(UNIX only) The --filemode option allows you to set the file permissions for the files generated by isql (output file) and bcp (all generated files by bcp). --filemode takes precedence over any default permission settings for those files.
isql -U sa -P secret -o myoutput --filemode 640
See the ESD #4 section Stricter Permissions for Open Client and Open Server Files (UNIX only) for the default permission settings of all generated data and output files.