A senior technical position responsible for delivering third-party management system audits and, where formally authorised, undertaking audit report review, technical review, and certification decision-making. Activities will be limited to the certification functions, management system standards, technical sectors, and scopes for which the postholder has been evaluated and authorised by RIQC. The postholder will also support the effective operation and continual improvement of RIQC’s certification activities.
Indictive role balance
The role will primarily involve third-party audit delivery, supported by office-based review and certification decision activities. The balance will vary according to the audit programme, competence authorisations and business requirements. Workloads will be planned to protect impartiality, audit quality, and reasonable working arrangements.
Key Responsibilities
- Audit delivery. Lead and conduct third-party certification audits against ISO 9001, ISO 14001, and ISO 45001. Undertake single-standard, integrated and multi-site audits, including rail-sector or other safety-critical activities where relevant competence has been demonstrated and authorised.
- Audit reports and technical review. Undertake audit report review and technical review activities, as assigned, to confirm completeness, quality, consistency, technical adequacy, and conformity with RIQC procedures.
- Certification decisions. Make decisions concerning the granting, maintenance, renewal, extension, reduction, suspension, restoration, and withdrawal of certification, only where formally authorised and independent of the audit concerned.
- Enquiries and audit planning. Support application and enquiry review, certification scope definition, audit programme development, audit-duration determination, multi-site sampling, integrated management system planning, proposal preparation, and contract review.
- Audit resources. Provide technical input to the allocation of competent audit resources and support the timely, effective, and commercially responsible delivery of certification programmes.
- UKAS accreditation. Support preparation for UKAS office and witnessed assessments, including evidence preparation, witness planning, responses to findings and extension-to-scope activities.
- People and competence. Support evaluation, monitoring and ongoing competence assessment of auditors, reviewers, and certification decision makers, including witnessed activity, induction, authorisation recommendations, and competence records.
- Governance and impartiality. Support RIQC’s management system, including document and record control, internal audit, management review, impartiality arrangements, risk assessment, and standards-transition activity.
- Complaints and appeals. Provide technical input to complaints, appeals, suspension, restoration, and withdrawal processes where assigned and sufficiently independent of the matter under consideration.
- Clients and responsible business development. Maintain professional client relationships, identify appropriate service opportunities, and provide technical input to enquiries, proposals, and service development. Commercial considerations must not influence audit conclusions, reviews, or certification decisions.
- Continuing professional development. Maintain competence through relevant learning, witnessed activity, standard and scheme updates, calibration activity, and RIQC’s ongoing competence-monitoring arrangements.
- Undertake other duties appropriate to the seniority and technical nature of the role.
Authority, Governance and Impartiality
- Authority for each certification function will be granted only following documented evaluation and formal authorisation by RIQC, specifying the applicable management system standards, technical sectors, and scopes.
- The postholder must not review or make a certification decision for an audit in which they participated, or where prior consultancy, relationships, commercial interests or any other actual, potential, or perceived conflict could compromise impartiality.
- All potential conflicts must be declared and managed in accordance with RIQC procedures. Confidentiality requirements apply to all audit, review, decision, and client information.
- For certification, impartiality, and technical matters, the postholder will operate within RIQC’s approved governance, escalation, and authorisation arrangements.
- Overall accountability for management of the Certification Body remains with the Managing Director or another formally designated role holder.
Mandatory experience, qualifications, and competence
- An experienced third-party Lead Auditor with a strong documented record of leading management system certification audits.
- Successful completion of a recognised Lead Auditor course, together with demonstrated competence in leading third-party certification audits.
- Demonstrable experience of audit report review, technical review or certification decision-making within an accredited management system Certification Body, or evidence of the competence and experience necessary to achieve RIQC authorisation following appointment.
- Demonstrable audit competence in ISO 9001 and at least one of ISO 14001 or ISO 45001, with the ability to obtain further authorisations according to RIQC’s business needs.
- Working knowledge of ISO/IEC 17021-1, relevant scheme-specific competence requirements and applicable IAF Mandatory Documents.
- Knowledge of application review, scope definition, certification-cycle management, audit-duration determination, multi-site sampling, and integrated management system certification.
- Experience of UKAS or equivalent accreditation assessments, including office assessments or witnessed audits.
- Broad-based engineering, technical or equivalent industry experience, preferably in rail or another safety-critical sector.
- HNC, HND, degree or equivalent technical qualification, or substantial relevant industry experience providing an equivalent level of knowledge.
- Ability to evaluate evidence objectively and make clear, consistent, and defensible review or certification decisions.
- Excellent report writing, communication, presentation, and stakeholder-management skills.
- Strong understanding of impartiality, confidentiality, and conflict-of-interest controls.
- Competent user of Microsoft Word, Excel, Outlook, and Teams.
- Full UK driving licence and willingness to travel nationally, including overnight stays where required.
Desirable experience and qualifications
- Existing authorisation as an audit report reviewer, technical reviewer, or certification decision maker.
- Demonstrable rail-sector auditing, engineering, or operational experience.
- Experience of integrated and multi-site certification programmes.
- Competence or experience in ISO 50001 and energy management system certification requirements.
- Experience in quality management, business improvement, project management, or account management.
Key behaviours
- Acts with integrity, independence, and sound professional judgement.
- Applies standards and certification requirements consistently and proportionately.
- Communicates clearly with clients, auditors, colleagues, and accreditation-body representatives.
- Manages competing priorities while maintaining quality and agreed delivery timescales.
- Escalates uncertainty, competence limitations, and impartiality risks promptly.
- Contributes positively to a growing, technically credible, and client-focused Certification Body.