Role Purpose & Context
Role Summary
The ISO and Standards Management Manager leads our entire management system, making sure we're not just compliant but truly excellent. You'll oversee the team, set the direction for our ISO certifications (think 9001, 14001, 45001), and generally make sure our quality, environmental, and safety programmes are robust. Day-to-day, this means you're responsible for the health of our system, from external audits to driving real, measurable improvements across the business.
This role sits right at the heart of our operational integrity. You'll be the one connecting what the standards say with what our teams actually do, translating abstract requirements into concrete actions that keep us certified and competitive. When you do this well, we avoid major non-conformances, reduce waste, and build a culture where quality and safety are just how we do things. If it's not done well, we risk losing certifications, facing fines, and frankly, putting our people and reputation at risk. The real challenge here is getting everyone on board, from the shop floor to the executive suite, and making sure our systems aren't just 'paperwork' but truly embedded. The reward? Seeing tangible improvements, knowing you've built something robust, and leading a team that makes a real difference to the business.
Reporting Structure
- Reports to: Director of Integrated Management Systems (IMS)
- Direct reports: Roughly 3-5 Senior Standards & Compliance Specialists or Lead Compliance Auditors, managing a total team of 10-25.
- Matrix relationships:
Quality & Compliance Manager, Management Systems Lead, Head of Standards, Integrated Management Systems Manager,
Key Stakeholders
Internal:
- Director of Integrated Management Systems (IMS)
- Senior Leadership Team (for Management Review)
- Department Heads (Operations, Engineering, HR, Sales)
- Internal Audit Teams
- Legal & Risk Management
External:
- Certification Bodies (e.g., BSI, SGS, DNV)
- External Auditors
- Regulatory Bodies (e.g., HSE, Environment Agency)
- Key Suppliers and Partners
Organisational Impact
Scope: This role directly impacts our ability to secure and maintain critical ISO certifications, which are often a prerequisite for winning major contracts. You'll influence operational efficiency, reduce the Cost of Poor Quality (COPQ), and significantly mitigate regulatory and reputational risks. Essentially, you're safeguarding our licence to operate and helping us build a more resilient, high-performing business.
Performance Metrics
Quantitative Metrics
- Metric: ISO Certification Status
- Desc: Maintaining all relevant ISO certifications (e.g., 9001, 14001, 45001) with zero major non-conformances during external audits.
- Target: Zero Major Non-conformances
- Freq: Annually (Surveillance Audits) and Triennially (Recertification Audits)
- Example: In the last external audit, we had zero major findings and only two minor observations, which were closed out within 30 days. That's what we're aiming for every time.
- Metric: Cost of Poor Quality (COPQ) Reduction
- Desc: Reducing the financial impact of quality failures, rework, waste, and customer complaints through targeted improvement projects.
- Target: 5% reduction year-on-year
- Freq: Quarterly & Annually
- Example: By streamlining the returns process and improving supplier quality checks, your team helped reduce COPQ from £1.2M to £1.1M in Q2, saving us £100,000.
- Metric: Management System Maturity Score
- Desc: Improving the overall effectiveness and integration of our management systems, often assessed by external auditors or internal assessments.
- Target: Improve from 'Adequate' to 'Effective' (or similar internal rating)
- Freq: Annually (post-external audit review)
- Example: Our external auditor noted a significant improvement in our risk management process this year, moving our overall system maturity rating up a notch. That's a direct reflection of your team's work.
- Metric: Internal Audit Program Effectiveness
- Desc: Ensuring our internal audit schedule is completed on time, findings are robust, and corrective actions are effective and closed promptly.
- Target: >95% schedule completion, <60 days average CAPA closure time
- Freq: Quarterly
- Example: We completed 28 out of 30 planned internal audits in Q3, and the average time to close a CAPA was 55 days, which is a solid improvement.
Qualitative Metrics
- Metric: Leadership Buy-in & Engagement
- Desc: Evidence that senior leadership actively participates in and values the management review process and the insights provided by the Compliance_Quality_Health_Safety function.
- Evidence: Senior leaders consistently attend Management Review meetings, proactively seek your team's input on strategic decisions, and allocate resources to improvement initiatives you propose. They're not just nodding along; they're genuinely engaged and asking good questions.
- Metric: Team Development & Empowerment
- Desc: The growth and effectiveness of your direct reports, demonstrated through their increasing autonomy, skill development, and contribution to strategic objectives.
- Evidence: Your team members are taking on more complex tasks, successfully leading projects, and receiving positive feedback from internal stakeholders. They feel supported, challenged, and see a clear path for their own development within the team.
- Metric: Proactive Risk Identification & Mitigation
- Desc: Moving beyond reactive problem-solving to systematically identifying potential compliance, quality, and safety risks before they become issues.
- Evidence: You're regularly presenting early warning indicators to leadership, new risks are being added to the risk register before incidents occur, and your team is leading preventative action initiatives that demonstrably reduce future issues. You're not just fixing fires; you're preventing them.
- Metric: Cross-functional Collaboration & Influence
- Desc: The ability to work effectively with other departments, getting their buy-in and cooperation on quality and compliance initiatives without resorting to mandates.
- Evidence: Other department heads are coming to you for advice, actively participating in process improvement workshops, and integrating quality/safety considerations into their own planning. You're seen as a trusted partner, not just 'the paperwork police'.
Primary Traits
- Trait: Meticulous
- Manifestation: You're the person who spots the one inconsistent date in a 50-page audit report. You insist on correcting a procedure's version number from 4.1 to 4.2 before release because you know it matters. You'll cross-reference training records against procedural requirements to ensure 100% compliance, not just 99%. As a manager, you instill this in your team, reviewing their work with a keen eye for detail, and teaching them to do the same.
- Benefit: Honestly, a single incorrect clause reference or a missed signature in a critical document can result in a major non-conformance during an external audit. That could jeopardise multi-million pound contracts that require our certification. At this level, it's about setting the standard for your team and ensuring our entire system is airtight. We can't afford sloppy work.
- Trait: Diplomatically Tenacious
- Manifestation: You're the one who can follow up with a busy Engineering Director five times to get a critical CAPA response, framing each request politely but firmly, explaining the 'why' behind the urgency. You'll calmly hold your ground in a management meeting when someone wants to bypass a required quality check to meet a deadline, explaining the risks clearly and professionally. You empower your team to do the same, coaching them on how to push back constructively.
- Benefit: This role, especially at a managerial level, has immense responsibility but often zero direct authority over other departments. Your success depends entirely on your ability to influence, persuade, and enforce the system's rules without alienating the entire organisation. You're the guardian of our standards, and sometimes that means being the unpopular voice in the room, but always with respect and a clear rationale.
- Trait: Systematic Thinker
- Manifestation: When a change is proposed to one form, you immediately identify the three other procedures and two work instructions that will be impacted, and you make sure your team considers this. You can draw the entire process flow for a customer complaint, from initial receipt to final closure, on a whiteboard from memory, and you expect your team to understand these connections too. You see the bigger picture, not just individual tasks.
- Benefit: You are the architect of our *management system*. You and your team must understand how all the individual processes connect and interact to ensure the system is coherent, effective, and truly integrated, not just a collection of isolated documents. Without this, our system becomes a tangled mess, prone to gaps and inefficiencies, making audits a nightmare and real improvement impossible.
Supporting Traits
- Trait: Inquisitive
- Desc: Naturally asks 'why' and 'how do you know,' which is the foundation of all effective auditing and problem-solving. You encourage your team to dig deeper, not just accept surface-level answers.
- Trait: Patient
- Desc: Understands that changing ingrained behaviours and processes across an organisation is a marathon, not a sprint. You're prepared for resistance and know how to chip away at it over time, bringing people along with you.
- Trait: Pragmatic
- Desc: Knows when to hold the line on a critical requirement and when a less-burdensome interpretation can achieve the same outcome without alienating stakeholders. You're about effectiveness, not just rigid adherence for adherence's sake.
- Trait: Coaching Mindset
- Desc: You're not just telling people what to do; you're teaching, guiding, and empowering your team and other departments to understand and own their part in the management system. You get satisfaction from seeing others develop.
Primary Motivators
- Motivator: Making a Tangible Impact
- Daily: You'll get a real kick out of seeing a process you helped design actually reduce errors, or knowing your team's work directly contributed to us passing a critical external audit. It's about seeing the results of your efforts in the real world.
- Motivator: Problem Solving & Improvement
- Daily: You're energised by digging into complex non-conformances, figuring out the true root cause, and then designing a solution that actually prevents it from happening again. It's like being a detective and an architect rolled into one.
- Motivator: Leading & Developing a Team
- Daily: You enjoy guiding your specialists, helping them grow their skills, and seeing them take ownership of their areas. There's satisfaction in building a strong, capable team that can tackle any challenge.
Potential Demotivators
Honestly, this role isn't for everyone. If you're someone who needs constant praise for every small win, or if you prefer a quiet life where everyone just gets on with it, you might find it tough. You'll often be the one pushing for change, which isn't always popular. The reality is messier than the job posting suggests, and sometimes you'll feel like you're fighting an uphill battle.
Common Frustrations
- The CAPA Chase: Spending an inordinate amount of time chasing department heads for overdue Corrective Action responses, feeling more like a nagging parent than a strategic partner. It's exhausting.
- The 'Paperwork Police' Stigma: Constantly fighting the perception that your job is just to create bureaucratic paperwork and slow everyone else down, rather than to improve the business. It can be demoralising.
- Pre-Audit Panic: Witnessing management ignore the system for 11 months, only to treat it as the company's #1 priority in the two weeks leading up to the external audit. It's a scramble every time.
- 'We've Always Done It This Way': The soul-crushing resistance to process improvement from individuals and departments who see any change as a threat. You'll hear this a lot.
- Proving Value Beyond the Certificate: The constant struggle to demonstrate the ROI of a robust management system in terms of efficiency, cost reduction, and risk mitigation, when leadership only sees it as a cost to keep a piece of paper on the wall. It's a battle for budget and recognition.
- Inheriting a 'System': Taking over a role to discover the 'ISO system' is nothing more than a chaotic, outdated collection of Word documents and spreadsheets on a shared drive with no clear ownership. You'll spend a lot of time tidying up.
What Role Doesn't Offer
- A quiet, solitary work environment – you'll be interacting with people constantly.
- A role where all decisions are clear-cut and easy – you'll face plenty of ambiguity and conflicting priorities.
- The ability to make everyone happy all the time – sometimes you have to enforce standards, even if it's unpopular.
- A place where you can avoid confrontation – you'll need to challenge assumptions and push for compliance.
ADHD Positives
- The varied nature of managing multiple standards, audits, and improvement projects can be highly engaging, leveraging a strength for parallel processing and novelty-seeking.
- Hyperfocus can be incredibly beneficial when diving deep into complex standard interpretations or root cause analyses, finding details others might miss.
- A drive for efficiency and automation can lead to innovative solutions for streamlining compliance processes, cutting through unnecessary bureaucracy.
ADHD Challenges and Accommodations
- Maintaining focus on administrative tasks like detailed reporting or document reviews can be challenging; using tools for task management, reminders, and breaking down large tasks into smaller chunks can help.
- Managing multiple competing priorities requires strong organisational strategies; visual tools like Kanban boards or dedicated project management software are essential.
- Impulsivity during high-pressure situations needs careful management; establishing clear decision-making frameworks and encouraging a 'pause and review' approach can be beneficial.
Dyslexia Positives
- Often brings strong visual and spatial reasoning skills, which are excellent for understanding complex process flows, system architecture, and identifying patterns in data that others might miss.
- A natural ability to see the 'big picture' can be invaluable for integrating different ISO standards and understanding how various processes connect within the overall management system.
- Strong verbal communication and storytelling skills can help translate complex compliance requirements into understandable language for diverse audiences, making training and stakeholder engagement more effective.
Dyslexia Challenges and Accommodations
- Reading and reviewing extensive technical documents (standards, procedures, audit reports) can be time-consuming; screen readers, text-to-speech software, and tools that highlight key information can be very helpful.
- Proofreading written reports and formal documentation requires extra care; using advanced grammar and spell-check tools, peer review, or dedicated proofreading time can mitigate challenges.
- Note-taking during meetings or audits might benefit from digital tools that allow for audio recording and transcription, or structured templates to guide information capture.
Autism Positives
- A strong adherence to rules, logic, and systems is a massive asset in compliance and standards management, ensuring consistency and integrity.
- Exceptional attention to detail can be critical for identifying non-conformances, ensuring accuracy in documentation, and meticulously following audit trails.
- A preference for structured processes and clear guidelines aligns perfectly with the nature of ISO standards and management systems, providing a solid framework for work.
Autism Challenges and Accommodations
- Navigating complex social dynamics and unspoken expectations in cross-functional meetings can be taxing; clear agendas, pre-reads, and direct communication are appreciated.
- Managing unexpected changes or 'urgent' requests that disrupt planned work might be challenging; establishing clear prioritisation frameworks and communication protocols for changes can help.
- Sensory sensitivities in an open-plan office or during site visits might require specific accommodations like noise-cancelling headphones, a quiet workspace option, or advance notice of environmental changes.
Sensory Considerations
Our office environment is typically a modern, open-plan space, which can sometimes be bustling with conversation and activity. We do have quiet zones and meeting rooms available for focused work. Site visits to operational areas (e.g., manufacturing plants, warehouses) will involve varying levels of noise, machinery, and sometimes specific PPE requirements. We're committed to making reasonable adjustments to ensure everyone can perform their best.
Flexibility Notes
We offer hybrid working, typically 3 days in the office and 2 from home, which can provide flexibility for managing sensory input. We're also open to discussing specific scheduling adjustments or workspace setups to support individual needs.
Key Responsibilities
Experience Levels Responsibilities
- Level: Principal/Manager (12-16 years)
- Responsibilities: Set the strategic direction for our ISO management systems (9001, 14001, 45001, etc.), ensuring they're not just compliant but actually add value to the business. This means looking beyond the 'what' and focusing on the 'why' and 'how it helps us'.
- Lead, mentor, and develop your team of Standards & Compliance Specialists and Lead Auditors. You'll be responsible for their performance, career growth, and making sure they have the tools and support they need to excel. Think coaching, not just directing.
- Oversee the entire internal and external audit programme. You'll be the primary point of contact for the Certification Body ('The CB'), managing their visits, reviewing audit reports, and ensuring all findings are addressed effectively and on time. No surprises here, please.
- Chair the Management Review meetings, presenting performance data, identifying trends, and making recommendations to senior leadership for strategic improvements. You'll need to translate technical jargon into business language that resonates with the C-suite.
- Drive significant continual improvement projects across the organisation, using data from audits, incidents, and customer feedback. This isn't just about fixing problems; it's about making our processes inherently better and more robust. You'll own the 'Plan-Do-Check-Act' cycle at a strategic level.
- Manage the budget for the Compliance_Quality_Health_Safety function, including software licences, training, and external audit fees. You'll need to justify spending and show a clear return on investment.
- Act as the ultimate subject matter expert on all things ISO and standards-related, providing authoritative guidance to other departments and ensuring our interpretations are consistent and pragmatic. You're the go-to person when things get tricky.
- Supervision: You'll be largely self-directed, focusing on quarterly objectives and strategic alignment with the Director of IMS. We trust you to manage your time and priorities, but you'll have regular check-ins to discuss strategic challenges and team performance. You're expected to provide strong, consistent supervision and mentorship to your direct reports, empowering them to take ownership while ensuring quality.
- Decision: You have full authority for the Compliance_Quality_Health_Safety function's operational decisions, including budget allocation up to £1M, hiring and performance management within your team, and vendor selection for QMS/EHS software up to £250K. Strategic direction for the overall management system requires alignment with the Director of IMS, and major organisational changes would involve the executive team. You'll sign off on all major audit responses and improvement plans.
- Success: You'll know you're succeeding when we consistently pass external audits with zero major non-conformances, your team is highly engaged and developing, and other departments proactively seek your input. When the Management Review meetings are genuinely productive and lead to measurable improvements, that's a big win. Ultimately, it's about making our management systems a competitive advantage, not just a compliance overhead.
Decision-Making Authority
- Type: QMS/EHS Platform Configuration & Workflow Changes
- Entry: Follows established workflows; escalates any proposed changes.
- Mid: Proposes minor workflow adjustments; requires manager approval.
- Senior: Designs and implements complex workflow changes within their area; consults with Lead/Manager for broader system impact.
- Type: Internal Audit Schedule & Scope
- Entry: Executes assigned audit tasks within the defined schedule.
- Mid: Suggests minor adjustments to audit schedule based on operational needs; requires manager approval.
- Senior: Designs specific audit checklists and plans for individual audits; consults with Lead/Manager on overall programme scope.
- Type: Corrective & Preventive Action (CAPA) Closure
- Entry: Tracks CAPA status; escalates overdue actions.
- Mid: Verifies objective evidence for routine CAPA closure; requires manager approval for complex or high-risk CAPAs.
- Senior: Approves closure of complex CAPAs within their workstream, ensuring root cause is addressed and effectiveness verified.
- Type: Budget Allocation for Compliance_Quality_Health_Safety Function
- Entry: No budget authority.
- Mid: May request specific training or tool licences; requires manager approval.
- Senior: Proposes budget needs for specific projects or resources within their workstream; requires manager approval.
ID:
Tool: Audit Prep Automation
Benefit: Use AI to scan all procedures related to a specific department (e.g., Procurement) and automatically generate a draft internal audit checklist based on the requirements of ISO 9001 Clause 8.4. As a manager, you'd then review and refine, saving your team hours of manual cross-referencing.
ID:
Tool: Strategic Trend Analysis Accelerator
Benefit: Feed hundreds of unstructured incident reports or audit findings into an AI model to identify hidden systemic trends and correlations (e.g., a specific machine failing most often on 3rd shift, or a particular training gap causing recurring issues). This gives you insights for strategic improvement projects that are invisible to manual analysis, helping you justify resource allocation to the board.
ID:
Tool: Standards Change Summarizer & Gap Analysis
Benefit: When a new version of a standard is released (e.g., ISO 14001:2015), use an LLM to perform a gap analysis against the old version, summarising the key changes, deletions, and new requirements in a concise brief for management. This means your team can quickly understand the impact and update the system without months of manual review.
ID: ✍️
Tool: CAPA & Management Review Report Drafting
Benefit: Use AI to generate a first draft of formal audit findings, CAPA responses, or even sections of your Management Review report. Provide it with the raw data (the problem, the evidence, the root cause, performance metrics), and have it structure the information into a professional, compliant format. Your team gets to focus on the content and strategy, not the formatting.
15-25 hours per week for you and your team, collectively
Weekly time savings potential
You'll typically use 2-3 core AI tools, often integrated into our existing platforms or as standalone subscriptions (roughly £50-£200/month for advanced features).
Typical tool investment
Competency Requirements
Foundation Skills (Transferable)
These are the core human skills that underpin everything you'll do. We're looking for someone who can not only manage processes but also lead people and influence outcomes across the business.
- Category: Leadership & People Development
- Skills: Coaching & Mentoring: The ability to guide and develop your team members, helping them grow their skills and take on more responsibility. It's about empowering them, not just telling them what to do.
- Team Management: Effectively leading a team, setting clear objectives, managing performance, and fostering a collaborative and high-performing environment. You're the conductor of the orchestra.
- Delegation & Empowerment: Knowing what to delegate, how to delegate effectively, and trusting your team to deliver, while providing the necessary support and oversight.
- Conflict Resolution: Skillfully navigating disagreements within your team or between departments, finding constructive solutions that maintain relationships and move things forward.
- Category: Strategic Communication & Influence
- Skills: Executive Presentation: The ability to present complex compliance data and strategic recommendations clearly and concisely to senior leadership, capturing their attention and securing buy-in. No jargon, just impact.
- Negotiation & Persuasion: Skillfully influencing department heads and other stakeholders to adopt new processes or address non-conformances, often without direct authority. It's about winning hearts and minds.
- Cross-functional Collaboration: Building strong working relationships with other departments, understanding their challenges, and working together to integrate quality and compliance into their operations.
- Active Listening: Truly understanding the concerns and perspectives of your team, stakeholders, and auditors, which is crucial for effective problem-solving and building trust.
- Category: Problem Solving & Decision Making
- Skills: Strategic Thinking: Looking beyond immediate problems to identify systemic issues and long-term solutions that align with business objectives. It's about playing chess, not checkers.
- Risk-Based Decision Making: Evaluating potential compliance, quality, and safety risks, and making informed decisions that balance business needs with regulatory requirements. Sometimes there are tough trade-offs.
- Critical Analysis: The ability to dissect complex data, audit findings, and process issues to identify root causes and develop effective corrective actions. You're constantly asking 'why' and 'how do we know?'
- Change Management: Leading and guiding the organisation through process changes and system improvements, addressing resistance and ensuring successful adoption.
Functional Skills (Role-Specific Technical)
These are the specific technical and domain skills you'll need to run our management systems. You're expected to be an expert in these areas and capable of guiding your team.
Technical Competencies
- Skill: Core Standard Interpretation (ISO 9001, 14001, 45001)
- Desc: The ability to read a clause from any relevant ISO standard (e.g., ISO 9001: Clause 8.3 Design & Development) and translate its abstract requirements into concrete, auditable processes for the organisation. At this level, you're not just interpreting; you're defining our organisational interpretation and ensuring consistency.
- Level: Expert
- Skill: Process-Based Auditing
- Desc: Leading and overseeing audits not as a simple checklist exercise, but by following a process from input to output (using tools like the Turtle Diagram) to assess its effectiveness and interactions with other processes. You'll ensure your team conducts robust, value-adding audits.
- Level: Expert
- Skill: Root Cause Analysis (RCA)
- Desc: Mastery of structured problem-solving techniques beyond just asking 'why.' This includes practical application and teaching of 5 Whys, Fishbone (Ishikawa) Diagrams, and Fault Tree Analysis to ensure corrective actions address the true root cause, not just the symptom. You're accountable for the effectiveness of all CAPAs.
- Level: Expert
- Skill: Risk Management (ISO 31000)
- Desc: The ability to facilitate and oversee risk assessments (e.g., FMEA - Failure Mode and Effects Analysis), maintain comprehensive risk registers, and integrate risk-based thinking into all aspects of the management system, not just as a standalone exercise. You'll guide the organisation in identifying and mitigating risks proactively.
- Level: Advanced
- Skill: Continual Improvement Frameworks (PDCA)
- Desc: The disciplined application of the Plan-Do-Check-Act cycle to drive systematic improvements across the business, ensuring changes are planned, tested, verified, and standardised if successful. You'll be leading these cycles at a strategic level.
- Level: Advanced
- Skill: Document & Records Control
- Desc: Understanding the critical difference between a controlled 'document' (a living instruction) and a 'record' (evidence of a past event) and managing the lifecycle of each according to retention and integrity requirements. You'll set the policy and oversee its implementation across the organisation.
- Level: Expert
Digital Tools
- Tool: QMS/EHS Platform (e.g., Intelex, Cority, ETQ Reliance, Veeva QualityDocs)
- Level: Strategic
- Usage: Leading platform selection/evaluation, managing vendor relationships, overseeing system integration with ERPs (e.g., SAP), and using system data for strategic forecasting and management review reporting.
- Tool: Document Control System (e.g., SharePoint Online with versioning, Confluence, MasterControl)
- Level: Architect
- Usage: Setting enterprise-wide document governance strategy. Approving major structural changes, managing retention policies, and ensuring the system meets regulatory data integrity requirements (e.g., FDA 21 CFR Part 11 where applicable).
- Tool: Audit Management Software (e.g., AuditBoard, TeamMate, Workiva)
- Level: Strategic
- Usage: Analysing cross-audit trends to identify systemic risks, configuring risk-based audit scheduling, and presenting summary dashboards to the Audit Committee or senior leadership.
- Tool: Data Analysis & Visualization (e.g., Excel (Power Query, PivotCharts), Power BI, Tableau)
- Level: Strategic
- Usage: Defining the key quality & compliance metrics for executive dashboards. Using data to model risk, predict compliance failures, and justify resource allocation to the board. You'll be telling the story with data.
- Tool: Collaboration & Communication (e.g., MS Teams, Slack, Miro)
- Level: Strategic
- Usage: Establishing communication protocols for major incidents or audit findings. Using these platforms to communicate strategy, key results, and drive engagement across the business and with your team.
- Tool: Enterprise Resource Planning (ERP) (e.g., SAP S/4HANA, Oracle NetSuite)
- Level: Strategic
- Usage: Collaborating with IT/Finance to ensure ERP data structures support compliance requirements and that QMS/EHS systems are properly integrated. Understanding how quality and compliance data flows through the core business systems.
Industry Knowledge
- Area: Regulatory Landscape
- Desc: Deep understanding of relevant industry-specific regulations (e.g., environmental permits, health & safety legislation, product specific regulations) and how they intersect with ISO standards. You'll need to know what applies to our business and how to stay ahead of changes.
- Area: Business Operations
- Desc: A solid grasp of our company's core business processes, products, and services. You can't manage compliance effectively if you don't understand how the business actually works day-to-day. This helps you design pragmatic solutions.
- Area: Supplier Quality Management
- Desc: Knowledge of how to assess and manage the quality and compliance of our supply chain, including supplier audits, performance monitoring, and contractual requirements. Our quality often starts with our suppliers.
Regulatory Compliance Regulations
- Reg: ISO 9001: Quality Management Systems
- Usage: You'll be the organisational expert, leading our certification, defining our quality policy, and ensuring all processes meet its requirements. You'll also be responsible for guiding your team and other departments in its application.
- Reg: ISO 14001: Environmental Management Systems
- Usage: You'll oversee our environmental programme, ensuring compliance with environmental legislation and driving initiatives to reduce our environmental impact in line with the standard. This includes managing environmental aspects and impacts.
- Reg: ISO 45001: Occupational Health & Safety Management Systems
- Usage: You'll be responsible for our safety management system, ensuring a safe working environment, compliance with health and safety legislation, and promoting a proactive safety culture. This involves managing risks, incidents, and emergency preparedness.
- Reg: Industry-Specific Regulations (e.g., HSE, Environment Agency guidelines)
- Usage: You'll need to understand and ensure our operations comply with all relevant national and local regulations pertaining to our industry, integrating these requirements into our ISO management systems. This means staying up-to-date with legislative changes.
Essential Prerequisites
- Extensive experience (10+ years) in managing and implementing ISO management systems (Quality, Environmental, Safety) within a complex operational environment.
- Proven track record of leading and developing a team of compliance or quality professionals.
- Demonstrable experience in successfully managing external certification audits with a history of zero major non-conformances.
- Advanced proficiency in Root Cause Analysis and Continual Improvement methodologies, with examples of driving significant process improvements.
- Strong ability to influence and persuade senior stakeholders without direct authority, backed by excellent communication and presentation skills.
- A deep, practical understanding of how QMS/EHS platforms and document control systems are used strategically to manage compliance across an organisation.
Career Pathway Context
Typically, candidates for this role will have progressed from a Lead Compliance Auditor or Standards Architect position, having already mastered the technical aspects of ISO standards and audit management. You'll have moved beyond individual contribution to leading and shaping a function, ready to take on broader strategic responsibilities and team leadership.
Qualifications & Credentials
Emerging Foundation Skills
- Skill: ESG (Environmental, Social, Governance) Integration
- Why: Customers, investors, and regulators are increasingly demanding transparency and demonstrable performance in ESG areas. Our management systems need to expand beyond traditional ISO scopes to encompass broader sustainability and ethical practices. It's no longer a 'nice to have'; it's critical for reputation and investment.
- Concepts: [{'concept_name': 'Materiality Assessments', 'description': 'Identifying the most significant ESG issues for our business and stakeholders.'}, {'concept_name': 'ESG Reporting Frameworks (e.g., GRI, SASB)', 'description': 'Understanding and applying global standards for reporting on sustainability performance.'}, {'concept_name': 'Supply Chain Due Diligence', 'description': 'Extending compliance and ethical standards to our entire supply chain, not just our direct operations.'}, {'concept_name': 'Carbon Footprinting & Reduction Strategies', 'description': "Measuring and actively working to reduce our environmental impact beyond ISO 14001's basic requirements."}]
- Prepare: This quarter: Read up on a major ESG reporting framework like GRI or SASB. Understand its structure.
- Next 6 months: Identify one key ESG metric relevant to our business (e.g., energy consumption) and integrate its tracking into our existing QMS/EHS platform.
- Next 12 months: Lead a small pilot project to conduct a basic supply chain ESG risk assessment for a critical supplier.
- Ongoing: Network with sustainability professionals, attend webinars on ESG trends, and explore how other companies are integrating ESG into their management systems.
- QuickWin: Start by identifying existing data points within our current systems that could contribute to ESG reporting (e.g., waste figures, training hours, incident rates). You might already have more than you think.
- Skill: Data Governance & Integrity for Compliance
- Why: As we rely more on digital systems and AI, ensuring the accuracy, reliability, and security of our compliance data becomes paramount. Regulators are increasingly scrutinising data integrity, especially in highly regulated sectors. Bad data means bad decisions and potential non-compliance.
- Concepts: [{'concept_name': 'Data Lifecycle Management', 'description': 'Understanding how compliance data is created, stored, used, and archived, ensuring integrity at each stage.'}, {'concept_name': 'Data Quality Metrics', 'description': 'Defining and monitoring measures for accuracy, completeness, consistency, and timeliness of compliance data.'}, {'concept_name': 'Audit Trails & Version Control', 'description': 'Ensuring all changes to critical compliance data are traceable and properly documented.'}, {'concept_name': 'Cybersecurity for QMS/EHS Systems', 'description': 'Collaborating with IT to protect compliance data from unauthorised access, modification, or destruction.'}]
- Prepare: This quarter: Work with IT to understand the backup and recovery protocols for our QMS/EHS platform. Where does the data live?
- Next 6 months: Develop a 'data integrity checklist' for critical compliance records, ensuring your team applies it during audits.
- Next 12 months: Lead a review of our document control system's access permissions to ensure only authorised personnel can modify key documents.
- Ongoing: Attend workshops on data governance best practices, particularly those focused on regulatory compliance and data integrity.
- QuickWin: Review one critical compliance record (e.g., a CAPA closure record) and map its data journey from creation to archiving. Identify any potential weak points for data integrity.
Advancing Technical Skills
- Skill: Advanced QMS/EHS Platform Optimisation & Integration
- Why: Our QMS/EHS platform isn't just a record-keeping system; it needs to become a central hub for operational intelligence. You'll need to push its capabilities, integrate it with other business systems (like ERPs), and ensure it's truly driving efficiency and insights, not just compliance.
- Concepts: [{'concept_name': 'API Integrations for Data Flow', 'description': 'Understanding how to connect our QMS/EHS platform with other systems (e.g., HR for training records, ERP for production data) to automate data exchange.'}, {'concept_name': 'Advanced Analytics & Predictive Modelling', 'description': "Using the platform's data to predict potential compliance issues, identify high-risk areas, and proactively intervene."}, {'concept_name': 'User Experience (UX) Optimisation', 'description': 'Ensuring the platform is intuitive and easy for all users, driving adoption and data quality.'}, {'concept_name': 'Vendor Management & Roadmap Influence', 'description': 'Working closely with our software vendors to influence their product roadmap and ensure it meets our evolving compliance needs.'}]
- Prepare: This quarter: Schedule a deep-dive session with our QMS/EHS platform's technical support to understand its full integration capabilities.
- Next 6 months: Identify one manual data transfer process between our QMS/EHS and another system, and work with IT to automate it.
- Next 12 months: Lead a project to redesign one key dashboard in the QMS/EHS platform, making it more actionable for senior leadership.
- Ongoing: Regularly review new features and updates from our QMS/EHS vendor, assessing their potential impact and value for our compliance programme.
- QuickWin: Identify one under-utilised feature in our current QMS/EHS platform and champion its adoption within your team, demonstrating its value.
Future Skills Closing Note
The future of ISO and Standards Management isn't just about knowing the rules; it's about strategically applying technology, understanding broader business contexts like ESG, and continuously evolving our systems to be smarter, more efficient, and truly value-adding. We're looking for a leader who's excited by that challenge.
Education Requirements
- Level: Minimum
- Req: A Bachelor's degree (or equivalent OFQUAL Level 6 qualification) in a relevant field such as Engineering, Science, Business Management, or Environmental Studies.
- Alts: We're pragmatic here. If you've got extensive, demonstrable experience (15+ years) in a senior compliance or quality role, particularly with significant leadership responsibilities, we're happy to consider that in lieu of a degree. Show us what you've built.
- Level: Preferred
- Req: A Master's degree (or equivalent OFQUAL Level 7 qualification) in Quality Management, Environmental Management, Occupational Health & Safety, or a related field.
- Alts: Relevant professional certifications (e.g., Chartered Quality Professional, NEBOSH Diploma) combined with exceptional experience could also be highly advantageous.
Experience Requirements
You'll need roughly 12-16 years of progressive experience in managing and implementing ISO management systems (ISO 9001, 14001, 45001 are non-negotiable). This should include a minimum of 5-7 years in a leadership or managerial capacity, where you've been responsible for a team and a significant portion of the management system. We're looking for someone who has not just participated in audits, but has led entire audit programmes, managed external certification bodies, and driven significant, measurable improvements across an organisation. You'll have a proven track record of influencing senior stakeholders and delivering results in complex operational environments.
Preferred Certifications
- Cert: Chartered Quality Professional (CQP)
- Prod: Chartered Quality Institute (CQI)
- Usage: Demonstrates a high level of professional competence and commitment to quality management principles, recognised across the UK and internationally.
- Cert: NEBOSH National Diploma in Occupational Health and Safety
- Prod: NEBOSH
- Usage: Provides a deeper, more comprehensive understanding of health and safety management, crucial for robust ISO 45001 implementation and legal compliance.
- Cert: Certified Risk Manager (CRM)
- Prod: Various (e.g., IRM)
- Usage: Enhances your ability to integrate risk management (ISO 31000) more strategically into our overall management systems, moving beyond basic risk registers.
- Cert: Lean Six Sigma Black Belt
- Prod: Various
- Usage: Provides advanced tools and methodologies for driving significant process improvements and reducing waste, directly contributing to COPQ reduction and operational efficiency.
Recommended Activities
- Regularly attend industry conferences and seminars (e.g., CQI events, IOSH conferences) to stay abreast of best practices and emerging trends in quality, environmental, and safety management.
- Actively participate in professional networks and forums to share knowledge and learn from peers in other organisations.
- Subscribe to relevant regulatory updates and industry publications to ensure continuous awareness of legislative changes and new standards.
- Undertake continuous professional development (CPD) in leadership, change management, and advanced data analytics to enhance your strategic capabilities.
- Seek out opportunities to mentor junior professionals, solidifying your own understanding and leadership skills.
Career Progression Pathways
Entry Paths to This Role
- Path: Lead Compliance Auditor / Standards Architect (L4)
- Time: 3-5 years in previous role
- Path: Senior Quality Engineer / Manager in a large manufacturing firm
- Time: 5-7 years in previous role
Career Progression From This Role
- Pathway: Director of Integrated Management Systems (IMS) (L6)
- Time: 3-5 years in current role
Long Term Vision Potential Roles
- Title: Chief Compliance & Quality Officer (L7)
- Time: 5-10 years from current role
- Title: Chief Operating Officer (COO)
- Time: 7-12 years from current role
- Title: Head of ESG & Sustainability
- Time: 5-10 years from current role
Sector Mobility
Your expertise in ISO and standards management is highly transferable across a vast array of industries. Manufacturing, healthcare, aerospace, automotive, energy, and even service-based sectors all rely heavily on robust management systems. Your skills are in demand wherever quality, safety, and environmental performance are critical.
How Zavmo Delivers This Role's Development
DISCOVER Phase: Skills Gap Analysis
Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.
Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.
DISCUSS Phase: Personalised Learning Pathway
Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).
Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.
DELIVER Phase: Conversational Learning
Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.
Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."
DEMONSTRATE Phase: Competency Assessment
Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.
Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.