Lead International ISO Auditor

Role Purpose & Context

Role Summary

The Lead International ISO Auditor is responsible for designing, leading, and overseeing complex, integrated audits across our global operations. This means you'll be the one pulling together the audit plan for multiple ISO standards – think 9001, 14001, and 45001 all at once – making sure we're looking at the big picture, not just isolated bits. You'll sit right at the intersection of our operational teams and senior leadership, translating what you find on the factory floor into clear, actionable insights that our executives use to make strategic decisions about risk and compliance. When you do this job well, we maintain our certifications without a hitch, our safety incidents drop, and our processes actually get better. If you get it wrong, we could face hefty fines, reputational damage, or, worst of all, harm to our employees or the environment. The tricky part is navigating complex organisational politics and getting different departments to agree on what 'good' looks like. The reward, though, is seeing your work directly improve how we operate, making a tangible difference to our business and our people.

Reporting Structure

• Reports to: Audit Program Manager
• Direct reports: Typically 3-8 junior or mid-level auditors
• Matrix relationships: Principal QHS Auditor, Senior Compliance Auditor (ISO), Integrated Management System Lead Auditor,

Key Stakeholders

Internal:

• Heads of Operations and Manufacturing
• Quality, Environmental, and Health & Safety Managers
• Product Development and Engineering Leads
• Legal and Regulatory Affairs Teams
• Senior Leadership Team (Directors, VPs)

External:

• External Certification Bodies (Registrars)
• Regulatory Authorities (e.g., HSE, EPA equivalents globally)
• Key Suppliers and Contract Manufacturers
• Industry Associations

Organisational Impact

Scope: This role directly impacts our ability to maintain international certifications, which is crucial for market access and customer trust. You'll be shaping our risk profile by identifying systemic weaknesses and driving their correction, ultimately protecting our brand, our finances, and our workforce. Your work ensures we're not just compliant, but truly operating to world-class standards, which, frankly, is a massive competitive advantage.

Performance Metrics

Quantitative Metrics

1. Metric: Audit Programme Completion Rate
2. Desc: Percentage of planned audits completed on schedule by your team.
3. Target: 95% or higher
4. Freq: Quarterly
5. Example: If 20 integrated audits were scheduled for Q1, and your team completed 19 of them on time, that's a 95% completion rate. We understand things happen, but consistent delays are a red flag.
6. Metric: Average CAPA Closure Time
7. Desc: The average number of days it takes for corrective and preventive actions (CAPAs) from audits you lead to be formally closed and verified.
8. Target: Reduced by 15% year-on-year for your audit portfolio
9. Freq: Bi-annually
10. Example: If the average closure time for your audits was 90 days last year, we'd expect it to be 76.5 days or less this year. It shows you're driving accountability.
11. Metric: Repeat Finding Reduction
12. Desc: Year-over-year reduction in the number of non-conformances identified in areas previously audited by your team.
13. Target: 20% reduction in repeat Major NCs, 10% for Minor NCs
14. Freq: Annually
15. Example: If you found 5 Major NCs related to calibration in Q1 last year, and only 3 this year in the same area, that's a 40% reduction – brilliant work showing real improvement.
16. Metric: Mentee Development & Retention
17. Desc: The successful development and retention of junior auditors you directly mentor.
18. Target: At least 1-2 junior auditors successfully progress to the next level or take on more complex tasks annually, with 80%+ retention.
19. Freq: Annually (via performance reviews and retention data)
20. Example: Your two L2 auditors are now confidently leading their own single-standard audits, and both are still with us after 18 months. That's a win.

Qualitative Metrics

1. Metric: Strategic Audit Planning Contribution
2. Desc: Your ability to influence the overall audit programme by identifying emerging risks and suggesting high-impact audit areas.
3. Evidence: You're regularly invited to strategic planning meetings. Your proposals for new audit areas (e.g., supply chain cyber security) are adopted. You're seen as someone who thinks ahead, not just reacts.
4. Metric: Effectiveness of Stakeholder Engagement
5. Desc: How well you build rapport and gain buy-in from senior operational leaders, even when delivering tough news.
6. Evidence: Feedback from auditees (especially senior ones) praises your professionalism and constructive approach. You're able to get commitments for corrective actions without constant escalation. People actually *want* to work with you, not just tolerate you.
7. Metric: Quality of Audit Reporting & Insights
8. Desc: The clarity, conciseness, and actionable nature of your audit reports and management summaries.
9. Evidence: Your reports are consistently used by senior management for decision-making. They highlight systemic issues rather than just individual findings. Your executive summaries are clear enough for someone outside Compliance to grasp quickly.
10. Metric: Team Leadership & Development
11. Desc: Your effectiveness in guiding, supporting, and developing your direct reports.
12. Evidence: Your team members feel supported and challenged. They regularly seek your advice. You delegate effectively, providing clear guidance but also room for growth. You're building a stronger audit function through your leadership.

Primary Traits

• Trait: Meticulously Inquisitive
• Manifestation: You're the person who asks 'why' at least three times when someone explains a process, not to be difficult, but because you genuinely want to understand the root cause. You'll cross-reference a training record with an employee's actual work observation on the shop floor. You'd spot a small discrepancy between a calibration sticker on a machine and the master log without even trying. When auditing an integrated system, you'll connect the dots between an environmental procedure and a safety incident, or a quality control check and a supplier issue. You just can't help but dig deeper.
• Benefit: This trait is absolutely crucial because it's how we uncover the real, systemic issues that a simple checklist audit would miss. It's the difference between just verifying a fire extinguisher is present and verifying it's the *correct type* for the potential fire hazard in that area, preventing a potential catastrophe. At this level, it means uncovering complex interdependencies across multiple ISO standards, which is where the biggest risks often hide.
• Trait: Diplomatically Assertive
• Manifestation: You can calmly hold your ground when a senior manager tries to dismiss a finding as 'minor' or 'just a paperwork issue', especially when you know it's a systemic risk. You present a non-conformance as a factual observation based on irrefutable objective evidence, not a personal criticism, even when the auditee is getting defensive. You're able to say, 'I cannot accept that as sufficient evidence for clause X.X' without creating hostility or damaging the relationship. You get the job done, but you don't leave a trail of broken bridges.
• Benefit: Auditees, especially at senior levels, can be defensive or push back hard. This trait allows you, as a Lead Auditor, to enforce the standard and maintain the integrity of the audit process without destroying the working relationships needed to implement corrective actions. You need to be firm but fair, ensuring that real issues are addressed, not swept under the carpet, especially when the stakes are high with integrated audits.
• Trait: Systematic Thinker
• Manifestation: You naturally connect a poorly written work instruction in Engineering (an ISO 9001 finding) to a product failure in Manufacturing (another 9001 issue), and then realise it also impacts a safety procedure (ISO 45001) because the wrong tool was used. You visualise the entire management system – Quality, Environment, Health & Safety – as an interconnected web, not just a list of separate clauses. You see how a change in one area ripples through others, and you can explain those connections clearly.
• Benefit: At the Lead level, you're dealing with integrated management systems. This ability is absolutely essential for identifying systemic failures that span multiple standards and departments, leading to far more impactful corrective actions. You don't just fix one problem; you fix the broken process that creates multiple problems across the entire organisation, which is where the real value of a Lead Auditor lies.

Supporting Traits

• Trait: Resilient
• Desc: You can bounce back from confrontational interviews, long travel days, and the occasional frustration of chasing overdue CAPAs. You don't let setbacks derail your focus or your professional demeanour.
• Trait: Highly Ethical
• Desc: You have unwavering integrity when faced with pressure to overlook a finding or to 'go easy' on a particular department. You understand that compromising on standards isn't an option, ever.
• Trait: Articulate
• Desc: You can explain a complex clause from an ISO standard in simple, understandable terms, whether you're talking to a shop-floor operator, a junior auditor, or a C-level executive. Your written reports are clear, concise, and leave no room for misinterpretation.
• Trait: Self-Directed
• Desc: You manage your own schedule, travel logistics, and complex audit plans with minimal supervision. You're proactive in identifying what needs to be done and getting on with it, without waiting to be told.

Primary Motivators

1. Motivator: Making a Tangible Difference
2. Daily: You'll get a real kick out of seeing a process improve because of an audit finding you raised. It's about knowing your work directly contributes to a safer workplace, better products, or a cleaner environment. You're not just reporting problems; you're driving solutions.
3. Motivator: Solving Complex Puzzles
4. Daily: You thrive on dissecting intricate management systems, figuring out how different standards intersect, and uncovering hidden risks. It's like being a detective, piecing together clues to understand the full picture of an organisation's compliance health.
5. Motivator: Developing and Leading Others
6. Daily: You enjoy guiding junior auditors, helping them understand the nuances of auditing, and watching them grow. Seeing your team members confidently lead their own audit segments or successfully close a difficult CAPA brings you genuine satisfaction.

Potential Demotivators

Honestly, this job isn't for everyone. You'll definitely experience 'Audit-Day Theatre' where everyone is on their best behaviour, knowing it's not the reality of the other 362 days. You'll spend a fair bit of time 'chasing down overdue CAPAs', relentlessly following up with department managers who treat closing their corrective actions as their lowest priority. There's also the deep frustration of the 'Paper System vs. Reality' – reading a beautifully written procedure and then watching an employee on the floor do something completely different, forcing you to write an NC. You might feel like the 'Necessary Evil', fighting the perception that you are internal affairs or the 'police', rather than a partner. And yes, you'll get into 'the Semantics Argument' – a 20-minute debate with a defensive process owner over the precise interpretation of a single word like 'ensure' or 'determine' in a clause. If you need constant praise or a perfectly smooth ride, you'll struggle here. The 'Evidence Scavenger Hunt' is real, too, wasting valuable audit time because the auditee is disorganised and can't produce records. And let's not forget 'Travel Burnout' – the unglamorous reality of weekly flights, generic hotels, and living out of a suitcase.

Common Frustrations

1. Dealing with auditees who are more interested in 'passing' the audit than genuinely improving their processes.
2. The constant battle to get timely and complete objective evidence, often feeling like you're pulling teeth.
3. When a critical finding you've raised gets deprioritised or watered down by senior management (though you'll fight hard against this).
4. The administrative burden of managing multiple audit programmes and reporting requirements across different systems.
5. Explaining the same fundamental ISO concept to different teams over and over again.

What Role Doesn't Offer

1. A predictable, 9-to-5 desk job with no travel.
2. A role where you don't have to confront people or deliver difficult feedback.
3. Complete control over the implementation of corrective actions (you guide, others execute).
4. An environment free from bureaucracy or occasional political manoeuvring.

ADHD Positives

1. The varied nature of audits, constantly moving between different departments, sites, and processes, can be highly engaging and prevent boredom.
2. The hyperfocus often associated with ADHD can be a huge asset when deep-diving into complex documentation or identifying intricate connections between systems.
3. The need to quickly adapt to new information and unexpected findings during an audit can play to strengths in dynamic thinking.

ADHD Challenges and Accommodations

1. Managing multiple audit schedules, travel logistics, and follow-up actions requires strong organisational skills; we use digital tools like AuditBoard and structured templates to help keep everything on track.
2. Long periods of detailed document review can be challenging; we encourage regular breaks and offer tools that help with automated document scanning to reduce the manual load.
3. Ensuring all findings are meticulously documented and followed up on can be difficult; we use structured CAPA management systems and offer support for task management and prioritisation.

Dyslexia Positives

1. Strong verbal communication skills, often found in individuals with dyslexia, are invaluable for conducting interviews, explaining findings, and building rapport with auditees.
2. Excellent problem-solving and big-picture thinking, common strengths, are crucial for identifying systemic issues rather than just surface-level non-conformances.
3. The ability to 'read' a situation and pick up on non-verbal cues can be very helpful in audit interviews.

Dyslexia Challenges and Accommodations

1. Reading and writing extensive audit reports and complex ISO standards can be demanding; we use AI-assisted report drafting tools and offer access to text-to-speech software and proofreading support.
2. Ensuring accuracy in written documentation and evidence logs is critical; we use templates, checklists, and provide opportunities for peer review and structured feedback.
3. Organising large amounts of textual evidence; our QMS and GRC platforms are designed for structured document management and searchability.

Autism Positives

1. A strong adherence to rules, logic, and procedures is a significant asset in interpreting and applying ISO standards consistently.
2. Exceptional attention to detail can lead to identifying subtle non-conformances that others might miss, especially in technical processes.
3. The preference for clear, direct communication can be highly effective in audit interviews, ensuring clarity and avoiding ambiguity.
4. The ability to focus intently on a task and delve deep into technical specifications is a great fit for detailed audit work.

Autism Challenges and Accommodations

1. Navigating complex social dynamics and potential defensiveness from auditees can be challenging; we provide training on diplomatic communication and conflict resolution, and offer support in managing difficult stakeholder interactions.
2. Unexpected changes to audit schedules or scope can be unsettling; we aim for clear communication of changes as early as possible and provide structured planning tools.
3. Sensory sensitivities in different audit environments (e.g., noisy factory floors, strong smells) are a consideration; we discuss audit locations in advance and offer noise-cancelling headphones or flexible scheduling where possible.

Key Responsibilities

Experience Levels Responsibilities

1. Level: Lead International ISO Auditor (L4)
2. Responsibilities: Design and lead complex, integrated audits (e.g., ISO 9001, 14001, 45001 combined) across multiple international sites, making sure we're looking at the whole picture, not just individual pieces.
3. Develop and implement risk-based audit sampling plans for high-risk processes or areas, ensuring our audit efforts are focused where they matter most and provide the biggest impact.
4. Mentor and provide technical guidance to a small team of 3-8 junior and mid-level auditors, helping them grow their skills, review their findings, and unstick them when they hit a wall.
5. Defend audit findings and non-conformances to senior management and external registrars, presenting clear, evidence-backed arguments and getting their buy-in for corrective actions.
6. Contribute significantly to the ongoing development and refinement of our global audit methodology and internal standards, making sure our approach is robust and consistent.
7. Review and approve audit reports and CAPA plans drafted by your team members, ensuring they're accurate, actionable, and meet our quality standards before they go out.
8. Act as a subject matter expert for specific ISO standards (e.g., ISO 27001, ISO 13485) or complex regulatory areas, providing deep insights during audits and to the wider team.
9. Supervision: You'll typically have monthly strategic alignment meetings with your Audit Program Manager, but day-to-day, you're largely autonomous on execution. You'll lead your own audit teams and manage your own schedule, reporting back on progress and significant findings.
10. Decision: You'll have full authority within your audit domain to define audit scope, methodology, and team assignments. You can approve CAPA plans up to a certain complexity and sign off on audit reports. You'll manage a project budget of roughly £50K-£500K for specific audit initiatives or tool implementations. You'll also have input into hiring decisions for your direct reports and can make recommendations for external training programmes.
11. Success: Success at this level means consistently delivering high-quality, impactful integrated audits that uncover systemic risks and drive real business improvement. It means your team is performing well and developing under your guidance. It also means you're a trusted advisor to senior management on compliance matters, not just a reporter of problems.

Decision-Making Authority

• Type: Audit Scope & Methodology
• Entry: Follows pre-defined scope and methodology, escalates any deviations.
• Mid: Proposes minor adjustments to scope for routine audits, consults with Lead Auditor.
• Senior: Defines scope and methodology for single-standard audits, consults Lead Auditor on significant changes.
• Type: Non-Conformance Classification (Major/Minor)
• Entry: Suggests classification, always reviewed and approved by a senior auditor.
• Mid: Classifies routine non-conformances, escalates complex or borderline cases.
• Senior: Classifies all non-conformances for single-standard audits, consults Lead Auditor on high-impact Major NCs.
• Type: CAPA Approval & Follow-up
• Entry: Documents proposed CAPAs, no approval authority.
• Mid: Reviews and provides feedback on CAPA plans, escalates for approval.
• Senior: Approves CAPA plans for minor findings, recommends approval for major findings to Lead Auditor.
• Type: Team Resource Allocation
• Entry: Assigned tasks by senior auditor.
• Mid: Manages own time for assigned tasks, may informally guide a junior.
• Senior: Allocates tasks to 0-2 mentees for specific audit segments.
• Type: Budgetary Spend (Project-specific)
• Entry: No budget authority.
• Mid: Raises purchase requests for training/tools, requires manager approval.
• Senior: Recommends spend up to £5K for audit-related tools or training, requires Lead Auditor approval.

Competency Requirements

Foundation Skills (Transferable)

These are the bedrock skills that let you operate effectively, lead your team, and interact successfully across the business. Frankly, without these, even the best technical knowledge won't get you very far.

• Category: Communication & Influence
• Skills: Active Listening: Truly hearing and understanding auditee responses, even when they're defensive, to get to the root of an issue.
• Diplomatic Persuasion: Convincing senior managers to take action on findings without resorting to confrontation, using evidence and logical arguments.
• Clear & Concise Reporting: Writing audit reports and executive summaries that are easy to understand, actionable, and free from jargon, for both technical and non-technical audiences.
• Presentation Skills: Delivering audit findings and programme updates to senior leadership and external registrars with confidence and clarity, handling tough questions on the spot.
• Constructive Feedback: Providing clear, actionable feedback to your direct reports and auditees, focusing on improvement rather than blame.
• Category: Problem-Solving & Critical Thinking
• Skills: Systemic Analysis: Identifying how a non-conformance in one area impacts other parts of the integrated management system (QHS).
• Root Cause Identification: Moving beyond symptoms to uncover the true underlying causes of issues using techniques like 5 Whys or Fishbone diagrams.
• Risk Assessment: Evaluating the potential impact and likelihood of identified non-conformances on business objectives, safety, and compliance.
• Evidence-Based Reasoning: Drawing conclusions and making recommendations solely based on objective evidence, not assumptions or hearsay.
• Strategic Prioritisation: Deciding which audit findings are most critical and require immediate attention versus those that can be addressed over time.
• Category: Leadership & Team Development
• Skills: Mentoring & Coaching: Guiding junior auditors, helping them develop their auditing skills, and providing regular, constructive feedback.
• Delegation: Effectively assigning audit tasks and responsibilities to your team members, providing clear instructions and support.
• Conflict Resolution: Mediating disagreements or tensions that might arise during an audit, either within your team or with auditees.
• Performance Management: Setting clear expectations for your direct reports, conducting performance reviews, and supporting their professional growth.
• Team Motivation: Keeping your audit team engaged and focused, especially during challenging or repetitive audit cycles.
• Category: Organisation & Planning
• Skills: Audit Programme Management: Planning, scheduling, and managing multiple complex, integrated audits simultaneously across different sites and time zones.
• Logistical Coordination: Organising travel, accommodation, and on-site access for your audit team, often internationally.
• Time Management: Effectively prioritising your own workload and your team's, ensuring deadlines are met for audit completion and reporting.
• Documentation Management: Maintaining meticulous records of audit plans, findings, evidence, and CAPA follow-ups in our systems.
• Resource Allocation: Assigning the right auditors with the right skills to the right audit engagements to maximise effectiveness.

Functional Skills (Role-Specific Technical)

These are the specific methodologies, tools, and industry knowledge you'll need to excel as a Lead International ISO Auditor. It's about knowing the 'how' and 'what' of our compliance world.

Technical Competencies

• Skill: Multi-Standard Fluency (ISO 9001, 14001, 45001, etc.)
• Desc: Deep, practical knowledge of the clauses, intent, and interdependencies behind core standards like ISO 9001 (Quality), ISO 14001 (Environmental), ISO 45001 (Health & Safety). You'll also need a strong specialisation in others like ISO 27001 (Information Security) or ISO 13485 (Medical Devices), understanding how they weave together in an integrated system.
• Level: Expert
• Skill: Risk-Based Auditing (RBA)
• Desc: The ability to move beyond simple clause-checking and strategically focus audit time and resources on the processes and areas that pose the greatest risk to the organisation's objectives, safety, and compliance. This means designing audit plans that are truly impactful.
• Level: Expert
• Skill: Root Cause Analysis (RCA) Techniques
• Desc: Mastery of techniques like 5 Whys, Fishbone (Ishikawa) Diagrams, and Fault Tree Analysis to push auditees beyond fixing the symptom. You'll ensure they identify and address the true underlying cause of a non-conformance, preventing recurrence.
• Level: Advanced
• Skill: Process Auditing
• Desc: Skill in following a process from start to finish (e.g., 'from purchase order to payment' or 'from design to disposal') across multiple departments. This involves interviewing different roles to uncover systemic weaknesses, rather than just auditing a single department in isolation.
• Level: Advanced
• Skill: Corrective and Preventive Action (CAPA) Management
• Desc: The discipline of writing clear, actionable non-conformance reports, guiding auditees in developing robust CAPA plans, and rigorously tracking their implementation and verification to ensure effectiveness. You'll be the one making sure things actually get fixed.
• Level: Advanced
• Skill: Regulatory Intelligence & Interpretation
• Desc: Understanding how international and national regulations (e.g., OSHA, EPA, GDPR, REACH, local H&S laws) intersect with and inform the implementation of ISO management systems. You'll need to interpret these regulations and apply them to audit criteria.
• Level: Advanced

Digital Tools

• Tool: Intelex / ETQ Reliance / Veeva QualityDocs / MasterControl (QMS/EHS Platforms)
• Level: Advanced
• Usage: Configuring audit modules, building custom reports on non-conformance trends, training auditees on system use, and integrating audit findings with CAPA workflows. You'll be the expert user.
• Tool: AuditBoard / Workiva Wdesk / TeamMate+ / ServiceNow GRC (GRC & Audit Management)
• Level: Expert
• Usage: Designing and managing complex audit programmes, sampling plans, and evidence requests within the tool. You'll use it to oversee your team's work, manage auditee communication, and develop executive dashboards.
• Tool: MS Teams / SharePoint / Confluence (Collaboration)
• Level: Advanced
• Usage: Designing the SharePoint/Confluence structure for the audit function, setting up automated workflows for document review and approval, and managing shared audit documentation with proper version control.
• Tool: Excel (Power Query, Advanced Pivots)
• Level: Advanced
• Usage: Using Power Query to clean and merge large data sets from different sources (e.g., incident logs, training records). Building complex PivotTables to analyse audit findings, trends, and CAPA effectiveness.
• Tool: Power BI / Tableau (Data Analysis & Visualisation)
• Level: Advanced
• Usage: Building interactive dashboards to visualise audit trends, non-conformance rates, CAPA closure times, and risk profiles for management review and strategic planning. You'll be telling stories with data.

Industry Knowledge

• Area: Integrated Management Systems
• Desc: A deep understanding of how Quality, Environmental, and Health & Safety management systems (and potentially others like Information Security) are designed, implemented, and audited as a single, cohesive unit, rather than separate silos.
• Area: International Regulatory Landscape
• Desc: Familiarity with key international and regional regulatory bodies and their requirements relevant to our industry, understanding how these impact our ISO compliance and audit strategy.
• Area: Supply Chain & Third-Party Auditing
• Desc: Knowledge of best practices for auditing suppliers, contractors, and other third parties to ensure their compliance with our standards and regulatory requirements, especially in an international context.
• Area: Organisational Psychology & Change Management
• Desc: Understanding why people resist change or become defensive during audits, and how to effectively communicate findings and drive behavioural shifts to improve compliance and safety culture.

Regulatory Compliance Regulations

• Reg: ISO 9001:2015 (Quality Management Systems)
• Usage: Leading comprehensive audits, interpreting complex clauses, and ensuring the system drives product/service quality and customer satisfaction across global operations.
• Reg: ISO 14001:2015 (Environmental Management Systems)
• Usage: Leading audits focused on environmental impact, legal compliance, and sustainability initiatives, ensuring our global footprint is managed responsibly.
• Reg: ISO 45001:2018 (Occupational Health & Safety Management Systems)
• Usage: Leading audits to ensure a safe and healthy workplace, identifying hazards, assessing risks, and verifying controls to prevent workplace injuries and illnesses globally.
• Reg: ISO 27001:2022 (Information Security Management Systems)
• Usage: Auditing information security controls, risk assessments, and compliance with data protection regulations, especially important for integrated systems.
• Reg: Local Health & Safety Legislation (e.g., UK HSE, OSHA equivalents)
• Usage: Understanding how national and local H&S regulations intersect with ISO 45001, ensuring our audits cover all legal requirements in the regions we operate.

Essential Prerequisites

• Proven experience (5-8 years) as a Senior International ISO Auditor, having successfully led numerous single-standard audits (e.g., ISO 9001 or 14001) from planning to reporting.
• Demonstrated ability to mentor junior auditors, providing effective guidance and reviewing their work.
• Strong track record of identifying systemic non-conformances and driving effective root cause analysis and CAPA implementation.
• Experience presenting audit findings to middle management and engaging with external registrars.
• A Lead Auditor certification for at least one core ISO standard (e.g., ISO 9001 Lead Auditor).

Career Pathway Context

To step into this Lead role, you'll need to have mastered the art of independent auditing and started to show real leadership potential. It's about moving from 'doing' to 'leading' and 'architecting'. We're looking for someone who's ready to take on more complex, integrated challenges and guide a small team, not just execute tasks.

Qualifications & Credentials

Emerging Foundation Skills

• Skill: AI-Driven Risk Prioritisation
• Why: AI is getting smarter at spotting patterns in vast datasets that humans just can't see. Our competitors are already using it to predict compliance risks and focus their audit efforts more effectively. If we don't, we'll be playing catch-up, missing critical issues.
• Concepts: [{'concept_name': 'Understanding predictive analytics models (e.g., r', 'description': 'Understanding predictive analytics models (e.g., regression, classification)'}, {'concept_name': 'Interpreting AI-generated risk scores and confiden', 'description': 'Interpreting AI-generated risk scores and confidence levels'}, {'concept_name': 'Data bias detection in AI models used for risk ass', 'description': 'Data bias detection in AI models used for risk assessment'}, {'concept_name': 'Integrating AI risk outputs into traditional audit', 'description': 'Integrating AI risk outputs into traditional audit planning methodologies'}, {'concept_name': 'Ethical considerations of AI in compliance decisio', 'description': 'Ethical considerations of AI in compliance decision-making'}]
• Prepare: This month: Complete an online course on 'Introduction to AI for Business Leaders' – focus on concepts, not coding.
• Next quarter: Work with our Data Science team (or an external expert) to pilot an AI-driven risk assessment for one small audit area.
• Month 4-6: Start integrating AI risk insights into your audit planning discussions, even if it's just to challenge existing assumptions.
• Month 7-9: Present a case study to the Audit Program Manager on how AI could enhance our overall audit strategy.
• QuickWin: Start experimenting with free online AI tools (like ChatGPT or Claude) to summarise regulatory updates or identify potential risk factors from news articles. It's a low-stakes way to get familiar.
• Skill: Digital Ethics & Data Governance Auditing
• Why: As we use more data and AI, the ethical implications and governance requirements are exploding. Regulators are paying closer attention to how organisations handle data, use algorithms, and ensure fairness. Our integrated audits will need to cover these areas more deeply, especially with standards like ISO 27001 evolving.
• Concepts: [{'concept_name': 'Principles of ethical AI and responsible data use', 'description': 'Principles of ethical AI and responsible data use'}, {'concept_name': 'Data privacy regulations (e.g., GDPR, CCPA, local ', 'description': 'Data privacy regulations (e.g., GDPR, CCPA, local equivalents) and their audit implications'}, {'concept_name': 'Algorithmic bias detection and mitigation strategi', 'description': 'Algorithmic bias detection and mitigation strategies'}, {'concept_name': 'Auditing data lifecycle management (collection, st', 'description': 'Auditing data lifecycle management (collection, storage, processing, deletion)'}, {'concept_name': 'Frameworks for AI governance and accountability (e', 'description': 'Frameworks for AI governance and accountability (e.g., NIST AI Risk Management Framework)'}]
• Prepare: This month: Read our internal data privacy policy and familiarise yourself with GDPR's core principles.
• Next quarter: Take an online course on 'Data Governance Fundamentals' or 'Ethical AI'.
• Month 4-6: Propose adding specific audit steps related to data governance or AI ethics into one of your integrated audit programmes.
• Month 7-9: Collaborate with our Legal team to understand emerging regulatory trends in digital ethics and how they might impact our ISO certifications.
• QuickWin: When reviewing processes, start asking specific questions about data handling: 'Who has access to this data?', 'How is consent managed?', 'What's the retention policy here?'

Advancing Technical Skills

• Skill: Advanced GRC Platform Customisation & Integration
• Why: Our GRC platforms (like AuditBoard or ServiceNow GRC) are powerful, but we're only scratching the surface. To truly optimise our audit programme and get real-time insights, you'll need to understand how to customise workflows, build complex reports, and even help integrate these platforms with other enterprise systems. This means less manual data entry and more strategic oversight.
• Concepts: [{'concept_name': 'Workflow automation within GRC platforms (e.g., fo', 'description': 'Workflow automation within GRC platforms (e.g., for CAPA management)'}, {'concept_name': 'Custom report building and dashboard design for ex', 'description': 'Custom report building and dashboard design for executive reporting'}, {'concept_name': 'API fundamentals for system integration (understan', 'description': 'API fundamentals for system integration (understanding, not necessarily coding)'}, {'concept_name': 'Data modelling within GRC tools for trend analysis', 'description': 'Data modelling within GRC tools for trend analysis'}, {'concept_name': 'User access management and security configurations', 'description': 'User access management and security configurations for audit data'}]
• Prepare: This month: Dive deep into the admin/configuration guides for our primary GRC platform. Identify one workflow you could automate.
• Next quarter: Work with IT or the platform vendor to implement a small custom report or dashboard that addresses a current reporting gap.
• Month 4-6: Take an advanced user/administrator course for our GRC platform, focusing on customisation and reporting features.
• Month 7-9: Lead a small project to integrate a new data source into the GRC platform for improved audit analytics.
• QuickWin: Spend an hour each week exploring advanced features of AuditBoard or ServiceNow GRC. Look for ways to streamline your current reporting or evidence collection processes.
• Skill: Enhanced Data Visualisation for Strategic Insights
• Why: Simply presenting data isn't enough anymore. You need to tell a compelling story with it, especially to senior leadership who need to make quick, informed decisions. Moving from basic dashboards to sophisticated, interactive visualisations that highlight key risks and opportunities will be critical for influencing strategic direction.
• Concepts: [{'concept_name': 'Principles of effective data storytelling and visu', 'description': 'Principles of effective data storytelling and visual communication'}, {'concept_name': 'Advanced chart types and their appropriate use (e.', 'description': 'Advanced chart types and their appropriate use (e.g., heatmaps, treemaps for risk density)'}, {'concept_name': 'Interactive dashboard design for drill-down capabi', 'description': 'Interactive dashboard design for drill-down capabilities in Power BI/Tableau'}, {'concept_name': 'Connecting audit findings to business performance ', 'description': 'Connecting audit findings to business performance metrics through visualisations'}, {'concept_name': 'Techniques for highlighting trends, outliers, and ', 'description': 'Techniques for highlighting trends, outliers, and correlations in compliance data'}]
• Prepare: This month: Review our existing Power BI/Tableau dashboards. Identify areas where visualisations could be more impactful.
• Next quarter: Take an online course on 'Advanced Data Visualisation' or 'Storytelling with Data'.
• Month 4-6: Redesign one of your quarterly audit performance dashboards to be more interactive and insightful for senior leadership.
• Month 7-9: Present your improved dashboard to the Audit Program Manager and gather feedback on its effectiveness in conveying strategic insights.
• QuickWin: Experiment with different chart types in Excel or Power BI for your next internal report. Don't just stick to bar charts; try a scatter plot or a treemap to see if it tells a clearer story.

Education Requirements

• Level: Minimum
• Req: A Bachelor's degree (or equivalent OFQUAL Level 6 qualification) in a relevant field such as Quality Management, Environmental Science, Occupational Health & Safety, Engineering, Business Administration, or a related technical discipline.
• Alts: We're pragmatic. If you've got 10+ years of demonstrable, hands-on experience in a senior compliance or auditing role, with a strong track record of leading complex ISO audits, we'll consider that equivalent. Show us what you've done, not just what piece of paper you have.
• Level: Preferred
• Req: A Master's degree (or equivalent OFQUAL Level 7 qualification) in a relevant field, or a professional qualification in a specific management system (e.g., MSc in Quality Management, NEBOSH Diploma).
• Alts: A combination of extensive practical experience (12+ years) and multiple advanced ISO Lead Auditor certifications, particularly across different standards, would also be highly valued.

Experience Requirements

You'll need roughly 8-12 years of progressive experience in Compliance, Quality, Health & Safety roles, with a significant portion (at least 5-8 years) specifically focused on auditing international ISO management systems. This isn't an entry-level leadership role; we need someone who has genuinely led complex, integrated audits, managed junior auditors, and successfully navigated tricky stakeholder conversations. We'll be looking for examples of where you've driven real improvement, not just identified problems.

Preferred Certifications

• Cert: ISO 45001 Lead Auditor (if not already required)
• Prod: IRCA / Exemplar Global accredited body
• Usage: Enhances your ability to lead integrated QHS audits and demonstrates a comprehensive understanding of occupational health and safety management systems, which is critical for our operations.
• Cert: ISO 27001 Lead Auditor
• Prod: IRCA / Exemplar Global accredited body
• Usage: Increasingly important for integrated management systems, especially as data security becomes a core risk area. This shows you can audit information security aspects effectively.
• Cert: Certified Quality Auditor (CQA) / Certified Professional in Health Care Quality (CPHQ)
• Prod: ASQ / NAHQ
• Usage: Demonstrates a broader understanding of quality principles and auditing beyond just ISO, which is always a plus for a Lead role.
• Cert: NEBOSH National Diploma in Occupational Health and Safety
• Prod: NEBOSH
• Usage: Provides a deep, practical understanding of health and safety management, complementing ISO 45001 and enhancing your credibility in this critical area.

Recommended Activities

• Regularly attending industry conferences and webinars focused on ISO standards updates, regulatory changes, and emerging audit techniques.
• Subscribing to professional journals and publications in quality, environmental, and health & safety management.
• Participating in online forums or communities of practice for ISO auditors to share best practices and challenges.
• Undertaking advanced training in areas like data analytics for auditing, AI in compliance, or advanced root cause analysis.
• Seeking opportunities to present on audit findings or compliance topics internally or at industry events.

Career Progression Pathways

Entry Paths to This Role

• Path: Senior International ISO Auditor (Internal)
• Time: 3-5 years as a Senior Auditor
• Path: Quality/EHS Manager (External/Internal)
• Time: 5-8 years in a Quality or EHS Management role
• Path: External Lead Auditor (Certification Body)
• Time: 8-10 years as an external auditor for a certification body

Career Progression From This Role

• Pathway: Audit Program Manager (L5)
• Time: 3-5 years as a Lead International ISO Auditor

Long Term Vision Potential Roles

• Title: Director of Quality & Compliance (L6)
• Time: 8-12 years from Lead Auditor
• Title: VP, Global Assurance (L6)
• Time: 10-15 years from Lead Auditor
• Title: Chief Compliance Officer (L7)
• Time: 15-20+ years from Lead Auditor

How Zavmo Delivers This Role's Development

DISCOVER Phase: Skills Gap Analysis

Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.

Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.

DISCUSS Phase: Personalised Learning Pathway

Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).

Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.

DELIVER Phase: Conversational Learning

Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.

Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."

DEMONSTRATE Phase: Competency Assessment

Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.

Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.