Key Responsibilities
Procurement & Supplier Management
Lead all procurement activities for goods and services across the Tomia Business Unit, ensuring commercial value, quality and compliance with corporate procurement policies.
Develop and maintain effective relationships with suppliers and strategic vendors to support long-term business objectives.
Lead commercial negotiations for new contracts, renewals and amendments, achieving optimal commercial terms while minimising business risk.
Manage the complete procurement lifecycle from business requirement through supplier selection, contracting and ongoing supplier management.
Maintain and continuously improve supplier governance, ensuring accurate information is recorded within the Vendor Management System.
Develop supplier performance measures and conduct regular supplier reviews to monitor service, quality and contractual performance.
Identify, assess and mitigate supplier risks through effective risk management and contingency planning.
Monitor contract expiry dates and proactively manage contract renewals to ensure uninterrupted service.
Identify opportunities for supplier consolidation, process improvement and cost optimisation while maintaining required service quality.
Produce procurement reporting and analytics, including supplier spend, savings achieved, contract status and procurement performance.
Partner with Finance, Legal, Information Security and business stakeholders to ensure procurement decisions support organisational priorities.
Compliance & Governance
Own and manage the compliance framework across the Tomia Business Unit.
Lead the implementation, maintenance and continual improvement of ISO 27001, ISO 27017 and ISO 27018 management systems across Tomia, MACH and Telarix.
Coordinate annual surveillance and recertification audits, ensuring successful certification outcomes.
Manage relationships with internal and external auditors throughout audit planning, execution and remediation activities.
Coordinate the implementation and maintenance of SOC 1 controls and associated audit requirements.
Track compliance actions, audit findings and remediation plans to ensure timely completion by functional teams.
Develop, maintain and regularly review corporate policies, standards and procedures to ensure continued compliance with regulatory and business requirements.
Create and deliver the annual compliance work plan, monitoring progress and reporting against objectives.
Prepare regular compliance reports, dashboards and risk updates for senior leadership.
Promote a culture of compliance by developing awareness programmes, communications and training across the organisation.
Support customer due diligence by completing compliance, information security and governance questionnaires for RFPs, tenders and customer audits.
Coordinate carbon footprint reporting and sustainability data to support corporate ESG objectives.
Monitor emerging regulatory requirements and industry best practice, recommending improvements where appropriate.
Stakeholder Management
Build strong working relationships across Procurement, Finance, Legal, Information Security, IT, Operations, Sales and Product teams.
Provide expert advice to business leaders on procurement strategy, supplier governance and compliance obligations.
Influence stakeholders to ensure governance requirements are embedded into business processes.
Act as the primary point of contact for procurement and compliance matters within the Business Unit.
Knowledge, Skills & Experience
Essential
Experience managing procurement and supplier governance within a global organisation.
Strong commercial negotiation and contract management experience.
Experience implementing and maintaining ISO 27001 and related information security standards.
Experience supporting external audits and certification programmes.
Knowledge of supplier risk management and third-party governance.
Strong understanding of procurement best practice and purchasing controls.
Excellent stakeholder management and influencing skills.
Strong analytical and reporting capability.
Excellent organisational skills with the ability to manage multiple priorities.
High attention to detail and commitment to continuous improvement.
Desirable
Experience with ISO 27017 and ISO 27018.
Experience supporting SOC 1 or SOC 2 audit programmes.
Knowledge of ESG and carbon reporting requirements.
Experience working within software, telecommunications or technology organisations.
Professional procurement qualification (CIPS) or equivalent.
Information Security or Compliance qualification (ISO Lead Implementer/Lead Auditor or similar).
Originally posted on