Outsourced QHSE Manager: A Part-Time QHSE Function That Holds

What does an outsourced QHSE manager actually do?

They hold your QHSE function without being on your payroll, working to a calendar agreed in advance. They run the management system, keep the site compliant and report to management every month.

The terms vary: part-time QHSE manager, fractional QHSE manager, outsourced quality manager. The idea is the same. You buy senior competence and planned presence, not a binder of procedures.

Three things separate this service from a classic consulting assignment:

• Duration. A consulting assignment has a start and an end. An outsourced QHSE function runs from one surveillance audit to the next.
• Regularity. Presence is planned across the year around your key dates, not triggered by emergencies.
• Continuity. A deputy is named. The system does not stop when one person is away.

Outsourcing does not transfer the employer’s responsibilities. Management stays accountable for worker safety, site compliance and customer requirements. The outsourced manager helps meet those obligations and prove it. They do not perform the certification audit either: that belongs to an accredited, independent certification body.

When is a part-time QHSE manager the right answer?

When the need is real and permanent but does not justify a full-time post, or when it cannot wait for a hire. Five situations come up again and again.

• Certified company without a full-time QHSE manager. A mid-sized manufacturer certified to ISO 9001:2026 or ISO 14001:2026 has a system to run, but not enough work for a full post. The part-time manager takes over the running of the system; an internal contact keeps a lighter, clearly defined role.
• Vacant post. The QHSE manager has left and recruitment is under way. Deadlines do not wait: internal audits, safety committee meetings, surveillance audits. The outsourced manager covers the gap, then hands over a clean file to the new hire.
• New site. A European or Gulf group opens a plant in Morocco, or a regional processor adds a second unit. The site needs a working system from day one: risk assessment, waste management, records, staff training.
• Multi-site group. A group runs several sites at very different levels of maturity. It needs one method, comparable indicators and cross-site internal audits, without creating one post per site.
• Reinforcement on one standard. You have a capable QHSE manager who cannot cover everything. You outsource one domain: health and safety under ISO 45001:2018, the transition to ISO 9001:2026, or the environmental side.

What is in the scope?

Six blocks, matching what an integrated management system auditor checks. The exact scope is chosen at the scoping stage: all or part of these blocks, for one or several standards.

Internal audits follow the ISO 19011 guidelines. For health and safety, the work rests on ISO 45001:2018, still the edition in force, including worker consultation and participation. ISO’s official pages present each of these standards: ISO 9001, ISO 14001 and ISO 45001.

What does Moroccan labour law require on safety committees?

For sites in Morocco, the Labour Code (Law No. 65-99) requires a safety and hygiene committee in industrial, commercial and craft businesses, and in agricultural and forestry operations, employing at least 50 workers (Article 336). The text is published by the ministry in charge of employment.

• Composition (Article 337): the employer or a representative as chair; the head of the safety department or, failing that, an engineer or technical manager working in the company; the occupational physician; two elected employee delegates; one or two union representatives where they exist.
• Meetings (Article 339): at least once a quarter, and after any accident with actual or potential serious consequences. Meeting time is paid working time.
• Investigations and reports (Articles 340 to 343): an investigation after every work accident or occupational disease, with the report sent to the labour inspectorate within fifteen days; an annual report on occupational risks, sent within 90 days of year end; a register kept available to inspectors.

The same code requires an in-house occupational health service from 50 workers, or where workers are exposed to occupational disease risks (Article 304).

The committee members named in the law belong to the company. The outsourced manager prepares the agenda, incident data, action tracking and the annual report, but does not replace those members. The same Article 337 lets the committee call on any person belonging to the company with competence and experience in occupational health and safety; it makes no provision for an external provider to take part. The outsourced manager therefore supports the committee and its members, who remain those named by the law. For sites in other African or Middle Eastern countries, the legal register is built on the local texts.

For the environment in Morocco, the regulatory watch covers in particular:

• waste: Law 28-00 on waste management and disposal and its implementing decrees, including those on hazardous waste, listed on the environment ministry’s “pollution” page (in French);
• liquid and air discharges: Law 36-15 on water and Decree 2-04-553 on discharges, Law 13-03 on air pollution and its implementing texts, listed on the ministry’s “natural environments” page (in French);
• impact assessments: Law 49-17 on environmental assessment, which enters into force when its implementing texts are published and then repeals Law 12-03; the applicable text is therefore checked project by project, on the ministry’s “environmental assessment” page (in French).

How these obligations fit into an ISO 14001 system is covered on our ISO 14001 page.

Hire, outsource or bring in a consultant?

It depends on the real workload, whether it is permanent, and how urgent it is. The three options are not exclusive; many companies move from one to another as they grow.

Two mistakes are common: hiring a junior profile for a role that needs experience, and chaining one-off assignments with nobody running the system in between. Part-time outsourcing often sits between those extremes, and it can prepare an internal hire once the workload justifies one.

How does it run, from planned presence to monthly reporting?

A simple cycle: a presence calendar set in advance, continuous work between visits, a monthly report and a periodic review of the engagement itself.

On-site days go to the shop floor: inspections, interviews with process owners, audits, team training. Documentation, regulatory watch and preparation are partly done remotely. A fish cannery on the Atlantic coast, a packaging plant near Kenitra and a cold store serving a port each have different peak periods; the calendar follows your activity, not a template.

Each month, management receives a structured report in its Inspirra client space. In a few minutes, it shows what was done and what is waiting for a decision:

• Activities: visits, inspections, audits, meetings, training.
  
• QHSE indicators: accidents and near misses, nonconformities, complaints, objectives.
  
• Corrective and preventive actions: open, closed, overdue, with owners.
  
• Regulatory watch: new texts, deadlines, compliance gaps.
  
• Upcoming dates: committees, internal and external audits, renewals.
  
• Decisions needed from management: budget, resources, trade-offs.
  

The same data feeds the management review, so the inputs are ready and the meeting can focus on decisions.

What about an outsourced food safety manager for GFSI sites?

This variant serves sites certified to BRCGS Food Safety Issue 9, IFS Food Version 8 or FSSC 22000 Version 7. The scope narrows to food safety: HACCP plan, prerequisite programmes, customer audits, incidents and recalls.

The outsourced food safety manager keeps the hazard analysis and HACCP plan current with the site HACCP team, verifies prerequisite programmes on the floor, prepares and supports customer and certification audits (including unannounced ones), runs traceability and recall tests, and follows the food safety culture plan that the GFSI-recognised standards require. In Morocco, the work stays aligned with the site’s ONSSA sanitary approval or authorisation.

One limit must be stated clearly. GFSI standards require competent people on site, an internal HACCP team and the ability to react at any time. Under FSSC 22000 Version 7, for example, a serious event such as a public recall must be reported to the certification body within three working days. The procedure must work even on a day the outsourced manager is not on site.

This variant is overseen by ACG’s founder, Dr. Ismail Idrissi, a BRCGS-registered consultant since 2014. See also our food safety hub.

How should you prepare to outsource the QHSE function?

By deciding what stays in-house before handing over the rest. A successful engagement depends less on the provider than on the quality of the scoping.

• An internal contact is named, with time set aside to work with the outsourced manager.
  
• The scope is decided: standards, sites, domains.
  
• Decisions reserved to management are written down: budget, discipline, production versus safety trade-offs.
  
• Access is arranged: site, workshops, documents, Inspirra client space.
  
• The year’s deadlines are listed: surveillance and customer audits, committees, permit renewals.
  
• The latest audit reports and management review are available.
  
• The escalation rule is set: who to call, and how fast, after a serious accident, a product incident or a visit from the authorities.
  

If you only need internal audits, see audits and inspections. To size an engagement for your site, describe your project.