If you're on the company's BES and they have SMS logging enabled, then yes, they can read them. Also emails, PIN messages, and everything else you do with a handset on their BES. If it's not on BES, then it would be a little bit more roundabout, as outlined above, but still possible. If the company pays for it, the best policy would be to keep personal stuff on your personal phone.