deGRANDSON Global Blog

ISO 13485 Consultancy: Be a successful MDMS Consultant

Written by Dr John FitzGerald | May 12, 2026

Could you make a successful career in Medical Device Management Consulting?

What ISO 13485 training is needed?

Dr John FitzGerald writes ...

"Having worked for 28 years as a management system consultant, I've learned a lesson or two (including some bitter ones) on setting up and running a successful management consultancy business. So I'd like to share my experience with you in this article. This time, in relation to Consulting in Medical Device Management Systems (MDMS).

Of course, you must use the information and suggestions here at your own risk; ultimately,  it is you who must decide whether this life is for you. And if you don't find the prospect of working as a medical device sector consultant exciting, don't do it. If you do, read on."

First, we'll consider 'What it Takes' and then examine 'Business start-up plan for the MDMS Consultant - a 12-step plan'.

Note: You don't need to be a Regulatory Affairs Expert to work successfully as a consultant in this sector (see Lnowledge & Expertise, below).

Table of Contents

Click to expand

 

What it Takes to be a Successful MDMS Consultant

To be a successful ISO 13485 or MDMS Consultant, you will need capabilities and competencies under five headings: fortitude, finance, experience, knowledge & expertise, and personal attributes. You will need to be able to tick every box, almost.

Fortitude

  • suitable and stable private life
  • the ability to take disappointment
  • prepared to work 16 hours plus per day
  • sufficient funds to survive while building a reputation – self-employment puts great strain on relationships
  • adequate knowledge of financial accounting to manage and control a small business

Experience

  • a minimum of 10 years relevant experience - as regulations and associated guidelines grow, your need for experience in the sector expands.
  • relevant expertise in senior management or technical roles for the medical device sector, in which you propose to offer services. There are more than 10,000 different types of medical devices; you can't know them all, but you do need expertise in the segment in which you propose to operate.
  • the ability to talk-the-talk (and no BS) and in-depth knowledge of the international regulatory scene in general terms (i.e., bring the product successfully to market with the necessary marketing authorization or marketing license).
  • experience in conducting medical device risk management evaluations.
  • keep ahead of current and prospective clients on regulatory changes (and their effective dates), guidelines, national and international statistics, etc.
  • extensive auditing experience – internal audits and supplier evaluations (though the latter are infrequent)
  • professional auditing experience working with a certification body (preferably as lead auditor)
  • If the opportunity arises, work for an established consultancy – you will learn about what works and what doesn't work.

 Knowledge & Expertise

  • a relevant third-level qualification in a technical subject,
  • sound knowledge of national and international medical device regulations, their interpretations, and guidelines, 
  • Sound knowledge of the medical device supply chain, both upstream and downstream.  It is likely that the suppliers of components, other products, and services to medical device manufacturers will be your most likely clients!
  • thorough knowledge and understanding of:
    • the ISO 13485 Standard and its interpretation, 
    • the ISO 14971 for risk management in medical device manufacture.
    • the implementation and maintenance of a Medical Device Management System,

Personal attributes

  • personable, without gushing
  • patient, but determined
  • self-starter, you will have to provide leadership
  • gregarious, but not a lush
  • confident but not domineering
  • well-spoken without the liberal use of expletives
  • principled, and a respecter of confidentiality
  • conscientious, and meeting your deadlines

 

 

12 Steps to Become an MDMS Consultant

If you want to start a business based on OHSMS consultancy, there are twelve steps you need to go through:

Step 1: Identify the market niche best suited to your Knowledge and Experience

Begin by identifying the economic or market niche that aligns with your skill set

Step 2: Acquire the Certifications, Licenses, and Professional Body Memberships

While certification and membership are not typically barriers to working as an ISO 13485 consultant, they can help build credibility with prospective clients.

An ISO 13485 Consultant and Lead Auditor Diploma from deGRANDSON will both provide you credibility when you present yourself to a potential client and, most importantly, fill in the inevitable gaps in your skills and knowledge.  The large volume of documentation, sample procedures, and sample records included in this course will prove invaluable. Additionally, an ISO 14971 Rsk Management Course at Advanced is needed as this is an area where most clients will require guidance.

Step 3: Decide Your Short and Long-Term Goals

Set goals for your business and personal life, looking ahead three months, one year, and 10 years. 

Discuss and agree on these goals with your spouse or partner. The stress and financial pressure of being self-employed can be very destructive to relationships, especially when the other person is naturally risk-averse.

Step 4: Choose Your Target Market

Identify organizations and organization types in your market sector that can benefit from the use of your services for a short period. 

Focus on sectors experiencing, or about to experience, significant statutory or regulatory changes, or those that have had a recent occupational health disaster. 

Here,  the disruptive event creates an opportunity for you – people are more likely than usual to listen and be willing to accept the changes you suggest.

 

Step 5: Research Your Target Market and Your Competition

What needs, problems, and opportunities can your target organizations successfully address using your services?

You need to be able to tell your clients why they need you:

  • Do they require certification ISO 45001 alone?
  • Do they integrate ISO 13485 certification with an existing management system (such as ISO 9001)
  • Do they need ongoing expert advice on medical device regulations and applicable regulatory guidelines?
  • Do they need support in carrying out internal audits and managing the MDMS?
  • Do they wish to conduct MDMS audits of current and prospective suppliers?

 

 

Step 6: Prepare a Business Plan

The old adage is very true: organizations that fail to plan plan to fail. No startup business plan has ever closely matched the outcome, but if you can't make it work on paper, you won't be able to make it work. 

Preparing a business plan yourself is a significant learning experience in itself and is critically important. 

Except perhaps for financial projections, you cannot/must not outsource this aspect of starting your consultancy. Like marketing and sales for a new business, you must do it yourself.

 

Step 7: Minimize your expenditure except where it really matters - consider a Home Office

When you fail to reach your short-term turnover targets fully, and you will (ask any self-employed consultant you know), you do not want any regular monthly outgoings that can be avoided. 

Work from home, avoid taking on any mortgages or borrowings, rent a car on a month-to-month basis, and buy second-hand equipment. You want to survive while building your business.

However, you will need an appropriate car and be well-dressed. If you don't appear successful, you won't attract many business opportunities. Prospects will judge you on appearances – do you look and sound professional? They have little else to judge you on. You must look the business to do the business.

 

Step 8: Build Your Network

If no one knows you and you know no one in your field, you may find yourself in the midst of a disaster soon. It is essential to begin building your network as soon as you have decided to become a consultant.

A strong network of contacts ensures you have access to potential job opportunities. A professional network, coupled with a social network, can help you market and advertise your business.

References are also an important way to find work in the niche. Rely on your initial contact base to build your network.

 

Step 9: Fix your Fees and the way to bill Clients

As a beginner, you may not receive high fees as a consultant. Your charges increase as you become known as a consultant. Keep in mind your credentials and experience,  as well as market conditions, your target group,  and your competitors when setting your fees.

Also, decide how you will bill clients. Most management system consultants charge by the day or half-day and invoice at the end of the month (or on completion, if before month-end). Payment within 7 days is usually requested.

 

Step 10: Arrange your Marketing and Promotion

Forget about advertising, whether traditional or online. It is expensive and unlikely to produce results quickly. Instead, take the time to build a social media presence, including…

  • A website with blog/news,
  • YouTube business page,
  • LinkedIn business page, and
  • Google+ business page

A prospective customer can use these media to judge your capabilities. Without them, a prospect will ask themselves why you do not have an online presence.

 

Step 11: Don't hire permanent Staff

You may find it easier to handle all tasks of your business on your own when you start. However, once your consulting business is up and running, you may need the help of others and decide to employ Staff.

Verify both legal and tax details before proceeding. You may also outsource some tasks that do not require your immediate attention.

Ensure the tasks are unrelated to your consulting business. For example, you can outsource website maintenance for a consulting business, but not when it is your niche.

 

Step 12: Festina lente (hasten slowly)

Don't give up the 'day job' and start consulting. Wait until all the previous 10 steps are essentially completed,  and seek out a 'banker' contract. For example, get one or more contracts working, say, 4/5 days a year,  maintaining an organization's MDMS – use your network of contacts to seek out such opportunities.

Many ISO 13485 consultants also have ongoing relationships with Certification Bodies, where they act as lead auditors and team auditors – an intermittent (and legitimate) arrangement that suits both parties.

Only when you are confident that you can make a living from consulting should you give up the day job. And then 'go for it',  working harder and longer than you have ever done before.

Best of luck!

Related Courses

View ISO 45001 Internal Auditor Course
Est duration: 14 hrs
Price: USD 620
View ISO 45001 Lead Auditor Course
Est duration: 30 hrs
Price: USD 1,325
View ISO 45001 Lead Implementer Course
Est duration: 24 hrs
Price: USD 1,060
View ISO 45001 Consultant and Lead Auditor Course
Est duration: 36 hrs
Price: USD 1,590
View ISO 45001 Internal Auditor Extension Course
Est duration: 8 hrs
Price: USD 355

 


deGRANDSON Global is an ISO-certified Educational Organization

In October 2021,  we secured certification to three education-related ISO Standards. We now have a university-grade management system in place that conforms to the requirements of …

  • ISO 21001, Educational Organizational Management System,
  • ISO 29993, Learning Services outside formal Education,  and
  • ISO 29994, Learning Services – additional requirements for Distance Learning.

We have chosen ISO 21001 certification because, unlike IRCA and Exemplar badges (which,  in our opinion, are commercially compromised), it is based on an independent third-party assessment. It is a 'university grade' standard in use globally by schools, colleges, and universities to demonstrate their competence.

We provide Courses for ISO 9001, ISO 13485, ISO 14001, ISO 17025, ISO 27001, Iso 45001, Data Protection, Risk Management, and more.