Safety Leadership

When to Replace an EHS Manager: 6 Warning Signs That Safety Has Lost Its Operating Owner

Replacing an EHS manager should follow evidence, not frustration. This F1 diagnostic shows six warning signs that safety has lost its operating owner, then separates person-level concerns from operating-model failures.

By 7 min read
Headline Podcast workplace safety and leadership analysis

Key takeaways

  1. 01The strongest reason to replace an EHS manager is persistent failure to convert risk evidence into operating decisions.
  2. 02A safety leader cannot own controls that operations, engineering, maintenance, or procurement can weaken without consequence.
  3. 03Boards and executives should test decision rights, escalation speed, critical-control ownership, and field credibility before changing the person.
  4. 04If the role is designed as an internal firefighter, replacing the incumbent may reproduce the same failure with a different name.
  5. 05Leadership quality is visible in what changes after bad news reaches the room.

An EHS manager can hold the right title, attend every leadership meeting, and still no longer own the operating conditions that determine whether people go home safe. The difficult question is not whether the manager is busy. It is whether the role still changes decisions before exposure becomes harm.

Replacing an EHS leader should never be a reaction to one incident, one disagreement, or one disappointing metric. It becomes a governance question when the safety function repeatedly absorbs risk without changing the system that creates it. This diagnostic uses six warning signs to help a CEO, COO, board member, or senior EHS leader distinguish a performance problem from an operating-model failure.

Key Takeaways

  • The strongest reason to replace an EHS manager is persistent failure to convert risk evidence into operating decisions.
  • A safety leader cannot own controls that operations, engineering, maintenance, or procurement can weaken without consequence.
  • Boards and executives should test decision rights, escalation speed, critical-control ownership, and field credibility before changing the person.
  • If the role is designed as an internal firefighter, replacing the incumbent may reproduce the same failure with a different name.
  • Leadership quality is visible in what changes after bad news reaches the room.

Why a capable EHS manager can still become the wrong appointment

Safety leadership is not only a matter of technical competence. It is a position inside a decision system. A capable manager can become ineffective when the role has no authority over the controls it is expected to protect, when production leaders treat escalation as obstruction, or when executives request assurance without accepting inconvenient evidence.

That distinction matters because a personnel change can become a convenient substitute for governance. James Reason's work on organizational accidents showed why visible failures often sit on top of latent conditions, including weak supervision, poor design, and decisions that allow defenses to degrade. The practical implication is uncomfortable. A manager may be part of the problem, but the appointment process may also have made failure predictable.

1. The EHS manager is still the only escalation route

In a healthy operating model, serious-risk information can travel through several routes. A supervisor can stop a task, an engineer can reject an unsafe design, a maintenance leader can delay a restart, and an executive can resolve a resource conflict. When every concern must pass through the EHS manager, the function becomes a bottleneck rather than a control.

This warning sign is present when leaders praise the manager for being responsive while the same categories of exposure return week after week. The manager answers every call, joins every review, and personally chases every overdue action, yet the organization learns to wait for EHS instead of owning the decision.

Before replacing the person, examine whether the role has clear stop-work rights, escalation thresholds, and named operational owners. If those elements exist and the manager still withholds material risk, the performance concern is real. If they do not exist, the first correction belongs to the operating model.

2. Metrics are reported, but no decision follows

A dashboard is not evidence of leadership if the meeting ends with the same exposure, the same owner, and the same deadline. The problem is not that the metric is imperfect. Every measure is partial. The problem is that the EHS manager has accepted reporting as the finish line rather than using the information to force a decision.

Look for a repeated pattern. Recordables fall, activity counts rise, audits close, and training attendance looks healthy, while critical controls remain weak or unverified. A senior safety leader should be able to say what the data changed, which decision was made, and what evidence will show whether that decision worked.

When the manager cannot answer those questions, test whether executives have created a reporting culture that rewards reassurance. If the manager has permission to surface bad news but not to challenge the operating plan, replacing the manager may only make the next report more polished.

3. Critical controls have no executive owner

High-consequence risk does not disappear because an EHS department has written a standard. A critical control needs an accountable owner who can fund, design, maintain, verify, and escalate it. The EHS manager can coordinate the assurance process, but cannot personally own every barrier in a complex operation.

A warning sign appears when the EHS manager presents recurring control failures without naming the executive who must resolve the constraint. It also appears when the manager accepts “shared accountability” as an answer, because shared accountability often means that nobody has to make the difficult trade-off.

Use the control register, risk reviews, and incident actions to test ownership. If the manager repeatedly avoids assigning decision rights, that is a legitimate leadership gap. If the organization refuses to give those rights to anyone, the board is looking at a governance problem that sits above the EHS role.

4. The team is rewarded for rescue work

Some EHS teams become indispensable by fixing everything at the last minute. They rewrite permits, chase contractors, repair weak investigations, prepare executives for inspections, and mediate conflicts that should have been resolved by line leadership. The organization then confuses exhaustion with value.

The manager may even defend this pattern because emergency usefulness creates personal influence. Yet a function that is always rescuing the operation has little time to improve design, capability, learning routines, or control verification. The visible workload becomes evidence of commitment while the hidden system remains unchanged.

Ask what work the team stopped doing because it was absorbed by urgent correction. Ask whether line leaders become more capable after each intervention or simply wait for EHS to return. If the manager builds dependency instead of capability, replacement may be justified. If dependency is the only way the function gets access to decisions, redesign the mandate first.

5. The manager cannot disagree safely

Senior leaders need an EHS manager who can challenge a plan without turning every disagreement into a personal conflict. That does not mean unlimited veto power or error tolerance. It means the organization has a clear process for testing evidence, setting boundaries, and deciding when work cannot proceed.

The warning sign is not that the manager disagrees often. It is that the manager has stopped disagreeing when the evidence is uncomfortable. Silence may reflect weak judgment, but it may also reflect retaliation, exclusion from planning, or a history in which escalation harmed the messenger more than the hazard.

A useful review compares what the manager privately raised with what reached the executive record. If material concerns disappear between the field and the boardroom, investigate the path before judging the person. Psychological safety is not a substitute for accountability, although without enough trust to report bad news, accountability receives a distorted picture.

6. The EHS strategy changes every time the executive sponsor changes

A safety strategy should adapt to new evidence, technology, risk, and business conditions. It should not become a new document whenever a sponsor arrives with a different vocabulary. Frequent resets reveal that the EHS manager is following executive preference instead of maintaining a stable risk logic.

Look for abandoned priorities, renamed programs, and repeated launches without a completed review of the previous cycle. The manager may lack the courage to protect continuity, or the executive team may be using strategy changes to avoid judging whether the last one worked.

The decision test is straightforward. Can the manager explain which risks remain material, which controls improved, which assumptions changed, and why the next priorities follow from evidence? If not, replace the strategy, the mandate, or the manager, in that order. A new person should not inherit a system that rewards constant reinvention.

What leaders should verify before making the replacement decision

Before removing an EHS manager, the CEO or board should compare the role's expected authority with the authority that actually exists. The table below separates a person-level performance signal from a design signal that belongs to the organization.

EvidencePerson-level concernOperating-model concern
EscalationMaterial risk is withheld or softened after the manager has a clear route.No route exists that protects escalation from production pressure.
Critical controlsThe manager avoids assigning owners or verifying effectiveness.Executives will not grant resources or decision rights to control owners.
MetricsReports are selected to create reassurance.Leadership asks for favorable numbers and punishes adverse trends.
Field credibilityThe manager is absent from meaningful work and relies on paperwork.Field presence is treated as visibility while operational authority remains elsewhere.

Continue the leadership conversation: The Headline Podcast examines the decisions behind safer workplaces, with Andreza Araujo and Dr. Megan Tranter connecting executive judgment to operational reality. Explore the podcast at Headline Podcast.

How to reset ownership after the decision

If replacement is justified, the incoming leader should not begin with a campaign, a new slogan, or a larger activity calendar. The first task is to clarify which risks matter, who owns the controls, how escalation works, and what evidence can close the loop.

Set those expectations with the CEO, COO, operations leaders, and the board before the appointment is announced. Then give the new manager a short list of decisions that must change, not a long list of initiatives that can be counted. In the spirit of the Headline Podcast, leadership becomes credible when the organization can point to a changed decision, a protected control, and a clearer route for bad news.

Andreza Araujo's work across safety culture and leadership consistently keeps the focus on the same practical question: does the organization have the capacity to act on what it already knows? That question is more useful than asking whether the EHS manager appears busy, visible, or well liked.

FAQ

Should an EHS manager be replaced after a serious incident?

Not automatically. First establish what the manager knew, what authority was available, what was escalated, and which latent conditions allowed the exposure to remain. A serious incident may reveal a leadership failure, an operating-model failure, or both.

What is the clearest sign that the problem is larger than one manager?

The clearest sign is repeated turnover without a meaningful change in risk ownership, escalation, or control performance. When different managers produce the same pattern, the organization should investigate the system that defines the role.

Can an EHS manager own critical controls?

The manager can own the assurance process and challenge weak evidence, but operational leaders usually need to own the controls they can design, fund, maintain, and verify. The exact allocation should be explicit for each material risk.

How should a board evaluate the next EHS candidate?

Ask the candidate to explain how they would handle conflicting evidence, assign control ownership, escalate an unresolved exposure, and measure whether a decision changed field conditions. The answers should reveal judgment and operating discipline, not only technical vocabulary.

Listen for more: The Headline Podcast is the space where leadership and safety come together to shape better workplaces and better lives. Find the next conversation at headlinepodcast.us.

Topics ehs-manager safety-leadership safety-governance executive-accountability critical-controls

Frequently asked questions

Should an EHS manager be replaced after a serious incident?
Not automatically. First establish what the manager knew, what authority was available, what was escalated, and which latent conditions allowed the exposure to remain. A serious incident may reveal a leadership failure, an operating-model failure, or both.
What is the clearest sign that the problem is larger than one manager?
The clearest sign is repeated turnover without a meaningful change in risk ownership, escalation, or control performance. When different managers produce the same pattern, the organization should investigate the system that defines the role.
Can an EHS manager own critical controls?
The manager can own the assurance process and challenge weak evidence, but operational leaders usually need to own the controls they can design, fund, maintain, and verify. The exact allocation should be explicit for each material risk.
How should a board evaluate the next EHS candidate?
Ask the candidate to explain how they would handle conflicting evidence, assign control ownership, escalate an unresolved exposure, and measure whether a decision changed field conditions. The answers should reveal judgment and operating discipline, not only technical vocabulary.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI