International Lead ISO Auditor Manager

Role Purpose & Context

Role Summary

The International Lead ISO Auditor Manager is here to lead and manage a substantial part of our global ISO audit programme. You'll be making sure our operations across different countries actually meet the standards we claim to uphold, not just on paper, but in practice. This role sits right at the heart of our operational integrity, making sure our quality, environmental, and safety systems are robust and effective, everywhere we operate. Day-to-day, you'll be overseeing a team of auditors, setting the audit strategy for your assigned regions or business units, and dealing with the trickier findings that bubble up. You're the one who steps in when there's a major non-conformity that needs careful handling or when a certification body raises a red flag. Honestly, you're the guardian of our reputation when it comes to compliance. When this role is done well, we maintain our certifications without a hitch, our operational risks are genuinely reduced, and our global teams actually see the value in robust quality and safety. When it's not, we risk losing certifications, facing regulatory fines, and damaging our brand – which, let's be real, can cost us millions. The challenge is balancing rigorous compliance with practical business realities across diverse cultures. The reward? Knowing you're directly contributing to safer workplaces, better products, and a more sustainable business worldwide.

Reporting Structure

• Reports to: Director of Global Audits & Compliance
• Direct reports: Roughly 5-8 Lead/Senior Auditors, possibly a couple of teams
• Matrix relationships: Principal ISO Auditor, Global Audit Programme Lead, Head of Compliance Audits (ISO), Quality Systems Audit Manager,

Key Stakeholders

Internal:

• Regional Operations Directors
• Heads of Quality, EHS, and Information Security
• Legal and Regulatory Affairs team
• Executive Leadership Team (for high-level reporting)
• Finance (for budget reviews and CoPQ analysis)

External:

• ISO Certification Bodies (e.g., BSI, SGS, LRQA)
• External Regulators (where applicable)
• Key Suppliers and Partners (for supply chain audits)
• Industry Standards Bodies

Organisational Impact

Scope: You'll directly shape the effectiveness of our global management systems, influencing operational efficiency, risk mitigation, and our ability to maintain critical ISO certifications. Your work is key to protecting our brand and ensuring we meet our legal and ethical obligations worldwide. Get it right, and we operate smoothly and safely. Get it wrong, and we face significant financial and reputational damage.

Performance Metrics

Quantitative Metrics

1. Metric: Certification Success Rate
2. Desc: Percentage of global sites maintaining all targeted ISO certifications without major non-conformities.
3. Target: 100% certification success with zero critical findings from external bodies.
4. Freq: Annually (post-external audit cycle)
5. Example: All 15 global sites successfully renewed ISO 9001 and 14001 certifications in 2023, with only 3 minor NCs across the board, all effectively closed.
6. Metric: Reduction in Cost of Poor Quality (CoPQ)
7. Desc: Measurable decrease in costs associated with failures, appraisals, and prevention directly attributable to audit programme findings and corrective actions.
8. Target: 10% reduction in CoPQ for audited business units year-on-year.
9. Freq: Quarterly (via Finance reporting)
10. Example: Following a targeted audit programme in our manufacturing division, scrap rates reduced by 15% and customer complaints by 8%, leading to a £500K saving in Q3.
11. Metric: Effectiveness of Corrective Actions (CAPA Closure Rate & Recurrence)
12. Desc: Percentage of major non-conformities where corrective actions are closed on time and verified as effective, with no recurrence within 12 months.
13. Target: 95% CAPA closure rate within agreed timelines; <5% recurrence of major NCs within 12 months.
14. Freq: Monthly (via GRC platform reporting)
15. Example: Of 20 major NCs raised in Q1, 19 were closed within 90 days, and follow-up audits confirmed only 1 had a partial recurrence after 6 months.
16. Metric: Audit Programme Efficiency
17. Desc: Optimisation of audit resource allocation (auditor days) against identified risks, ensuring high-risk areas receive appropriate scrutiny without over-auditing low-risk areas.
18. Target: Achieve a 15% improvement in audit days per high-risk area, while maintaining overall audit coverage.
19. Freq: Bi-annually (programme review)
20. Example: By re-prioritising the annual audit schedule based on risk registers, we reallocated 50 audit days from low-risk administrative processes to high-risk production lines, improving coverage where it mattered most.

Qualitative Metrics

1. Metric: Stakeholder Trust & Engagement
2. Desc: Audited business units and senior leadership proactively seek your team's input on process improvements and risk mitigation strategies, viewing audits as a value-add, not just a necessary evil.
3. Evidence: Your team is regularly invited to strategic planning meetings for new projects or process changes. Regional leaders actively engage in audit planning and feedback sessions. Anecdotal feedback from business unit leaders consistently highlights the value derived from your team's insights.
4. Metric: Audit Team Development & Retention
5. Desc: Your direct reports feel supported, challenged, and see clear pathways for their own growth, leading to strong team morale and low voluntary turnover.
6. Evidence: High scores in internal employee engagement surveys for your team. Successful mentorship of junior auditors into lead roles. Positive feedback during 1-to-1s about career development opportunities and support received.
7. Metric: Strategic Influence on Management Systems
8. Desc: Your team's audit findings and recommendations directly inform and shape the evolution of our global Quality, EHS, and Information Security Management Systems.
9. Evidence: Key recommendations from your audit reports are consistently incorporated into management review actions and system updates. You're asked to present global audit trends and strategic recommendations to the executive leadership team or board committees.
10. Metric: Adaptability to Regulatory & Standard Changes
11. Desc: Your programme proactively identifies and incorporates changes in ISO standards or relevant regulations, ensuring our systems remain compliant and future-proof.
12. Evidence: No surprises from external certification bodies regarding new requirements. Your team provides timely briefings and training to business units on upcoming changes. Evidence of system adjustments made in advance of new standard releases.

Primary Traits

• Trait: Forensically Inquisitive
• Manifestation: You're the kind of person who, when presented with a summary, immediately asks to see the raw data. You'll trace a single batch record through every step of production, not just to find a mistake, but to understand *why* the system allowed it. For you, 'why?' isn't just a question; it's a multi-layered investigation. You'll push your team to look beyond the obvious, to really dig into the evidence, and to always question assumptions, even their own. You're not satisfied with a surface-level explanation, especially when you're dealing with a complex global operation.
• Benefit: At this level, we're not just finding individual non-conformities; we're uncovering systemic weaknesses that could impact our entire global business. This trait is absolutely critical for identifying root causes that span multiple sites or processes. Without it, we'd just be patching symptoms, not fixing the underlying issues, which frankly, would be a waste of everyone's time and money. It's the difference between finding a faulty sensor and realising our entire calibration programme is flawed across a continent.
• Trait: Impartial & Objective
• Manifestation: When you're reviewing an audit report, you'll ensure the language is neutral, fact-based, and free of bias, even if the finding is sensitive. You'll ensure your team applies the same rigorous scrutiny to a process owned by a senior director as they would to a new junior's work. You're the one who steps in to defend a valid non-conformity when a regional manager tries to downplay it, always backing your stance with irrefutable evidence, not emotion or politics.
• Benefit: Credibility is paramount in this role. If our audit findings are perceived as biased, political, or personal, they'll be dismissed, and the entire compliance system loses its integrity. As a manager, you set the tone for your team. Your ability to remain objective, especially when dealing with high-stakes issues or influential stakeholders, ensures our audit programme is respected and effective. It's about making sure the truth, backed by evidence, always prevails, no matter how uncomfortable it might be for some.
• Trait: Diplomatically Tenacious
• Manifestation: You can deliver difficult news – like a major non-conformity in a key business unit – to a regional director without alienating them. You're skilled at framing findings as 'opportunities for improvement' while still holding firm on the need for robust corrective action. When faced with executive pressure to downgrade a critical finding, you'll respectfully but firmly present the evidence and the potential risks of doing so. You'll coach your team on how to navigate challenging audit interviews and manage pushback effectively, always aiming for resolution, not conflict.
• Benefit: An auditor who creates enemies cannot drive change, especially at a global scale. At this level, you're dealing with senior leaders and complex organisational dynamics. This trait allows you to enforce standards and drive significant improvements while preserving the vital working relationships needed to actually implement those corrective actions across different cultures and business units. It's about being firm on the facts and the standard, but flexible and understanding on the human side of things. You need to be able to get people to *want* to fix things, not just be forced to.

Supporting Traits

• Trait: Methodical Leader
• Desc: You're able to design and oversee complex audit programmes with clear plans, timelines, and scopes, ensuring your team executes them systematically and predictably across different regions. You'll bring order to potentially chaotic international audit schedules.
• Trait: Resilient Coach
• Desc: You can handle the pressure of high-stakes audits, confrontational situations, and demanding travel, and critically, you can coach your team to do the same. You help them bounce back from difficult audit experiences and maintain their focus.
• Trait: Articulate Influencer
• Desc: You can explain complex ISO clauses or audit findings to a diverse audience, from a factory floor supervisor to a C-suite executive, tailoring your message to their understanding and getting their buy-in. You're a master translator of technical compliance into business impact.
• Trait: Self-Directed Strategist
• Desc: You manage a global audit programme with significant autonomy, making strategic decisions about resource allocation, audit priorities, and risk focus with minimal day-to-day supervision. You're comfortable operating independently in a complex international landscape.

Primary Motivators

1. Motivator: Driving Real Operational Improvement
2. Daily: You'll feel a deep satisfaction when your team's audit findings lead to tangible changes that make our products better, our workplaces safer, or our processes more efficient. It's not just about finding issues, but seeing them genuinely fixed.
3. Motivator: Ensuring Organisational Integrity & Reputation
4. Daily: You're driven by the knowledge that your work directly protects the company's reputation, ensures ethical behaviour, and maintains our licence to operate globally. You're the guardian of our standards.
5. Motivator: Developing and Leading a High-Performing Team
6. Daily: You get a real buzz from seeing your team members grow, take on more responsibility, and excel in their audit careers. You enjoy coaching, mentoring, and building a cohesive, effective global audit function.

Potential Demotivators

Honestly, this role isn't for everyone. You'll spend a fair bit of time dealing with resistance to change, even when the evidence is clear. You might find yourself in endless debates about whether a non-conformity is 'major' or 'minor', with significant business implications hanging in the balance. There will be times when you identify a critical systemic issue, only to face an uphill battle to get the necessary resources approved for its resolution. You'll also have to manage the 'audit fatigue' of your own team, who are constantly flying, dealing with difficult auditees, and pushing for improvements. If you need every recommendation to be immediately embraced and implemented without question, or if you struggle with the political nuances of driving change in a large, global organisation, you'll probably find this role quite frustrating.

Common Frustrations

1. Having to repeatedly justify the value of the audit programme to senior leaders who only see it as a cost centre, not a risk mitigator.
2. Dealing with 'management lip service' – hearing grand statements about quality and compliance, but seeing critical corrective actions starved of resources.
3. The constant battle between 'paper' systems and 'real' systems, where beautifully documented procedures bear little resemblance to actual shop floor practice.
4. Managing the emotional toll on your team from the 'travel grind' and confrontational audit situations, while still expecting high performance.
5. Trying to get different regional business units to adopt a consistent approach to corrective actions, when each thinks their way is best.
6. Being asked to 'just sign off' on a non-compliant process because of an urgent business deadline, putting you in an impossible position.

What Role Doesn't Offer

1. A quiet, predictable 9-to-5 office job with minimal travel.
2. A role where your findings are always met with immediate, enthusiastic buy-in and swift action.
3. An environment free from organisational politics or difficult conversations.
4. A purely technical role; you'll spend a lot of time on people management and strategic influence.
5. Instant gratification; systemic change takes time, patience, and persistence.

ADHD Positives

1. The varied nature of international audits and managing multiple projects can be highly engaging, preventing boredom. The constant problem-solving and investigative work can tap into hyperfocus strengths.
2. The need for quick thinking and adaptability in diverse audit scenarios can be a real strength, especially when unexpected issues arise.
3. The ability to connect disparate pieces of information quickly, often seeing patterns others miss, is invaluable for identifying systemic risks across different sites.

ADHD Challenges and Accommodations

1. **Challenge:** Managing extensive documentation and detailed report writing can be demanding. **Accommodation:** We use GRC platforms with structured templates and AI-assisted drafting tools to streamline this, and you'll have support from your team for review.
2. **Challenge:** Sustained focus during long, detailed audits or meetings can be difficult. **Accommodation:** We encourage regular breaks, varied audit activities, and flexible scheduling where possible. You can also delegate specific detailed evidence review tasks to your team.
3. **Challenge:** The constant international travel and changing environments can be disruptive to routines. **Accommodation:** We work to optimise travel schedules for efficiency and provide comprehensive support for logistics. You'll have autonomy to structure your and your team's work week to best suit productivity.

Dyslexia Positives

1. Strong visual-spatial reasoning, excellent for understanding complex process flows and identifying non-conformities in physical environments or intricate system diagrams.
2. Often exceptional problem-solvers, able to see the 'big picture' and make connections between different audit findings that others might miss.
3. Great at verbal communication and interviewing, which is a huge part of evidence gathering and stakeholder engagement during audits.

Dyslexia Challenges and Accommodations

1. **Challenge:** Extensive reading of standards, procedures, and writing detailed audit reports. **Accommodation:** We provide access to text-to-speech software, use highly structured GRC platforms with clear templates, and encourage verbal dictation for initial report drafts. Your team will also review reports.
2. **Challenge:** Organising large volumes of textual evidence and documentation. **Accommodation:** Our digital GRC platforms are designed for logical organisation and searchability. We also use visual tools like Turtle Diagrams for process mapping.
3. **Challenge:** Potential for errors in written communication. **Accommodation:** We foster a culture of peer review for all critical documents, use grammar and spelling checkers extensively, and value clarity of thought over perfect prose.

Autism Positives

1. A strong adherence to rules, standards, and procedures, which is absolutely critical for an ISO auditor. You'll ensure the standards are followed to the letter.
2. Exceptional attention to detail and pattern recognition, allowing you to spot subtle non-conformities or inconsistencies that others might overlook.
3. Direct and honest communication style, which can be highly effective in objective evidence gathering and presenting factual audit findings without ambiguity.

Autism Challenges and Accommodations

1. **Challenge:** Navigating complex social dynamics and unspoken rules during stakeholder meetings or confrontational audits. **Accommodation:** We provide coaching on communication strategies and support for managing difficult conversations. You'll lead a team, so you can delegate some of the more nuanced social interactions.
2. **Challenge:** Unexpected changes in audit schedules or travel plans can be disruptive. **Accommodation:** We aim for clear, upfront planning and communicate changes as early as possible. We also offer tools and support for managing travel logistics.
3. **Challenge:** Sensory overload in certain audit environments (e.g., noisy factories). **Accommodation:** We can discuss specific environmental needs and provide noise-cancelling headphones or schedule audits during quieter periods where feasible. You'll also have autonomy to plan your team's audits.

Key Responsibilities

Experience Levels Responsibilities

1. Level: Principal Auditor / Audit Programme Manager
2. Responsibilities: Set the strategic direction for a major segment of our global ISO audit programme, ensuring it aligns with overall business objectives and enterprise risk management. This isn't just about scheduling audits; it's about making sure we're auditing the *right* things, in the *right* way, to genuinely reduce risk.
3. Own the entire audit lifecycle for your assigned business units or regions, from annual planning and resource allocation (including a budget up to £2M) to overseeing corrective action verification and reporting to senior leadership. You're accountable for the programme's effectiveness and impact.
4. Build and lead a high-performing team of International Lead and Senior ISO Auditors, providing coaching, mentorship, and career development opportunities. You'll be responsible for their performance, their well-being, and making sure they're equipped to handle the complexities of global auditing.
5. Represent the organisation during external certification audits for your areas of responsibility, acting as the primary point of contact and defending our management systems to external bodies. This means you'll be the one facing the music, so to speak, when the external auditors come calling.
6. Drive continuous improvement of our global audit methodology and GRC platform use, looking for ways to optimise efficiency, improve data quality, and enhance the value we deliver to the business. Honestly, we're always looking for better ways to do things, and you'll be key to finding them.
7. Analyse global audit trends and performance data to identify systemic risks and opportunities for improvement across multiple sites or business units, then present these insights and strategic recommendations to executive leadership. It's about spotting the patterns and telling the story behind the numbers.
8. Manage significant audit disputes or complex non-conformities, acting as the ultimate authority within your programme, ensuring resolutions are robust, compliant, and pragmatically implementable across diverse cultural and operational contexts. Sometimes, you'll be the referee in tricky situations.
9. Supervision: You'll operate with a high degree of autonomy, managing your programme and team with minimal day-to-day oversight. Your focus will be on achieving quarterly objectives and strategic alignment with the Director of Global Audits & Compliance. Expect monthly strategic check-ins, but you're trusted to get on with it.
10. Decision: You'll have full authority for your audit programme, including budget allocation up to £2M, hiring and performance management decisions for your team, and vendor selection for audit-related services up to £100K. Strategic decisions impacting overall company policy or major capital expenditure will require alignment with the Director and relevant executive stakeholders. You're the boss for your bit.
11. Success: Success looks like consistently maintaining 100% certification for your assigned areas, significantly reducing systemic risks through your audit findings, and developing a highly capable, engaged audit team. You'll be seen as a trusted advisor by regional leadership, not just an auditor.

Decision-Making Authority

• Type: Audit Programme Scope & Schedule
• Entry: Follows pre-defined audit plan and schedule, no deviation.
• Mid: Adjusts individual audit schedules within defined parameters; escalates scope changes to Lead Auditor.
• Senior: Designs audit plans for specific workstreams; recommends scope adjustments for complex audits to Lead Auditor.
• Type: Non-Conformity Classification & Resolution
• Entry: Documents findings as observed; proposes initial classification for review by Lead Auditor.
• Mid: Classifies routine non-conformities (Major/Minor) based on guidelines; proposes corrective actions to auditee.
• Senior: Makes final classification of non-conformities within their audit scope; approves effectiveness of routine CAPAs. Escalates complex disputes.
• Type: Team Management & Development
• Entry: No direct reports; focuses on personal development.
• Mid: Provides informal guidance to new joiners; seeks development opportunities for self.
• Senior: Mentors 0-2 junior auditors; provides feedback on their audit performance and report writing.
• Type: Budget & Resource Allocation
• Entry: No budget authority; tracks own expenses.
• Mid: Manages individual audit travel expenses within policy.
• Senior: Manages project-specific expenses up to £5K; recommends tool purchases.

Competency Requirements

Foundation Skills (Transferable)

Beyond the technical know-how, we need someone who can lead, influence, and think strategically in a complex global environment. These are the underlying skills that make a great manager, especially in a field like ours.

• Category: Leadership & People Management
• Skills: Coaching & Mentoring: You'll be responsible for developing your team, providing constructive feedback, and guiding their career growth. It's about building capability, not just delegating tasks.
• Conflict Resolution: You'll often be the mediator in disputes between auditees and your team, or even within your team. You need to be able to de-escalate tensions and find common ground.
• Performance Management: Setting clear expectations, conducting regular reviews, and addressing performance issues effectively are crucial for a high-performing team.
• Delegation & Empowerment: Knowing when and how to delegate effectively, trusting your team, and empowering them to take ownership of their work.
• Category: Strategic Thinking & Influence
• Skills: Strategic Planning: You'll need to design and implement audit programmes that align with business objectives and anticipate future risks, not just react to past issues.
• Organisational Savvy: Understanding the political landscape, identifying key influencers, and navigating complex organisational structures to get things done.
• Executive Communication: Presenting complex audit findings and strategic recommendations clearly and concisely to senior leadership, translating technical jargon into business impact.
• Change Management: Leading your team and influencing stakeholders through changes in standards, processes, or audit methodologies, often across different cultures.
• Category: Global Collaboration & Cultural Intelligence
• Skills: Cross-Cultural Communication: Adapting your communication style and approach to effectively work with teams and stakeholders from diverse cultural backgrounds.
• Global Team Leadership: Managing and motivating a geographically dispersed team, fostering a sense of cohesion and shared purpose despite distance.
• Negotiation: Often, you'll need to negotiate timelines, resources, or the severity of findings with various stakeholders to achieve mutually agreeable outcomes.
• Adaptability & Resilience: Thriving in an environment of constant change, managing the demands of international travel, and bouncing back from challenging situations.

Functional Skills (Role-Specific Technical)

These are the core technical and domain skills you'll need to master to effectively lead and manage a global ISO audit programme. You're not just doing the audits; you're overseeing, guiding, and strategically directing them.

Technical Competencies

• Skill: Multi-Standard Interpretation & Integrated Management Systems (IMS) Auditing
• Desc: You need to have deep, almost encyclopaedic, knowledge of core ISO standards (9001, 14001, 45001) and several specialised ones (27001, 13485, 22000). More importantly, you'll need to understand how these standards integrate within a single management system (IMS) and how to audit those complex overlaps effectively. You're the expert your team turns to for the trickiest interpretations.
• Level: Expert
• Skill: Advanced Risk-Based Auditing (RBA) Programme Design
• Desc: Moving beyond just applying RBA to individual audits, you'll be designing and implementing the *entire* audit programme based on enterprise-level risk assessments, FMEAs, and historical data. This means strategically allocating resources to areas of highest risk globally, ensuring maximum impact for our audit efforts.
• Level: Expert
• Skill: Strategic Root Cause Analysis (RCA) & Corrective/Preventive Action (CAPA) Management
• Desc: You'll be overseeing the RCA process for major systemic non-conformities, ensuring your team uses advanced methodologies (e.g., Fault Tree Analysis, A3 problem solving) to get to the true root cause. Your role is to ensure CAPAs are not just closed, but are genuinely effective and prevent recurrence across the organisation, often requiring cross-functional and cross-regional coordination.
• Level: Expert
• Skill: Forensic Evidence Gathering & Advanced Interviewing Techniques (for oversight)
• Desc: While your team will do the day-to-day gathering, you need to be an expert in what constitutes objective evidence and how to coach your team to conduct interviews that elicit factual information without leading the auditee. You'll review complex audit trails and ensure findings are robust and defensible, especially when dealing with high-stakes issues.
• Level: Advanced
• Skill: Audit Programme Performance Analytics & Reporting
• Desc: You'll need to go beyond basic reporting. This means using data from your GRC platforms to analyse trends, identify systemic issues across sites, measure programme effectiveness, and present these insights in a compelling way to executive leadership. It's about telling the story of our compliance performance with data.
• Level: Advanced

Digital Tools

• Tool: AuditBoard / ServiceNow GRC / LogicGate (or similar GRC platform)
• Level: Strategic
• Usage: Leading the selection, implementation, and optimisation of our enterprise-wide GRC platform. Defining the global data architecture for audit findings, CAPAs, and risk registers. Integrating the platform with other business systems (e.g., ERP, HRIS) to create a holistic view of compliance and risk. You'll be the go-to person for how we use this system globally.
• Tool: Veeva QualityDocs / MasterControl / Qualio (or similar QMS software)
• Level: Strategic
• Usage: Architecting the global QMS structure to ensure consistency and compliance across all sites. Overseeing system validation (e.g., CFR Part 11 requirements). Aligning the QMS platform's capabilities with our long-term quality strategy and ensuring it supports our audit programme effectively. You'll be making sure the system works for us, not the other way around.
• Tool: Microsoft Teams / SharePoint / Confluence (for global collaboration)
• Level: Strategic
• Usage: Governing the information architecture for all compliance activities across your programme, setting permissions, and ensuring data retention policies are met. You'll be designing how your global team collaborates and shares information securely and efficiently, using these tools to their fullest potential.
• Tool: Power BI / Tableau (for advanced data analysis and reporting)
• Level: Strategic
• Usage: Using these tools to present global risk and compliance data, audit trends, and programme performance metrics to the executive leadership team and potentially the board. You'll be correlating audit findings with business performance metrics, turning raw data into strategic insights that drive decisions.
• Tool: BSI BSOL / IHS Markit Standards Expert (or similar standards access platforms)
• Level: Strategic
• Usage: Managing enterprise subscriptions and access for your team. Advising leadership on the adoption of new or revised standards and their impact on our global operations. Potentially representing the organisation in industry standards bodies or working groups, influencing future standard development.

Industry Knowledge

• Area: Global Regulatory Landscape & Compliance Frameworks
• Desc: You'll need a solid understanding of relevant international regulations (e.g., GDPR, FDA, regional EHS laws) and how they interact with ISO standards. This includes knowing where our audit programme needs to flex to accommodate local legal requirements while maintaining global consistency.
• Area: Organisational Change Management Principles
• Desc: Driving compliance improvements across a global organisation is a massive change management exercise. You'll need to understand how to effectively lead change, manage resistance, and build a culture that embraces quality and compliance, not just tolerates it.
• Area: Enterprise Risk Management (ERM) Integration
• Desc: Your audit programme shouldn't operate in a silo. You'll need to understand how your findings feed into the broader enterprise risk management framework and how to align your audit priorities with the company's overall risk appetite and strategy.

Regulatory Compliance Regulations

• Reg: ISO 9001:2015 (Quality Management Systems)
• Usage: You'll be the ultimate authority on its interpretation and application across all our global operations, ensuring our QMS is robust, effective, and continuously improving. You'll oversee all audits related to this standard.
• Reg: ISO 14001:2015 (Environmental Management Systems)
• Usage: Leading the audit programme for environmental compliance, ensuring our operations meet international environmental standards and legal requirements, and driving sustainable practices globally.
• Reg: ISO 45001:2018 (Occupational Health & Safety Management Systems)
• Usage: Overseeing the health and safety audit programme, ensuring safe working conditions, compliance with OHS regulations, and proactive risk reduction across all sites.
• Reg: ISO 27001:2022 (Information Security Management Systems)
• Usage: Guiding audits of our information security systems, ensuring data protection, cyber resilience, and compliance with relevant data privacy regulations (e.g., GDPR, CCPA) across our global digital footprint.
• Reg: Relevant Industry-Specific Regulations (e.g., FDA, MHRA for Medical Devices; HACCP for Food Safety)
• Usage: If our business operates in regulated sectors, you'll need to understand how these regulations overlay and interact with ISO standards, ensuring our audit programme covers all critical compliance areas. You'll be expected to understand the impact of non-compliance in these areas.

Essential Prerequisites

• Extensive experience (at least 5+ years) as a Lead Auditor, having successfully led complex, multi-site or multi-standard audits independently.
• Demonstrated experience in managing or mentoring a team of auditors, including performance reviews and development plans.
• Proven track record of designing and implementing risk-based audit programmes for a significant business unit or region.
• Strong experience in engaging with external certification bodies and successfully navigating external audits.
• A deep understanding of how audit findings translate into business risk and financial impact.
• Experience working in a global or multi-national organisation, dealing with diverse operational and cultural contexts.

Career Pathway Context

We're not looking for someone who's just 'done audits' for a long time. We need someone who has actively shaped audit programmes, led teams, and influenced senior stakeholders. This is a step up into genuine management and strategic leadership within the compliance function, so prior experience in those areas, even informally, is crucial.

Qualifications & Credentials

Emerging Foundation Skills

• Skill: Ethical AI Governance & Audit
• Why: As we and our suppliers increasingly use AI in operations (e.g., automated decision-making, predictive maintenance), auditing for fairness, transparency, and bias becomes critical. Regulators are already looking at this, and we need to be ahead of the curve.
• Concepts: [{'concept_name': 'AI Ethics Frameworks', 'description': 'Understanding principles like fairness, accountability, transparency, and privacy in AI systems.'}, {'concept_name': 'Explainable AI (XAI)', 'description': 'Knowing how to audit AI models for interpretability and explainability, especially in critical processes.'}, {'concept_name': 'AI Risk Assessment', 'description': 'Identifying and assessing risks specific to AI deployment, such as data bias, model drift, and security vulnerabilities.'}, {'concept_name': 'AI Regulatory Landscape', 'description': "Staying abreast of emerging AI regulations (e.g., EU AI Act, UK's approach to AI) and their impact on our compliance."}]
• Prepare: This month: Read up on the EU AI Act and its implications for businesses like ours. Start with a reputable summary.
• Next quarter: Identify one internal AI-driven process and conduct a preliminary 'ethical AI' risk assessment with your team.
• Month 3-6: Attend a webinar or short course on AI governance or auditing AI systems. Consider a certification if available.
• Month 6-12: Develop a draft internal policy or audit checklist for AI-powered systems, ready for review.
• QuickWin: Start by simply asking business units if and where they're using AI. You can't audit what you don't know exists. Then, identify a simple AI application and brainstorm potential ethical risks with your team.
• Skill: Advanced Data Storytelling & Visualisation for Executives
• Why: We're drowning in data, but what senior leaders need are clear, concise stories that highlight risks and drive action. Just presenting numbers isn't enough anymore; you need to be able to translate complex audit findings into compelling narratives that resonate with the board.
• Concepts: [{'concept_name': 'Narrative Structure in Data', 'description': 'How to build a compelling story around your data, with a clear beginning (context), middle (findings), and end (recommendations).'}, {'concept_name': 'Visualisation Best Practices', 'description': 'Designing dashboards and reports that are intuitive, impactful, and avoid common pitfalls that mislead or confuse.'}, {'concept_name': 'Audience-Centric Communication', 'description': 'Tailoring your data presentations to the specific needs and interests of different executive audiences.'}, {'concept_name': 'Impact-Driven Reporting', 'description': "Focusing on the 'so what?'—what are the business implications of your findings, and what action needs to be taken?"}]
• Prepare: This week: Review your last executive report. Could it be clearer? Could the key message be stronger?
• This month: Find a good book or online course on data storytelling (e.g., by Cole Nussbaumer Knaflic).
• Next quarter: Redesign one of your recurring executive dashboards or reports using new visualisation techniques. Get feedback from a senior leader.
• Month 3-6: Practice presenting a complex audit finding to a non-technical audience, focusing purely on the story and impact.
• QuickWin: For your next team meeting, challenge everyone to summarise their key audit finding in one sentence, then explain its business impact in another. It's harder than it sounds!

Advancing Technical Skills

• Skill: Advanced GRC Platform Architecture & Optimisation
• Why: GRC platforms are becoming the central nervous system for compliance. You won't just use them; you'll be responsible for ensuring our platform's architecture supports our evolving global needs, integrates seamlessly, and provides the strategic insights we need.
• Concepts: [{'concept_name': 'API Integrations', 'description': 'Understanding how to connect the GRC platform with other enterprise systems for automated data flow.'}, {'concept_name': 'Workflow Automation', 'description': 'Designing and optimising complex audit and CAPA workflows within the platform to improve efficiency.'}, {'concept_name': 'Advanced Reporting Modules', 'description': 'Leveraging custom reporting capabilities to extract deeper insights and create tailored dashboards for different stakeholders.'}, {'concept_name': 'Data Governance within GRC', 'description': 'Ensuring data quality, security, and compliance within the platform itself, especially with global data privacy laws.'}]
• Prepare: This month: Deep dive into the advanced features of our current GRC platform. What are we not using?
• Next quarter: Work with the IT team to understand potential integration points with other business systems.
• Month 3-6: Identify one key workflow that could be significantly automated or optimised within the GRC platform.
• Month 6-12: Lead a project to implement a new reporting dashboard or integration, demonstrating clear value.
• QuickWin: Spend an hour with your GRC platform's admin guide. You'll be surprised what features you're missing. Then, challenge your team to find one way to automate a repetitive task using the platform's native capabilities.

Education Requirements

• Level: Minimum
• Req: A Bachelor's degree (or equivalent OFQUAL Level 6 qualification) in a relevant field such as Quality Management, Engineering, Environmental Science, Business Management, or Information Security.
• Alts: We're pragmatic. If you've got extensive, demonstrable experience (15+ years) in leading global audit programmes and a strong portfolio of successful compliance initiatives, we'd consider that equivalent. Show us what you've done.
• Level: Preferred
• Req: A Master's degree (or equivalent OFQUAL Level 7 qualification) in a related discipline, or an MBA.
• Alts: Relevant professional certifications (e.g., multiple Lead Auditor certifications, CISA, CSSBB) combined with significant leadership experience could be considered in lieu of a Master's.

Experience Requirements

You'll need roughly 12-16 years of progressive experience in Compliance, Quality, Health & Safety, with a significant portion (at least 7-10 years) directly in ISO auditing and at least 5 years in a management or lead role overseeing other auditors or audit programmes. We're looking for someone who has genuinely owned and delivered complex, multi-standard, international audit programmes, not just participated in them. Experience managing budgets and direct reports is non-negotiable.

Preferred Certifications

• Cert: ISO 27001 Lead Auditor
• Prod: IRCA / Exemplar Global (or equivalent)
• Usage: Increasingly important as information security risks grow. Demonstrates a broader understanding of integrated management systems.
• Cert: ISO 45001 Lead Auditor
• Prod: IRCA / Exemplar Global (or equivalent)
• Usage: Crucial for ensuring robust occupational health and safety compliance, especially in operational environments.
• Cert: Certified Quality Manager (CQM) / Certified Manager of Quality/Organisational Excellence (CMQ/OE)
• Prod: ASQ (American Society for Quality)
• Usage: Demonstrates a broader understanding of quality management principles beyond just auditing, which is valuable for driving systemic improvement.
• Cert: Certified Information Systems Auditor (CISA)
• Prod: ISACA
• Usage: Highly relevant if our business has significant IT systems or data security requirements, complementing ISO 27001 expertise.

Recommended Activities

• Regularly attend industry conferences and workshops on emerging compliance trends, AI in auditing, and global regulatory changes.
• Actively participate in professional networks and forums (e.g., LinkedIn groups, local ISO auditor chapters) to share best practices and learn from peers.
• Undertake continuous professional development (CPD) to maintain and expand your Lead Auditor certifications, exploring new standards as they become relevant.
• Seek out leadership training and coaching, particularly in areas like cross-cultural communication and change management, to enhance your managerial capabilities.
• Engage with internal training programmes focused on our specific business operations, products, and regional nuances to deepen your contextual understanding.

Career Progression Pathways

Entry Paths to This Role

• Path: From Lead ISO Auditor (L4) within a large organisation
• Time: 3-5 years as a Lead Auditor
• Path: From Audit Manager at a Certification Body
• Time: 5-8 years as an Audit Manager (or similar) at a certification body
• Path: From Quality/EHS/InfoSec Manager with strong audit focus
• Time: 5-7 years as a Quality/EHS/InfoSec Manager in a global company

Career Progression From This Role

• Pathway: Director of Global Audits & Compliance (L6)
• Time: 3-5 years in the Principal Auditor / Audit Programme Manager role

Long Term Vision Potential Roles

• Title: Chief Compliance & Quality Officer (L7)
• Time: 8-12+ years from this role
• Title: Head of Enterprise Risk Management
• Time: 7-10+ years from this role
• Title: Global Head of Operations Excellence
• Time: 7-10+ years from this role

How Zavmo Delivers This Role's Development

DISCOVER Phase: Skills Gap Analysis

Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.

Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.

DISCUSS Phase: Personalised Learning Pathway

Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).

Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.

DELIVER Phase: Conversational Learning

Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.

Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."

DEMONSTRATE Phase: Competency Assessment

Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.

Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.