Quality and Information Security Manager (M/F)

Core Mission

To lead the design, implementation, and continuous improvement of a unified management system. This function ensures the organization meets global standards for quality, data security, environmental responsibility, and workplace safety, transforming compliance from a requirement into a competitive advantage.

1. Quality Management System (ISO 9001)

• Process Excellence: Establish a process-based approach across all departments to ensure consistent output that meets client specifications.
• Risk-Based Thinking: Integrate risk identification into every project phase to prevent non-conformities before they occur.
• Quality Gate Architecture: Define specific technical validation points (Gates) throughout the product or project lifecycle.
• Performance Intelligence: Monitor the Cost of Poor Quality (COPQ) and use data-driven KPIs to trigger corrective action plans.
• Supplier Quality: Audit and rank vendors to ensure the entire supply chain aligns with the organization's quality benchmarks.

2. Information Security & Automotive Data Trust (ISO 27001 & TISAX)

• Information Security Management (ISMS): Build a framework that protects the confidentiality, integrity, and availability of data.
• Automotive Compliance (TISAX): Specifically address the high-security requirements of the automotive industry, focusing on prototype protection and third-party data handling.
• Vulnerability Governance: Lead regular risk assessments to identify technical and human threats to information assets.
• Incident Resilience: Develop a "Rapid Response" protocol for security breaches, ensuring minimal downtime and transparent reporting to stakeholders.

3. Environmental, Health & Safety (ISO 14001 & ISO 45001)

• Environmental Stewardship (14001): Identify the organization's environmental aspects and impacts. Implement waste reduction, energy efficiency, and life-cycle thinking into operations.
• Workplace Safety (45001): Establish a proactive culture of health and safety. Conduct regular hazard identifications and "near-miss" reporting to eliminate workplace accidents.
• Legal Compliance: Maintain a rigorous regulatory watch to ensure the organization stays ahead of local and international environmental and labor laws.
• Emergency Preparedness: Design and test response plans for environmental accidents (spills) and medical or safety emergencies.

4. Integrated Audit & Continuous Improvement

• Unified Audit Program: Plan and execute internal audits that cover all five standards (9001, 27001, TISAX, 14001, 45001) simultaneously to reduce operational disruption.
• Root Cause Mastery: Use structured methodologies (8D, 5 Whys, Ishikawa) to solve systemic failures across any of the management pillars.
• The PDCA Cycle: Drive the "Plan-Do-Check-Act" philosophy at every level, ensuring that "Lessons Learned" from one department are shared across the entire organization.

Functional Profile: IMS & Security Lead

1. Professional Experience & Education

• Experience: 3 to 5 years of proven experience in Quality, Security, or Integrated Management Systems (IMS).
• Education:  * Industrial Engineer or Quality Engineer degree.

                               * Master’s Degree in Quality, HSE, or Information Security Management.

• Languages: English and French are mandatory (Fluent/C1 level) for managing group standards and international audits.

2. Standards Knowledge (The 5 Pillars)

The core of this role is the mastery of the following international frameworks:

• Quality: ISO 9001 (Process approach and customer satisfaction).
• Information Security: ISO 27001 and TISAX (VDA ISA requirements for the automotive supply chain).
• Environment: ISO 14001 (Environmental impact and regulatory monitoring).
• Health & Safety: ISO 45001 (Risk prevention and workplace wellbeing).

3. Technical Skills & Risk Assessment

• Risk Management (EBIOS RM): Expertise in the EBIOS Risk Manager methodology to identify security objectives, assess threats (mapping of digital risks), and define targeted safety measures.
• Integrated Auditing: Ability to conduct "Cross-Standard" internal audits to verify compliance across Quality, Security, and HSE simultaneously.
• Information Security Frameworks: Knowledge of physical security (access control), network security, and prototype protection protocols.
• Continuous Improvement: Proficiency in PDCA (Plan-Do-Check-Act) and structured problem-solving (8D, 5 Whys).

4. Certifications

• ISO 9001 / 27001 / 14001 / 45001: Possession of a Lead Auditor or Lead Implementer certification is a significant advantage.
• TISAX: Evidence of specialized training in automotive security assessments.

5. Core Soft Skills

• Change Management: Ability to drive the adoption of new standards and transform company culture toward a more secure and quality-focused mindset.
• Priority Management (Gestion des Priorités): Ability to balance urgent security alerts or safety incidents with long-term quality certification projects.
• Analytical Rigor: A systematic approach to documenting non-conformities and tracking corrective actions.
• Communication & Diplomacy: The ability to explain technical constraints to operational teams and present strategic risks to executive management.
• Adaptability: Comfortable working in a fast-paced industrial environment where standards and regulations evolve quickly.

Location: Tunis, Tunisia

Type of contract: CDI

All your information will remain confidential, in accordance with the EEO guidelines.

#TN