Quality Assurance Interview Questions for Medical Devices (With Model Answers)

Quality assurance interviews in medical devices test whether you understand why the quality system exists, not just which clause says what. Interviewers want to hear risk-based thinking, evidence and ownership. This guide gives you 8 common questions with model answers and two case studies, so you can practise structured, confident responses for QA, QMS and compliance roles.

How to structure your answers

Use a simple pattern: answer first, reason second, example third. State the point in one sentence, explain why it matters for patient safety or compliance, then give a short real example. For behavioural questions use STAR (situation, task, action, result) and always finish with the measurable result and what you learned. If you lack direct experience, say so and explain how you would approach it.

Eight common questions with model answers

1. What is the difference between ISO 13485 and ISO 9001?

Model answer: “ISO 9001 focuses on customer satisfaction and continual improvement for any industry. ISO 13485 is for medical devices and focuses on regulatory compliance and patient safety. It requires documented procedures, risk management across the product lifecycle, design and process validation, traceability, complaint handling and regulatory reporting, and it does not require continual improvement of customer satisfaction in the same way. Many companies hold both, but ISO 13485 is the one regulators rely on.” See our ISO 13485 and MDSAP guide.

2. How does FDA’s QMSR relate to ISO 13485?

Model answer: “The QMSR, effective 2 February 2026, incorporates ISO 13485:2016 by reference, with some additional FDA requirements. It replaced most of the old Quality System Regulation structure. FDA does not require an ISO certificate, but my system has to meet the requirements and FDA inspects against its regulation.” Read our QMSR checklist.

3. What happens when you find a nonconforming product?

Model answer: “I identify and segregate it so it cannot be shipped by mistake, record the nonconformance and assess its impact. I decide on disposition: rework, concession with justification, scrap or return to supplier. I check whether other lots or already-shipped units are affected, assess health risk and whether it is reportable, and decide if a CAPA is needed. Everything is documented and approved by authorised people.”

4. How do you decide whether to open a CAPA?

Model answer: “I use risk and trend criteria from the procedure: severity, recurrence, systemic causes, regulatory impact and customer impact. A single minor deviation with a clear containment may be handled as a correction. A repeating or high-risk issue needs a CAPA with root cause and an effectiveness check.” See CAPA and complaint handling.

5. What is the purpose of management review?

Model answer: “It is where top management evaluates whether the quality system is suitable, adequate and effective. Inputs include audit results, complaints, CAPA status, supplier performance, regulatory changes and process data. Outputs are recorded decisions and resources, not just minutes.”

6. How do you control a supplier that affects product quality?

Model answer: “I classify suppliers by risk, evaluate and approve them before use, define requirements in a quality agreement, perform incoming inspection or audits proportionate to the risk, and monitor performance. Poor performance triggers supplier corrective action. For critical suppliers, I make sure change notification is contractually required.”

7. What makes a good internal audit?

Model answer: “A risk-based plan, independent trained auditors, a focus on how work is really done, objective evidence in the findings and follow-up on corrective actions. A good audit finds real gaps, so I would be wary of years of audits with no findings.”

8. Tell me about a time you resolved a quality problem under pressure.

Model answer (STAR): “A distributor reported labels peeling on a sterile product (situation). I was responsible for the investigation within the week (task). I quarantined stock, reviewed the label adhesive lot and storage data, tested retained samples and traced the cause to a supplier change in adhesive (action). We rejected the lot, got a supplier corrective action and added incoming checks. No further complaints in six months (result).”

Case study 1: the audit finding that was ignored

Scenario: An internal audit finds that three operators performed a process step using an outdated work instruction. The supervisor says the product was fine. What do you do?

Ideal answer: “First, contain: confirm which instruction version was used, which lots were made and whether the differences affect product quality or validated parameters. Second, correct: retrieve the obsolete instruction and retrain. Third, find the root cause: why was an obsolete document available at the point of use? It may be a document control failure, not operator error. Fourth, raise a nonconformity and a CAPA if the cause is systemic, with an effectiveness check such as a follow-up audit. I would also check whether other work areas have the same exposure. I would not accept ‘product was fine’ without evidence.”

Case study 2: complaint trend with no single failure

Scenario: Complaints about a connector are rising slowly over six months. Each complaint alone was closed as ‘user error’.

Ideal answer: “The trend is the signal. I would pool the complaints, calculate the rate per units sold, compare it to the risk file’s expected rate and check design inputs and the instructions for use. ‘User error’ that repeats may be a use-related risk the design did not control. I would open a CAPA, review usability risk, consider a design or labeling change under change control, and assess whether the trend triggers a reporting obligation or a field action. The result must feed the risk management file.”

Mistakes to avoid

• Quoting clauses without explaining what you would actually do.
• Blaming individuals instead of looking for system causes.
• Describing a team result without saying what you did.
• Claiming experience you cannot defend with detail.

Frequently asked questions

Do I need ISO 13485 lead auditor training for a QA role?

It helps for audit-focused roles, but many entry roles value knowledge of the standard and practical examples more. Check each job description.

How technical will a QA interview be?

Expect a mix of standards knowledge, scenario questions and behavioural questions. Senior roles add questions about audits, inspections and leading change.

What if I do not know an answer?

Say so, then explain how you would find it or reason from principles. Guessing confidently is worse than structured honesty.

Model answers are examples. Adapt them to your real experience and the regulations in force.

Talk to the AptSkill team

Want mock interview practice or training for QA roles? Send us a message.