Role Purpose & Context
Role Summary
The Integrated Management Systems Lead is here to design, build, and continuously improve our overarching compliance, quality, health, and safety frameworks. You'll be the go-to person for how our systems actually fit together, making sure they're robust enough for external audits but practical enough for daily operations. In practice, this means you'll be translating complex regulatory requirements into clear, actionable processes that our teams can follow without tearing their hair out.
This role sits right at the intersection of our operational teams and external certification bodies. You're the bridge, making sure what we say we do, we actually do—and can prove it. When you do this well, we pass our ISO audits with flying colours, avoid hefty fines, and, more importantly, keep our people safe and our products high quality. If you don't, well, we risk operational shutdowns, reputational damage, and potentially serious incidents.
The tricky part is getting everyone on board with new ways of working, especially when they're busy. You'll need to be persuasive, not just prescriptive. The reward? You get to build something truly impactful, seeing your designs prevent real-world problems and contribute directly to the company's long-term stability and success.
Reporting Structure
- Reports to: Integrated Management Systems Manager
- Direct reports: Roughly 3-8 direct reports, usually a mix of IMS Specialists and Coordinators
- Matrix relationships:
IMS Principal, Compliance Systems Architect, Senior Quality & Safety Systems Specialist,
Key Stakeholders
Internal:
- Head of Operations
- Product Development Leads
- HR Director
- Legal Counsel
- Site Managers across all locations
- Finance Leadership
External:
- External Certification Bodies (e.g., BSI, SGS, DNV)
- Regulatory Agencies (e.g., HSE, Environment Agency)
- Key Suppliers and Contractors
- Industry Associations
Organisational Impact
Scope: This role directly shapes the effectiveness and efficiency of our entire compliance ecosystem. Your work ensures we meet legal obligations, maintain critical certifications (like ISO 9001, 14001, 45001), and protect our brand. You're essentially building the backbone that allows the business to operate safely, ethically, and with high quality, which directly impacts our ability to win new contracts and avoid significant financial and reputational penalties. You'll be making decisions that affect how hundreds of people do their jobs every day.
Performance Metrics
Quantitative Metrics
- Metric: Reduction in Recurring Non-Conformances
- Desc: The percentage decrease in the number of times the same non-conformance (NC) or audit finding appears across different audits or sites within a year.
- Target: 20% year-over-year reduction
- Freq: Quarterly and Annually
- Example: If we had 10 recurring NCs last year, we'd expect to see 8 or fewer this year, showing our CAPA process is actually fixing systemic issues, not just symptoms.
- Metric: Internal Audit Programme Completion Rate
- Desc: The percentage of planned internal audits that are completed on schedule, with reports issued and CAPAs raised.
- Target: 100% completion on schedule
- Freq: Monthly and Quarterly
- Example: If you planned 12 internal audits for the quarter, all 12 should be completed, reported, and have initial CAPAs assigned within the agreed timeframe. No excuses for delays here.
- Metric: External Audit Major Non-Conformances
- Desc: The number of major non-conformances identified by external certification bodies during surveillance or recertification audits.
- Target: Zero major NCs
- Freq: Per external audit cycle (typically annual surveillance, triennial recertification)
- Example: A major NC can stop operations or delay certification. Your job is to make sure our systems are so robust that external auditors find nothing significant enough to warrant one. We're aiming for minor observations, not showstoppers.
- Metric: IMS Platform Data Quality Score
- Desc: A score based on the completeness, accuracy, and timeliness of data entry into our EHSQ/GRC platforms (e.g., incident reports, audit findings, risk assessments).
- Target: Maintain >95% data quality score
- Freq: Monthly
- Example: This means fewer missing fields in incident reports, accurate categorisation of risks, and all audit findings closed out within the system on time. Garbage in, garbage out, right? You'll be making sure the 'in' part is top-notch.
Qualitative Metrics
- Metric: Stakeholder Buy-in & System Adoption
- Desc: The degree to which operational teams actively use and value the IMS, rather than seeing it as a bureaucratic burden. This is about cultural shift, not just compliance.
- Evidence: You'll see this when department heads proactively consult you on process changes, when training attendance is high and engaged, and when internal feedback surveys show positive sentiment towards the IMS. People will actually *want* to use the system because it makes their lives easier or safer, not because they have to. We'd also expect to see fewer 'workarounds' and more genuine engagement with the official processes.
- Metric: Proactive Risk Identification & Mitigation
- Desc: How well the IMS, under your guidance, helps us spot potential issues before they become actual problems or incidents.
- Evidence: This looks like a healthy number of near-miss reports, safety observations, and proactive hazard identifications being logged and acted upon. It's also about the quality of our risk registers – are they current, comprehensive, and genuinely driving risk reduction actions? You'll be seen as someone who helps us see around corners, not just react to what's already happened. Expect to present these insights regularly to senior leadership.
- Metric: Effectiveness of Training & Communication
- Desc: The clarity and impact of the training and communication programmes you design and deliver to embed IMS principles and procedures across the organisation.
- Evidence: We'll know you're doing well when audit findings related to 'lack of awareness' or 'incorrect procedure' drop significantly. We'll also look at feedback from training sessions – are people understanding it? Are they applying it? Ultimately, it's about whether your communication leads to changed behaviour and better compliance, not just a tick in a training log. You'll be the one making complex stuff easy to understand.
Primary Traits
- Trait: Process Architect
- Manifestation: You naturally see the steps, the dependencies, and the potential failure points in any workflow. You're the person who, when faced with a problem, immediately thinks, 'How can we build a system to prevent this from happening again?' You love flowcharts, clear procedures, and robust documentation. 'Ad-hoc' makes you twitch a bit. You're always thinking about how to make things repeatable and auditable.
- Benefit: This entire role is about designing, implementing, and refining integrated management systems. Without a deep, almost instinctive, understanding of process design, you can't build the robust, auditable frameworks needed for ISO certification and effective risk management. You're not just following a process; you're creating it, and that requires a specific kind of brain.
- Trait: Influential Persuader
- Manifestation: You can get Operations to adopt a new safety procedure, not because you're their boss, but because you've explained *why* it matters—maybe it prevents fines, or helps us win a big contract. You build relationships across departments, listen to their concerns, and then find ways to get them on board with compliance changes. You're good at explaining the 'what' and the 'why' in a way that resonates with different teams, whether it's the shop floor or the executive suite.
- Benefit: Compliance and quality are often seen as overheads. Your success hinges on getting buy-in from departments focused on revenue and delivery. You'll constantly need to influence, negotiate, and educate without direct authority over most people. If you can't articulate the value and get people to genuinely believe in the system, it'll just become another ignored rulebook.
- Trait: Resilient Problem-Solver
- Manifestation: You can deliver a tough audit finding to a senior manager without taking their initial pushback personally. When a major non-conformance hits, you remain calm, objective, and focused on finding the root cause and a solution, rather than getting flustered. You can absorb pressure from external auditors, internal stakeholders, and tight deadlines, all while keeping a clear head. You see setbacks as puzzles to solve, not personal failures.
- Benefit: You're often the bearer of bad news—non-conformances, incident reports, areas for improvement. You'll face 'audit fatigue' and resistance. If you can't handle the pressure and the occasional frustration, you'll burn out quickly, and the effectiveness of our systems will suffer. We need someone who can stand firm, be objective, and keep moving forward, even when things get a bit messy.
Supporting Traits
- Trait: Pragmatic
- Desc: You know when to be a purist about a standard and when 'good enough' is actually the smart business decision. You balance theoretical perfection with practical application, understanding that sometimes you need to compromise to keep things moving. It's about effectiveness, not just elegance.
- Trait: Diplomatic
- Desc: You can navigate complex internal politics, phrasing difficult feedback or audit findings in a way that encourages action and collaboration, rather than defensiveness or conflict. You're skilled at building bridges, not burning them, even when delivering tough messages.
- Trait: Meticulously Detailed
- Desc: You're the person who spots the missing signature, the incorrect version number, or the logical inconsistency in a procedure that everyone else missed. That tiny detail could be the difference between passing an audit and a major non-conformance. You have an eye for the minutiae that others overlook.
- Trait: Patient Educator
- Desc: You understand that changing organisational habits and truly embedding a culture of quality, safety, and compliance takes time—often years, not months. You're willing to repeat messages, offer support, and celebrate small wins, knowing that sustained improvement is a marathon, not a sprint. You don't get frustrated when you have to explain the same thing five times.
Primary Motivators
- Motivator: Building Robust Systems
- Daily: You'll spend your days designing workflows, configuring platform modules, and writing procedures that genuinely improve how we operate. You'll get a real kick out of seeing a well-designed CAPA process prevent a recurrence or a clear risk assessment stop an incident.
- Motivator: Driving Tangible Improvement
- Daily: You'll be working to reduce non-conformances, improve safety metrics, and enhance product quality. Seeing those numbers shift in the right direction because of a system you designed or implemented will be a huge win for you.
- Motivator: Protecting the Business & People
- Daily: Your work directly contributes to keeping our employees safe, ensuring our products meet high standards, and protecting the company from legal and reputational risks. You'll feel a strong sense of purpose knowing you're safeguarding our future.
Potential Demotivators
Honestly, this role isn't for everyone. You'll often feel like you're the 'compliance police,' constantly reminding people about rules they find inconvenient. You'll design elegant systems only to find them undermined by poor data entry or a 'check-box' mentality from operational teams. Expect to spend a fair bit of time chasing overdue Corrective and Preventive Actions (CAPAs) from senior managers who have 'more important' things to do. You might also find yourself fighting an annual battle to justify budget for systems and headcount, as compliance is often seen as a cost centre rather than a value protector. If you need constant appreciation for your work, this might be a tough gig.
Common Frustrations
- The 'pencil-whipping' phenomenon—people just ticking boxes without doing the work.
- Getting 'audit fatigue' from operational teams who groan every time you mention an internal audit.
- Dealing with 'garbage in, garbage out' when front-line staff don't enter data correctly into the IMS platforms.
- The constant battle to get budget for a function that doesn't directly generate revenue.
- Merging the chaotic or non-existent systems of a newly acquired company into our robust framework.
- Chasing senior managers for sign-offs on critical CAPAs that have been outstanding for months.
What Role Doesn't Offer
- A purely strategic, hands-off role—you'll be deep in the weeds of system configuration and audit evidence.
- A role where everyone immediately understands and appreciates the value of compliance—you'll need to educate and persuade constantly.
- A static, predictable environment—regulations change, business needs evolve, and you'll need to adapt the systems.
- A role with unlimited resources—you'll need to be clever and pragmatic with what you have.
ADHD Positives
- The constant problem-solving and system design challenges can be highly engaging for an ADHD brain, offering novelty and intellectual stimulation. You'll be juggling multiple projects and audit cycles, which can suit a fast-paced working style. The need to quickly switch focus between different aspects of the IMS (quality, safety, environment) can also be a strength.
- The drive to build efficient, automated processes can be a huge asset, as it reduces repetitive, mundane tasks that can be particularly challenging for those with ADHD. You'll likely excel at spotting inefficiencies and designing elegant solutions to streamline workflows.
ADHD Challenges and Accommodations
- The meticulous documentation and rigorous follow-up required for CAPAs and audit findings can be demanding. We can help with structured templates, automated reminders, and using project management tools to break down complex tasks. You'll also have support from your direct reports for some of the more routine data entry and tracking.
- Maintaining focus during long, detailed audit reviews or policy writing sessions might be tough. We encourage regular breaks, using noise-cancelling headphones, and structuring work into shorter, focused sprints. We're open to flexible working arrangements that allow you to optimise your peak productivity times.
Dyslexia Positives
- Your ability to see the 'big picture' of how integrated systems connect and function, often thinking in diagrams and conceptual models, can be a massive advantage in designing complex IMS architectures. You'll likely excel at identifying patterns and making intuitive connections that others might miss.
- The emphasis on clear, concise communication (especially visual aids like flowcharts) to explain complex processes will play to your strengths. You'll be great at simplifying jargon for operational teams.
Dyslexia Challenges and Accommodations
- Writing detailed audit reports, policies, and procedures can be challenging due to the heavy reliance on written text and specific formatting. We use advanced grammar and spell-checking software, offer templates for all key documents, and have colleagues who can proofread critical communications. We value clear ideas over perfect prose.
- Reading dense regulatory documents or lengthy audit findings might take more time. We encourage using text-to-speech tools, providing summaries, and allowing ample time for review. We focus on comprehension and application, not just speed of reading.
Autism Positives
- The logical, systematic nature of designing and managing integrated systems, with a focus on clear rules, processes, and objective evidence, can be a very comfortable and engaging fit. You'll likely thrive on the predictability and structure that a well-defined IMS provides.
- Your ability to focus intensely on details and spot inconsistencies in procedures or data can be invaluable in identifying compliance gaps and ensuring system integrity. You'll be excellent at ensuring everything lines up perfectly for an audit.
- The preference for direct, factual communication aligns well with the need for clarity in compliance and audit reporting. You'll appreciate and deliver unambiguous instructions.
Autism Challenges and Accommodations
- Navigating complex organisational politics and influencing stakeholders who may resist change can be demanding. We'll support you with clear communication strategies, pre-briefings for difficult meetings, and coaching on stakeholder engagement. We value your directness and will help you frame messages effectively.
- Unexpected changes in audit schedules or regulatory requirements can be disruptive. We aim to provide as much advance notice as possible for changes and will work with you to plan for contingencies. We also encourage using structured tools for planning and tracking to minimise surprises.
Sensory Considerations
Our main office environment is a typical open-plan space, which can sometimes be a bit noisy, especially during busy periods. That said, we offer quiet zones, private meeting rooms, and noise-cancelling headphones are readily available. You'll have your own dedicated desk, and we're happy to discuss any specific lighting or ergonomic needs. Social interactions are usually structured around meetings and project updates, though there are informal opportunities for connection.
Flexibility Notes
We're a modern organisation, so we offer hybrid working options, typically 2-3 days in the office and the rest from home. We're flexible on start and end times to help you manage your energy and focus. We believe in output, not just presenteeism.
Key Responsibilities
Experience Levels Responsibilities
- Level: Lead Integrated Management Systems
- Responsibilities: Architect and Design IMS Workflows: You'll be the one mapping out how our ISO 9001, 14001, and 45001 systems actually integrate, making sure there's no duplication or gaps. This means designing the processes for incident management, risk assessment, document control, and CAPA, ensuring they flow seamlessly across departments.
- Manage IMS Platform Configuration: You'll be the super-user and administrator for our EHSQ/GRC platforms (think Intelex, Cority, ServiceNow GRC). This involves configuring workflows, building custom dashboards, managing user permissions, and ensuring system integrations are humming along. You'll essentially be the 'power user' who makes the tech work for us.
- Primary Liaison for Certification Bodies: You'll be our main point of contact for external certification bodies like BSI or SGS. This means managing the audit schedule, coordinating all pre-audit preparations, presenting our systems, and responding to any findings. You're the face of our compliance efforts to the outside world.
- Lead Internal Audit Programme: You'll design the annual internal audit schedule, lead audit teams (often your direct reports), conduct complex audits yourself, and ensure all findings are properly documented and followed up on. You're responsible for making sure we're always ready for the next external audit.
- Develop & Deliver Advanced IMS Training: You'll create and deliver training programmes for managers and super-users on new IMS processes, platform functionalities, and advanced root cause analysis techniques. This isn't just basic stuff; it's about building capability across the organisation.
- Mentor and Develop IMS Specialists: You'll be directly managing a small team of IMS Specialists and Coordinators. This means regular 1-to-1s, setting objectives, conducting performance reviews, and helping them grow their skills. You're responsible for building a strong, capable team.
- Drive Continual Improvement Initiatives: You'll identify systemic issues from incident data, audit findings, and risk assessments, then lead projects to fix them. This involves applying Lean/PDCA principles to optimise processes and ensure our systems are always getting better, not just staying compliant.
- Supervision: You'll operate with a high degree of autonomy on day-to-day execution, though you'll have monthly strategic alignment meetings with your Manager. For major system changes or significant audit findings, you'll consult with your Manager and relevant senior stakeholders. You're expected to be the expert in your domain.
- Decision: You have full technical decision authority within your domain, meaning you can choose the best methodologies, tools, and system configurations. You can approve expenditures up to £50K for system improvements or training programmes without direct sign-off. You'll also have hiring authority for your direct reports. For anything above £50K or decisions impacting broader organisational policy, you'll consult with your Manager and relevant department heads.
- Success: Success looks like zero major non-conformances from external audits, a demonstrable year-on-year reduction in recurring internal audit findings, and a highly engaged team of direct reports. Your IMS platform should be seen as a 'single source of truth,' and operational teams should proactively seek your guidance on compliance matters. Ultimately, your systems should be making us safer, more efficient, and more reliable.
Decision-Making Authority
- Type: IMS Platform Configuration Changes
- Entry: Proposes changes to supervisor for review and approval.
- Mid: Makes routine configuration changes within established guidelines; escalates complex changes.
- Senior: Designs and implements complex configuration changes, including new workflows and custom dashboards, with peer review.
- Type: Internal Audit Programme Scope & Schedule
- Entry: Assists with data collection for audit planning.
- Mid: Contributes to the audit schedule and scope for specific areas.
- Senior: Develops the annual internal audit plan for a specific workstream or site.
- Type: Corrective & Preventive Action (CAPA) Approval
- Entry: Documents CAPA details and tracks progress.
- Mid: Proposes and implements CAPAs for routine non-conformances.
- Senior: Approves CAPAs for significant non-conformances within their workstream.
- Type: Budget Allocation for IMS Tools/Training
- Entry: No authority; provides cost estimates for tasks.
- Mid: Recommends tool purchases or training programmes for specific needs.
- Senior: Manages a small project budget (up to £5K) for specific IMS initiatives.
ID:
Tool: CAPA & NC Automation Assistant
Benefit: Imagine AI drafting initial Non-Conformance (NC) reports based on your audit notes, suggesting potential root causes by analysing historical data, and automatically generating reminders and escalation paths for overdue Corrective and Preventive Actions (CAPAs). You'll spend less time on manual follow-ups and more on verifying effectiveness.
ID:
Tool: Predictive Risk Hotspotting
Benefit: AI can analyse incident, near-miss, and observation data across all our sites, identifying emerging trends and predicting which locations or processes are at the highest risk for a future event. This means you can proactively direct audit and training resources to where they're actually needed, rather than just reacting to what's already happened.
ID: ⚖️
Tool: Regulatory Change Summariser
Benefit: Forget spending hours sifting through dense legal texts. AI can scan regulatory databases and legislative updates relevant to our industry and locations, providing concise summaries of changes (e.g., a new HSE rule or environmental standard). It'll even flag which internal policies and procedures might be impacted, giving you a massive head start.
ID: ✍️
Tool: Audit & Management Review Scribe
Benefit: AI can generate first drafts of internal audit reports by structuring your notes and evidence. For our crucial Management Review meetings, it can synthesise KPI data from various dashboards into a draft executive summary, highlighting key trends and areas for discussion. This frees you up to focus on the strategic insights, not just the report assembly.
Roughly 15-25 hours weekly across various tasks
Weekly time savings potential
We typically invest around £50-£150/month per user in AI-powered tools and subscriptions.
Typical tool investment
Competency Requirements
Foundation Skills (Transferable)
Beyond the technical know-how, there are some fundamental ways of working and thinking that you'll need to excel in this role. These are the soft skills that make the difference between just 'doing the job' and truly leading our IMS efforts.
- Category: Communication & Influence
- Skills: Presenting Complex Information: You'll need to explain intricate regulatory requirements or system designs to diverse audiences, from shop floor teams to senior executives. This means simplifying jargon and tailoring your message.
- Negotiation & Persuasion: Getting buy-in for system changes or new procedures often requires convincing people without direct authority. You'll need to be able to listen, understand objections, and find common ground.
- Active Listening: Truly understanding the pain points of operational teams is crucial for designing systems that actually work for them. You'll need to be able to hear what's being said, and what's not.
- Category: Problem-Solving & Critical Thinking
- Skills: Root Cause Analysis: Moving beyond symptoms to identify the fundamental reasons for non-conformances or incidents, using techniques like 5 Whys or Fishbone diagrams.
- Systemic Thinking: You'll need to see how individual processes fit into the larger organisational ecosystem, understanding dependencies and potential ripple effects of changes.
- Risk Assessment & Management: Identifying, evaluating, and mitigating risks across quality, health, safety, and environmental domains, using frameworks like ISO 31000.
- Category: Leadership & Development
- Skills: Team Leadership & Mentoring: You'll be guiding and developing a small team of IMS specialists, providing coaching, feedback, and opportunities for growth. This includes delegating effectively and empowering your team.
- Change Management: Leading people through new processes or system implementations, addressing resistance and building adoption. It's about making change stick, not just imposing it.
- Decision Making Under Ambiguity: You'll often face situations with incomplete information or conflicting priorities. You'll need to make sound judgments and be comfortable with calculated risks.
- Category: Adaptability & Resilience
- Skills: Navigating Regulatory Changes: Our regulatory landscape isn't static. You'll need to quickly understand new requirements and adapt our systems accordingly, often under pressure.
- Managing Multiple Priorities: You'll be juggling ongoing audit programmes, system improvements, incident investigations, and team management. Prioritisation and organisation are key.
- Handling Constructive Feedback: Whether it's from an external auditor or an internal stakeholder, you'll need to be able to absorb feedback objectively and use it to improve.
Functional Skills (Role-Specific Technical)
These are the specific methodologies, frameworks, and tools that form the bedrock of our Integrated Management Systems. You'll need to be an expert in applying these, and often teaching them to others.
Technical Competencies
- Skill: ISO Standards Interpretation & Implementation (9001, 14001, 45001)
- Desc: You'll need deep, practical knowledge of these core ISO standards, not just what they say, but how to actually build a single, integrated management system that meets all requirements without creating silos. This means understanding the intent behind each clause and how to demonstrate conformity through objective evidence.
- Level: Expert
- Skill: Internal & External Audit Management (ISO 19011)
- Desc: This isn't just about participating in audits; it's about leading them. You'll be planning, executing, and reporting on complex internal audits, and crucially, managing our relationships with external certification bodies (e.g., BSI, SGS). You'll ensure we're always audit-ready for surveillance and recertification.
- Level: Expert
- Skill: Root Cause Analysis (RCA) Techniques
- Desc: Moving beyond simple problem-solving, you'll systematically investigate incidents, non-conformances, and near misses using advanced methods like 5 Whys, Fishbone (Ishikawa) Diagrams, and Fault Tree Analysis. The goal is to find the true underlying issues, not just quick fixes.
- Level: Advanced
- Skill: Risk Management Frameworks (ISO 31000)
- Desc: Expertise in developing and maintaining comprehensive risk registers, conducting detailed risk assessments using methodologies like Bowtie Analysis, and clearly differentiating between hazards, risks, and controls. You'll be architecting our approach to enterprise risk within the IMS.
- Level: Advanced
- Skill: Process Improvement & Mapping (Lean/PDCA)
- Desc: You'll use the Plan-Do-Check-Act (PDCA) cycle as the engine for continual improvement within our IMS. This means applying Lean principles to eliminate waste from compliance processes and using tools like Value Stream Mapping to visualise and optimise workflows.
- Level: Advanced
- Skill: Corrective & Preventive Action (CAPA) Lifecycle Management
- Desc: You'll design and manage a robust, closed-loop CAPA process that ensures issues are not only fixed but that recurrence is prevented system-wide. This involves ensuring effective verification of actions and driving a culture of prevention.
- Level: Expert
Digital Tools
- Tool: Intelex / Cority / VelocityEHS / Enablon (EHSQ/IMS Platforms)
- Level: Advanced
- Usage: Configuring workflows, building custom dashboards for leading/lagging indicators, managing system integrations, providing advanced user support, and training super-users. You'll be the system's architect and primary administrator.
- Tool: ServiceNow GRC / LogicGate / Archer GRC Suite (GRC Platforms)
- Level: Advanced
- Usage: Designing control tests, mapping risks to controls, managing policy lifecycles within the tool, and ensuring alignment with frameworks like COSO/ISO 31000. You'll be building out our risk and compliance framework in the platform.
- Tool: Power BI / Tableau (BI & Reporting)
- Level: Advanced
- Usage: Connecting to EHSQ and GRC data sources, building interactive dashboards for key performance indicators (KPIs), and using DAX/calculated fields to derive insights. You'll be telling the data story of our IMS performance.
- Tool: SharePoint / Confluence / Veeva QualityDocs (Doc Control & Collab)
- Level: Advanced
- Usage: Designing SharePoint site structures and permission models for controlled documents, building comprehensive Confluence knowledge bases for procedures, and configuring approval workflows for critical documentation. You'll ensure our 'objective evidence' is always accessible and version-controlled.
- Tool: AuditBoard / TeamMate+ / Workiva (Audit Management)
- Level: Advanced
- Usage: Planning detailed audit schedules, creating audit programmes, managing workpapers, findings, and CAPA tracking within the system. You'll use these tools to oversee and report on our entire internal and external audit programme.
- Tool: Microsoft Office Suite (Word, Excel, PowerPoint)
- Level: Expert
- Usage: Developing detailed audit reports, crafting compelling presentations for management reviews, and performing complex data analysis in Excel when the platforms don't quite cut it. You'll be using these constantly for communication and analysis.
Industry Knowledge
- Area: Compliance & Regulatory Landscape
- Desc: A deep understanding of the relevant UK and international compliance and regulatory requirements for our industry, including specific health & safety legislation (e.g., HSWA, CDM), environmental regulations (e.g., EPR), and quality standards. You'll need to know where to find information and how to interpret it.
- Area: Quality Management Principles
- Desc: Beyond ISO 9001, an understanding of core quality management principles like Total Quality Management (TQM), Six Sigma concepts, and the cost of poor quality (COPQ). This helps you drive genuine quality improvement, not just compliance.
- Area: Occupational Health & Safety Best Practices
- Desc: Knowledge of best practices in workplace safety, hazard identification, risk assessment, incident investigation, and emergency preparedness. You'll be designing systems that actively prevent harm, not just react to it.
- Area: Environmental Management Principles
- Desc: Understanding of environmental aspects and impacts, waste management, pollution prevention, and sustainability reporting. You'll be helping us minimise our environmental footprint.
Regulatory Compliance Regulations
- Reg: ISO 9001:2015 (Quality Management Systems)
- Usage: You'll be the architect of our quality management system, ensuring every clause is met, processes are documented, and continual improvement is driven. You'll be directly responsible for our certification.
- Reg: ISO 14001:2015 (Environmental Management Systems)
- Usage: You'll design and oversee our environmental management system, identifying aspects and impacts, setting objectives, and ensuring compliance with environmental legislation. This is crucial for our sustainability goals.
- Reg: ISO 45001:2018 (Occupational Health & Safety Management Systems)
- Usage: You'll build and maintain our health and safety management system, ensuring a safe working environment, managing risks, and fostering a proactive safety culture. This directly impacts our employees' wellbeing.
- Reg: Health and Safety at Work etc. Act 1974 (HSWA)
- Usage: You'll ensure our IMS processes are fully compliant with UK health and safety legislation, translating legal duties into practical, auditable procedures for all levels of the organisation.
- Reg: Environmental Permitting Regulations (EPR)
- Usage: Depending on our operations, you'll ensure our environmental management systems support compliance with any required permits, including monitoring, reporting, and incident response protocols.
Essential Prerequisites
- Proven experience (at least 5 years) in a Senior IMS Specialist or similar role, where you've led internal audits and managed significant workstreams within an IMS.
- Demonstrable experience in designing and implementing new processes or system modules within an EHSQ/GRC platform (e.g., configuring incident reporting workflows, building risk registers).
- A track record of successfully managing relationships with external certification bodies and guiding an organisation through surveillance or recertification audits.
- Experience in mentoring or providing informal leadership to junior team members, including conducting code reviews for system configurations or reviewing audit reports.
- The ability to independently conduct complex root cause analyses and drive effective corrective and preventive actions (CAPAs) to closure.
- Strong presentation skills, with experience presenting technical information to non-technical audiences, including senior management.
Career Pathway Context
Think of this as the step where you move from being a highly skilled individual contributor who *leads* projects, to someone who *architects* the entire system and *manages* the people who execute it. You're not just doing the work; you're defining how the work gets done and ensuring the team has the skills to do it. If you've been leading internal audit teams and configuring major system modules, you're probably ready for this. If you're still mostly executing tasks under close supervision, you'll need a bit more time in a Senior IMS Specialist role.
Qualifications & Credentials
Emerging Foundation Skills
- Skill: Prompt Engineering & LLM Integration for Compliance
- Why: Essential for future readiness in this role.
- Concepts: [{'concept_name': 'Context windows and token limits for compliance do', 'description': 'Context windows and token limits for compliance documents'}, {'concept_name': 'Temperature settings for factual versus creative o', 'description': 'Temperature settings for factual versus creative output (e.g., incident summaries vs. training material)'}, {'concept_name': 'Retrieval Augmented Generation (RAG) architectures', 'description': 'Retrieval Augmented Generation (RAG) architectures for querying proprietary policy and incident data'}, {'concept_name': 'Output validation and hallucination detection spec', 'description': 'Output validation and hallucination detection specific to regulatory accuracy'}, {'concept_name': "Prompt chaining for complex tasks like 'summarise ", 'description': "Prompt chaining for complex tasks like 'summarise this regulation and draft a policy update'"}]
- Prepare: This week: Set up and experiment with a leading LLM (e.g., ChatGPT, Claude, Gemini) for drafting emails, summaries, and basic policy snippets.
- This month: Start using an LLM to draft initial sections of internal audit reports or incident summaries based on your notes. Focus on refining your prompts.
- Month 2: Explore integrating an LLM API with one of our IMS platforms (if feasible) to automate a small, repetitive task, like generating CAPA reminders.
- Month 3: Research RAG architectures and consider how we could use them to query our vast internal document library for audit evidence or policy references. Share your findings with the team.
- QuickWin: Start using AI to draft your internal communications, meeting agendas, and even initial policy outlines today. No formal approval needed, just jump in and learn.
- Skill: AI-driven Predictive Compliance & Risk Hotspotting
- Why: Essential for future readiness in this role.
- Concepts: [{'concept_name': 'Machine learning basics (supervised vs. unsupervis', 'description': 'Machine learning basics (supervised vs. unsupervised learning)'}, {'concept_name': 'Time-series analysis for trend prediction in safet', 'description': 'Time-series analysis for trend prediction in safety data'}, {'concept_name': 'Anomaly detection in compliance logs', 'description': 'Anomaly detection in compliance logs'}, {'concept_name': 'Interpreting model confidence scores and false pos', 'description': 'Interpreting model confidence scores and false positives/negatives'}, {'concept_name': 'Ethical considerations of AI in risk assessment (e', 'description': 'Ethical considerations of AI in risk assessment (e.g., bias in data)'}]
- Prepare: This week: Read a few articles on predictive analytics in EHSQ or GRC. Understand the basic concepts.
- This month: Work with our data team (if we have one) to explore existing incident data for simple correlations using Excel or Power BI.
- Month 2: Take an online course on basic machine learning concepts, focusing on how they apply to classification and regression problems.
- Month 3: Propose a pilot project to your manager for using AI to predict a specific type of incident or non-conformance within our data.
- QuickWin: Start by simply visualising correlations in your current incident data using advanced charts in Power BI. Look for patterns you might have missed.
Advancing Technical Skills
- Skill: Advanced IMS Platform Architecture & Integration
- Why: As our business grows and acquires new entities, the complexity of integrating diverse systems will increase. We'll need our IMS platforms to seamlessly connect with ERP, HR, and operational systems to provide a truly 'single source of truth' for compliance data.
- Concepts: [{'concept_name': 'API management and webhook configuration for real-', 'description': 'API management and webhook configuration for real-time data exchange'}, {'concept_name': 'Data harmonisation and master data management acro', 'description': 'Data harmonisation and master data management across disparate systems'}, {'concept_name': 'Cloud security best practices for SaaS IMS platfor', 'description': 'Cloud security best practices for SaaS IMS platforms'}, {'concept_name': 'Scalability planning for growing user bases and da', 'description': 'Scalability planning for growing user bases and data volumes'}, {'concept_name': 'Vendor relationship management for platform roadma', 'description': 'Vendor relationship management for platform roadmaps and customisations'}]
- Prepare: This week: Review the API documentation for our primary IMS platform. Understand what's possible.
- This month: Map out our current system landscape, identifying key data flows and integration points.
- Month 2: Research best practices for integrating EHSQ/GRC platforms with ERP systems. Look for case studies.
- Month 3: Propose a small integration project to your manager that would eliminate a manual data transfer.
- QuickWin: Identify one recurring manual data entry task that could potentially be automated via an existing platform integration or a simple script.
- Skill: Strategic Data Storytelling & Board-Level Reporting
- Why: Compliance and risk data are increasingly important for strategic decision-making at the highest levels. You'll need to move beyond just presenting numbers to crafting compelling narratives that influence board-level discussions and drive investment in IMS initiatives.
- Concepts: [{'concept_name': 'Executive summary writing for non-technical audien', 'description': 'Executive summary writing for non-technical audiences'}, {'concept_name': 'Visualisation best practices for high-impact dashb', 'description': 'Visualisation best practices for high-impact dashboards (e.g., using Power BI, Tableau)'}, {'concept_name': 'Connecting compliance metrics to business value (e', 'description': 'Connecting compliance metrics to business value (e.g., cost of poor quality, brand reputation)'}, {'concept_name': 'Understanding board governance structures and info', 'description': 'Understanding board governance structures and information needs'}, {'concept_name': 'Presenting complex risks and mitigation strategies', 'description': 'Presenting complex risks and mitigation strategies clearly and concisely'}]
- Prepare: This week: Review our past Management Review presentations. What worked? What didn't?
- This month: Take an online course on data storytelling or executive presentation skills.
- Month 2: Offer to help your manager prepare a section of their next board report, focusing on the narrative.
- Month 3: Practice presenting a complex IMS topic to a small group of senior colleagues, seeking feedback on clarity and impact.
- QuickWin: For your next internal audit report, spend extra time on the executive summary, ensuring it clearly articulates the 'so what' for senior management, not just the 'what'.
Future Skills Closing Note
The reality is that the IMS world isn't static. These aren't just 'nice-to-haves'; they're becoming essential for anyone looking to lead in this space. We're committed to supporting your development, but you'll need to bring a genuine curiosity and a proactive approach to learning.
Education Requirements
- Level: Minimum
- Req: A Bachelor's degree (or equivalent OFQUAL Level 6 qualification) in a relevant field such as Engineering, Environmental Science, Occupational Health & Safety, Quality Management, Business Administration, or a related technical discipline.
- Alts: We're pragmatic. If you've got extensive, demonstrable experience (12+ years) in a highly complex IMS environment, with a strong track record of system design and audit leadership, we'll consider that as equivalent. Show us what you've built.
- Level: Preferred
- Req: A Master's degree (or equivalent OFQUAL Level 7 qualification) in a relevant discipline, or a post-graduate qualification in Quality, Safety, or Environmental Management.
- Alts: Relevant professional certifications (e.g., Lead Auditor, NEBOSH Diploma) combined with exceptional experience can sometimes substitute for a postgraduate degree.
Experience Requirements
You'll need roughly 8-12 years of progressive experience in Compliance, Quality, Health, and Safety roles, with a significant portion (at least 5 years) directly focused on Integrated Management Systems. This should include extensive experience in designing, implementing, and managing ISO-certified systems (9001, 14001, 45001). We're looking for someone who has led internal audit programmes, been the primary contact for external certification bodies, and has hands-on experience configuring and administering EHSQ/GRC platforms. You should also have demonstrable experience in mentoring junior team members and leading small project teams. If you've been working at a Senior IMS Specialist level, owning entire workstreams and guiding others, you're probably in the right ballpark.
Preferred Certifications
- Cert: NEBOSH National Diploma in Occupational Health and Safety
- Prod: NEBOSH
- Usage: This demonstrates a deep, practical understanding of health and safety legislation and management, which is critical for the 'H&S' part of our IMS. It shows you're serious about safety.
- Cert: IEMA Certificate in Environmental Management
- Prod: IEMA
- Usage: This shows a strong grasp of environmental management principles and regulatory requirements, which is vital for our ISO 14001 system and sustainability goals.
- Cert: Certified Quality Manager/Organisational Excellence (CQM/OE)
- Prod: ASQ (American Society for Quality)
- Usage: This certification demonstrates a broader understanding of quality management principles and leadership, which is really helpful for driving continuous improvement beyond just ISO compliance.
- Cert: Relevant EHSQ/GRC Platform Certification
- Prod: e.g., Intelex, Cority, ServiceNow
- Usage: If you've got a certification in one of the major platforms we use (or a similar one), it tells us you're not just a user, but someone who can truly administer and optimise the system. It's a big plus.
Recommended Activities
- Regularly attend industry conferences and seminars on IMS, EHSQ technology, and regulatory updates (e.g., IOSH, IEMA, Quality Show).
- Participate in relevant professional bodies (e.g., IOSH, IEMA, CQI) to stay current and expand your network.
- Undertake continuous professional development (CPD) in areas like advanced data analytics, AI for compliance, or change management.
- Seek out opportunities to lead cross-functional projects that involve significant process redesign or system integration.
- Mentor junior colleagues formally or informally, as teaching often solidifies your own understanding.
Career Progression Pathways
Entry Paths to This Role
- Path: Senior IMS Specialist (Internal Promotion)
- Time: 3-5 years as a Senior IMS Specialist
- Path: Senior Quality Engineer / Manager (External Hire)
- Time: 8-12 years in Quality Management, with strong IMS exposure
- Path: Senior EHS Professional (External Hire)
- Time: 8-12 years in Environmental, Health & Safety, with strong IMS exposure
Career Progression From This Role
- Pathway: Integrated Management Systems Manager
- Time: 3-5 years in the IMS Lead role
Long Term Vision Potential Roles
- Title: Director, Integrated Management Systems
- Time: 5-10 years from IMS Lead
- Title: VP, EHSQ Systems & Compliance
- Time: 10-15 years from IMS Lead
- Title: Chief Compliance Officer (CCO)
- Time: 15+ years from IMS Lead
Sector Mobility
The skills you'll gain as an IMS Lead are highly transferable across almost any industry that deals with quality, safety, or environmental regulations. Manufacturing, pharmaceuticals, aerospace, energy, logistics, and even some tech sectors all rely heavily on robust management systems. Your expertise in ISO standards and system design is a universal language.
How Zavmo Delivers This Role's Development
DISCOVER Phase: Skills Gap Analysis
Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.
Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.
DISCUSS Phase: Personalised Learning Pathway
Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).
Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.
DELIVER Phase: Conversational Learning
Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.
Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."
DEMONSTRATE Phase: Competency Assessment
Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.
Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.