloud Security & Compliance', 'description': 'Understanding the security and compliance implications of cloud-based IMS solutions and ensuring our data is protected.'}]
- Prepare: This quarter: Take an online course on digital transformation or enterprise architecture principles.
- Next 6 months: Lead one small-scale integration project between an IMS module and another business system.
- Next 12 months: Work with IT to develop a clear data governance framework for compliance-related data.
- Next 18 months: Present a future-state vision for our IMS technology landscape to senior leadership.
- QuickWin: Start actively engaging with our IMS platform vendors' product roadmaps and attending their user conferences to understand upcoming features and integration possibilities.
- Skill: Ethical AI & Data Bias in Compliance
- Why: As we use more AI for predictive risk, incident analysis, and regulatory scanning, ensuring these AI systems are fair, unbiased, and transparent becomes critical. You'll need to understand the ethical implications of AI in compliance and how to mitigate potential biases in its outputs.
- Concepts: [{'concept_name': 'Algorithmic Fairness', 'description': 'Understanding how AI models can inadvertently perpetuate or amplify biases present in training data, leading to unfair or discriminatory outcomes.'}, {'concept_name': 'Explainable AI (XAI)', 'description': 'Knowing how to interpret and explain the decisions made by AI systems, which is crucial for auditability and trust in compliance applications.'}, {'concept_name': 'Data Privacy & AI', 'description': "Ensuring that the use of AI in compliance respects data privacy regulations (e.g., GDPR) and doesn't expose sensitive information."}, {'concept_name': 'AI Governance Frameworks', 'description': 'Developing policies and procedures for the responsible and ethical use of AI within our IMS, including oversight and accountability.'}]
- Prepare: This month: Read up on recent regulations and guidelines for ethical AI (e.g., EU AI Act, NIST AI Risk Management Framework).
- Next 3 months: Review one of our AI-powered tools for potential biases in its outputs, even if it's just a simple check.
- Next 6 months: Discuss ethical AI considerations with our IT and Legal teams, starting a conversation about an internal policy.
- Next 12 months: Develop a basic 'AI usage guideline' for your team, focusing on output validation and bias awareness.
- QuickWin: When using AI tools for summarisation or drafting, always critically review the output for accuracy, completeness, and any potential biases before accepting it.
Advancing Technical Skills
- Skill: Advanced Data Analytics & Predictive Modelling for CQHS
- Why: Moving beyond descriptive reporting, you'll need to guide your team in using advanced analytics to predict potential incidents, identify emerging risks, and forecast compliance trends. This means leveraging statistical models and machine learning outputs to drive proactive decision-making.
- Concepts: [{'concept_name': 'Time Series Analysis for Incident Trends', 'description': 'Using statistical methods to identify patterns and predict future occurrences of safety incidents or quality non-conformances.'}, {'concept_name': 'Machine Learning for Anomaly Detection', 'description': 'Applying ML algorithms to large datasets to spot unusual patterns that might indicate a hidden risk or compliance breach.'}, {'concept_name': 'Statistical Process Control (SPC)', 'description': 'Using control charts and other SPC tools to monitor and control processes, preventing defects and ensuring consistent quality.'}, {'concept_name': 'Data Visualisation Storytelling', 'description': 'Creating compelling visualisations that not only show data but tell a clear story about risks, performance, and improvement opportunities to senior leaders.'}]
- Prepare: This month: Explore advanced features in Power BI or Tableau, focusing on predictive analytics capabilities.
- Next 3 months: Identify one area where predictive modelling could significantly improve our CQHS outcomes (e.g., predicting equipment failure, high-risk areas).
- Next 6 months: Work with a data scientist (if available) or an external consultant to build a prototype predictive model for that area.
- Next 12 months: Implement a pilot programme using predictive insights to guide resource allocation for audits or safety interventions.
- QuickWin: Start incorporating leading indicators more prominently into your regular reporting, and challenge your team to think about what data could help us predict, not just react.
- Skill: Process Automation & Robotic Process Automation (RPA) in IMS
- Why: Many routine IMS tasks, from data entry to basic compliance checks, can be automated. You'll need to identify opportunities for RPA and other automation technologies to streamline our processes, reduce human error, and free up your team for higher-value work.
- Concepts: [{'concept_name': 'Process Mapping for Automation', 'description': 'Identifying and documenting processes in detail to determine which steps are suitable for automation and where the biggest gains can be made.'}, {'concept_name': 'RPA Tools & Capabilities', 'description': 'Understanding what RPA software (e.g., UiPath, Automation Anywhere) can do and how it can be applied to compliance workflows.'}, {'concept_name': 'Intelligent Automation (IA)', 'description': 'Combining RPA with AI (e.g., for document processing or data extraction) to automate more complex, cognitive tasks.'}, {'concept_name': 'Automation Governance', 'description': 'Establishing policies and controls for the development, deployment, and monitoring of automated processes to ensure compliance and security.'}]
- Prepare: This quarter: Identify 2-3 highly repetitive, manual tasks within your team's workflow that could be candidates for automation.
- Next 6 months: Research RPA tools and speak with IT about potential pilot projects for process automation.
- Next 12 months: Lead a small-scale RPA implementation to automate a specific IMS administrative task.
- Next 18 months: Document the time savings and error reduction from automation projects and share the success stories internally.
- QuickWin: Encourage your team to use simple automation features within existing tools (e.g., email rules, automated report generation) to save small chunks of time daily.
Future Skills Closing Note
The future of IMS is exciting, blending deep domain expertise with cutting-edge technology. Your role as a Manager will increasingly involve leading this integration, ensuring our systems are not just compliant, but intelligent, efficient, and truly embedded in our operational DNA. It's about being a strategic partner, not just a system administrator.
Education Requirements
- Level: Minimum
- Req: A Bachelor's degree (or equivalent OFQUAL Level 6 qualification) in a relevant field such as Engineering, Environmental Science, Occupational Health & Safety, Business Management, or a related technical discipline.
- Alts: We're pragmatic. If you've got extensive, demonstrable experience (15+ years) in a senior IMS role with a strong track record of success, we'd absolutely consider that in lieu of a degree. Show us what you've built.
- Level: Preferred
- Req: A Master's degree (or equivalent OFQUAL Level 7 qualification) in a relevant field, or a significant professional qualification such as an MBA.
- Alts: Specialised certifications in Quality, EHS, or GRC management can sometimes compensate for a lack of a Master's, especially if coupled with strong leadership experience.
Experience Requirements
You'll need roughly 12-16 years of progressive experience in Compliance, Quality, Health & Safety roles, with a significant portion (at least 5-8 years) specifically focused on Integrated Management Systems. This should include at least 3-5 years in a leadership or managerial capacity, where you've been responsible for managing a team and overseeing complex IMS programmes. We're looking for someone who has moved beyond just managing projects to actually managing people and strategic functional areas.
Preferred Certifications
- Cert: NEBOSH Diploma or Certificate (or equivalent)
- Prod: NEBOSH
- Usage: Demonstrates a strong foundational and advanced understanding of occupational health and safety management, which is crucial for the H&S component of our IMS.
- Cert: Environmental Management System (EMS) Lead Auditor
- Prod: IRCA or similar accredited body
- Usage: Enhances your ability to lead and oversee the environmental aspects of our IMS, particularly for ISO 14001 compliance and performance.
- Cert: Certified Quality Manager (CQM) or similar
- Prod: ASQ or similar professional body
- Usage: Shows a deeper understanding of quality management principles and practices beyond ISO 9001, which can drive more robust quality systems.
- Cert: Risk Management Professional (RMP)
- Prod: PMI or similar
- Usage: Demonstrates expertise in applying risk management principles, which is central to all aspects of an IMS and GRC.
Recommended Activities
- Regularly attend industry conferences and seminars on IMS, EHSQ, and GRC to stay current with best practices and emerging trends.
- Participate in professional networks or forums for IMS practitioners to share knowledge and learn from peers.
- Undertake continuous professional development (CPD) in areas like leadership, change management, or advanced data analytics.
- Seek out opportunities to present on IMS topics internally or at industry events, building your reputation as a subject matter expert.
Career Progression Pathways
Entry Paths to This Role
- Path: From Senior IMS Specialist / IMS Lead
- Time: 3-5 years in a Senior or Lead role
- Path: From Quality Manager / EHS Manager (with strong IMS focus)
- Time: 5-7 years in a dedicated Quality or EHS management role
- Path: From Management Consultant (specialising in CQHS/IMS)
- Time: 8-10 years in consulting, with significant client-side project leadership
Career Progression From This Role
- Pathway: Director, Integrated Management Systems
- Time: 3-5 years in the Manager role
Long Term Vision Potential Roles
- Title: VP, EHSQ Systems & Compliance
- Time: 5-10 years from current role
- Title: Chief Compliance Officer (CCO)
- Time: 10-15+ years from current role
- Title: Chief Operating Officer (COO)
- Time: 10-15+ years from current role
Sector Mobility
Your skills in integrated management systems are highly transferable across almost any industry that requires robust quality, environmental, health & safety, and compliance frameworks. You could move into manufacturing, pharmaceuticals, energy, finance, or even technology, as the core principles of IMS remain consistent.
How Zavmo Delivers This Role's Development
DISCOVER Phase: Skills Gap Analysis
Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.
Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.
DISCUSS Phase: Personalised Learning Pathway
Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).
Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.
DELIVER Phase: Conversational Learning
Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.
Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."
DEMONSTRATE Phase: Competency Assessment
Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.
Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.