What does a part-time QHSE manager actually do?
They run a site’s quality, health and safety and environment (QHSE) function to a calendar fixed in advance: they run the management system, track regulatory compliance, organise accident investigations, build the internal audit programme and prepare the management review. Their value is easy to measure: the system’s deadlines are met on the planned date, even in the busiest months.
The role goes by several names in English: part-time, fractional or outsourced QHSE manager, or outsourced quality manager when the scope is quality alone. The service itself is presented on our outsourced QHSE manager page. This guide looks at the function from the inside: its typical year, the engagement models, what cannot be delegated and the governance that keeps it working.
A typical year for the function
A QHSE manager’s work is not uniform. It follows a rhythm set by legal, normative and commercial deadlines. For a site in Morocco, several of those deadlines come from the Labour Code, and in particular from the safety and hygiene committee (comité de sécurité et d’hygiène, or CSH): the joint body in which the employer, the head of safety, the occupational physician and employee representatives meet to deal with workplace risks. The table brings the deadlines together for a Moroccan industrial site with more than 50 employees, certified to ISO 9001 and ISO 14001 and committed on health and safety.
Frequency | Activity | Basis | Role of the part-time manager |
|---|---|---|---|
Every month | Report to management | Engagement letter | Writes the report: activities, indicators, overdue actions, decisions needed |
Every month | Inspections and action follow-up | Management system | Inspects workshops, chases action owners, checks that closed actions were effective |
At least once a quarter | Safety and hygiene committee meeting | Labour Code, Article 339 | Prepares the agenda, the accident data and the follow-up of decisions |
After every work accident or occupational disease | Committee investigation; report sent to the labour inspectorate and the medical inspector within fifteen days | Labour Code, Articles 340 and 341 | Organises the root-cause analysis and drafts the report the employer sends |
Every year | Committee annual report, sent to the inspectorate within 90 days of the year end | Labour Code, Articles 342 and 343 | Consolidates the year’s data and the annual prevention programme |
Every year | Internal audit programme | ISO 19011 guidelines | Builds a risk-based programme and audits outside their own work |
Every year | Management review | ISO 9001, ISO 14001, ISO 45001 | Prepares the inputs; management analyses and decides |
Every year | Certification body surveillance audit | Three-year certification cycle | Prepares the site, accompanies the audit, drives the treatment of findings |
At the frequency set by the system | Evaluation of compliance with legal requirements | ISO 14001 and ISO 45001 | Keeps the legal register and evaluates compliance |
Before 30 April 2029 and 30 September 2029 | Transitions to ISO 14001:2026 and ISO 9001:2026 | Global ACI transition documents | Plans the system update and the transition audit |
The Labour Code (Law No. 65-99) requires a safety and hygiene committee in industrial, commercial and craft businesses and in agricultural and forestry operations that employ at least 50 workers (Article 336). The official text is published in Arabic by the ministry in charge of employment, and the Ministry of Justice publishes a consolidated French version on the Adala portal: the articles cited here follow that version.
The last two rows of the table come from the transition documents of Global ACI, the organisation that took over from the International Accreditation Forum (IAF) for accreditation, for ISO 14001:2026 and ISO 9001:2026. ISO 45001:2018 remains the edition in force; its revision is expected in 2027.
What is done on site and what is done remotely
Time on site serves the shop floor; the rest can be done remotely. On site: inspections, interviews with process owners and operators, internal audits, committee meetings, accident investigations, short training sessions at the workstation. Remotely: regulatory watch, document review, consolidating indicators, preparing the monthly report and the management review.
A part-time manager who spends their days on site in an office updating procedures has allocated their time badly. The certification auditor, for one, interviews operators.
The profile to insist on
A senior profile, because the function holds alone what a department sometimes does with several people. At a minimum, insist on hands-on experience of the three standards of the system (ISO 9001:2026, ISO 14001:2026, ISO 45001:2018), an auditor qualification, knowledge of Moroccan health, safety and environmental law (or of the law of the country where your site operates) and experience of your risks. An injection moulding press, a cold room and a civil engineering site are not inspected the same way.
Which outsourcing model: days per month, work packages or interim cover?
Four models coexist, and many companies combine two of them. The choice depends on one question: is your need permanent, occasional or transitional?
Model | Principle | When to choose it | Point to watch |
|---|---|---|---|
Regular presence | A number of days per month, spread over an annual calendar | Certified site without a full-time QHSE manager; permanent but partial need | The calendar follows your peak periods, not a mechanical split |
Work packages | A defined slice of the scope: internal audits and management review, regulatory watch, health and safety only | In-house team in place, but one area not covered | Write down the boundary between the outsourced package and the rest of the system |
Interim cover for a vacant post | The full function, for a bounded period, until the new hire arrives | QHSE manager has left, recruitment under way | Plan the handover file for the new hire from the start |
Project reinforcement | A dated objective: version transition, preparation for a certification | In-house manager absorbed by a project | Do not let the project swallow day-to-day running |
A multi-site group often combines two models. The outsourced manager, with their deputy, harmonises methods, cross-audits sites and consolidates a common dashboard; each site keeps a contact person and its own local requirements. The same logic applies to a European or Gulf group with a single plant in Morocco, or to a West African processor running several units.
How many days per month?
There is no serious standard figure. The time needed depends on the scope (quality, health and safety, environment, food safety), the number of standards, the headcount and shift teams, the risk level, the number of sites and the maturity of the system. The initial gap analysis sets the presence; the engagement review adjusts it.
Plan for a heavier presence in the first months and around peak periods: surveillance audit, transition audit, seasonal production peak. An identical package every month, unrelated to your calendar, is a bad sign.
What must stay with the company?
Responsibility, decisions and the people that the law or the standards place inside the company. Outsourcing transfers competence and working time, never the employer’s obligations.
The safety and hygiene committee illustrates this. Article 337 of the Labour Code sets its membership: the employer or their representative, who chairs it; the head of the safety department or, failing that, an engineer or technical manager working in the company, appointed by the employer; the occupational physician; two employee delegates, elected by the employee delegates; and one or two union representatives where they exist. The committee may call on any person belonging to the company with competence in health and safety, such as the head of personnel; the text does not mention an external provider. The outsourced QHSE manager therefore prepares the committee and follows up its decisions; they replace none of these members.
Two other obligations rest on the internal organisation. The occupational health service must be an in-house service from 50 employees, or where the work exposes workers to occupational disease risks (Article 304). In every workshop where hazardous work is carried out, at least two employees are trained in emergency first aid (Article 317). In the consolidated version, Article 317 refers to “each workshop where dangerous work is carried out” without referring to an implementing text that would list such work: which workshops are covered is therefore justified by the risk assessment.
The table below shows the split of roles we recommend.
Subject | Management | Internal contact and process owners | Outsourced QHSE manager |
|---|---|---|---|
Policy, objectives, resources | Decides and signs | Cascade them into their processes | Proposes, prepares, follows up |
Occupational risk assessment | Validates and funds the measures | Take part, with operators | Runs the method, consolidates, checks on the floor |
Safety and hygiene committee | Chairs (employer or representative) | Sit on it as the law provides | Prepares the agenda, the data and the follow-up |
Reports to the labour inspectorate | Sends them (employer) | Provide the facts | Drafts them |
Legal requirements register | Decides on compliance work | Apply | Keeps the register, evaluates, alerts |
Internal audits | Approves the programme | Are audited, address findings | Builds the programme, audits outside their own work |
Management review | Chairs, analyses, decides | Present their results | Prepares the file, follows up decisions |
Certification body | Signs the contract | Receive the auditor | Prepares and accompanies the audit |
The same split applies to the worker consultation and participation that ISO 45001:2018 requires: it goes through the representatives and the operators themselves, not through a provider. For a site certified for food safety, the HACCP team stays in-house; the dedicated variant of the service is described on the outsourced QHSE manager page.
How do you govern the engagement so that it lasts?
With four tools: a precise engagement letter, regular steering with management, indicators specific to the engagement and an escalation rule. In our engagements, the main cause of disappointment is almost never the provider’s competence; it is a vague scope that everyone reads their own way.
The engagement letter
It sets out what the provider does, what it does not do and what the company keeps. It defines the scope (standards, sites, domains), the deliverables and their dates, the presence calendar, the deputy, the decisions reserved to management, the delegations granted, confidentiality, ownership of documents and the end-of-engagement terms. The clauses to check are listed further down.
Steering and engagement indicators
The monthly report says what was done; a steering meeting with management says what must be decided. At agreed intervals, an engagement review assesses the service itself. It relies on indicators of the engagement, separate from those of the system: presence plan delivered, reports issued on time, committees held by the legal deadline, internal audits carried out as programmed, overdue actions, time taken to analyse accidents. These indicators are detailed in our article on onboarding an outsourced QHSE manager.
The escalation rule
It states whom to alert, and how fast, when an event cannot wait for the next day on site: a serious accident, a labour inspection visit, an environmental incident, a major customer complaint. It also matters for certification. Under the Global ACI document for health and safety certification (Global ACI-TECH-3-016), the certified organisation informs its certification body without delay of any serious incident or breach of regulation involving the competent authority, and a special audit may follow. That notification comes from the company, including on a day when the outsourced manager is not on site.
A provider to control like any other
Management system standards require you to control what is provided externally. Your outsourced QHSE function is no exception: you evaluate the provider’s competence, monitor its performance and keep the evidence.
Two independence rules complete the arrangement. First, the outsourced manager does not audit their own work: independence is one of the principles of auditing set out in the ISO 19011 guidelines, and the activities they run (document control, regulatory watch, action tracking) are audited by another auditor. Second, they cannot come from your certification body: under Global ACI-TECH-3-016, acting as health and safety coordinator, assessing risks, investigating accidents and dealing with the authorities on the client’s behalf are consultancy, which a certification body cannot provide to an organisation it certifies.
Finally, accident and training records contain personal data. Their processing must comply with Law 09-08, Morocco’s personal data protection law, and with the requirements of the CNDP, the national commission that enforces it; ACG holds a CNDP authorisation to process personal data.
How do you stop the function depending on one person?
By organising continuity from the start: a named deputy, shared information and written routines. That is the difference between a person and a function.
The deputy knows the site, has been introduced to the team and reads the same reports. All the information of the engagement (reports, action plans, registers, minutes) lives in a space shared with the company; at ACG, that is the Inspirra client space. The system’s routines, such as preparing the committee or closing a corrective action, are written down and can be picked up by someone else.
Continuity also covers the exit. An outsourcing engagement ends one day: the system passes to an in-house manager, another provider or another organisation. The engagement letter plans for that day: documents handed back in the company’s formats, a handover file, an overlap period.
Clauses to check in the engagement letter
When should the function become an in-house post?
When the need becomes permanent and daily. Outsourcing is not an end in itself: it is often a stage, which prepares an in-house hire once the workload justifies one.
Several signals announce it: headcount or the number of sites grows, new standards are added, the site’s risks call for a presence every day, customers multiply their audits, the planned presence is constantly exceeded. The outsourced manager then helps write the job description, can take part in assessing candidates, and handles the handover. A mixed model also works: a QHSE technician hired in-house for the daily floor work, supervised by a senior part-time manager.
The calculation goes beyond comparing a salary with an invoice: our article on in-house vs outsourced QHSE manager cost sets out the cost items and the hidden costs. The case study of a plastics SME shows the mixed model at work, and our article on outsourced QHSE in 2026–2027 explains why the coming months will load the function. If the system still has to be built before it can be handed over, start with our guide to ISO 9001 certification in Morocco.