Group Procurement and Compliance Manager

Key Responsibilities

Procurement & Supplier Management

• Lead all procurement activities for goods and services across the Tomia Business Unit, ensuring commercial value, quality and compliance with corporate procurement policies.
• Develop and maintain effective relationships with suppliers and strategic vendors to support long-term business objectives.
• Lead commercial negotiations for new contracts, renewals and amendments, achieving optimal commercial terms while minimising business risk.
• Manage the complete procurement lifecycle from business requirement through supplier selection, contracting and ongoing supplier management.
• Maintain and continuously improve supplier governance, ensuring accurate information is recorded within the Vendor Management System.
• Develop supplier performance measures and conduct regular supplier reviews to monitor service, quality and contractual performance.
• Identify, assess and mitigate supplier risks through effective risk management and contingency planning.
• Monitor contract expiry dates and proactively manage contract renewals to ensure uninterrupted service.
• Identify opportunities for supplier consolidation, process improvement and cost optimisation while maintaining required service quality.
• Produce procurement reporting and analytics, including supplier spend, savings achieved, contract status and procurement performance.
• Partner with Finance, Legal, Information Security and business stakeholders to ensure procurement decisions support organisational priorities.

Compliance & Governance

• Own and manage the compliance framework across the Tomia Business Unit.
• Lead the implementation, maintenance and continual improvement of ISO 27001, ISO 27017 and ISO 27018 management systems across Tomia, MACH and Telarix.
• Coordinate annual surveillance and recertification audits, ensuring successful certification outcomes.
• Manage relationships with internal and external auditors throughout audit planning, execution and remediation activities.
• Coordinate the implementation and maintenance of SOC 1 controls and associated audit requirements.
• Track compliance actions, audit findings and remediation plans to ensure timely completion by functional teams.
• Develop, maintain and regularly review corporate policies, standards and procedures to ensure continued compliance with regulatory and business requirements.
• Create and deliver the annual compliance work plan, monitoring progress and reporting against objectives.
• Prepare regular compliance reports, dashboards and risk updates for senior leadership.
• Promote a culture of compliance by developing awareness programmes, communications and training across the organisation.
• Support customer due diligence by completing compliance, information security and governance questionnaires for RFPs, tenders and customer audits.
• Coordinate carbon footprint reporting and sustainability data to support corporate ESG objectives.
• Monitor emerging regulatory requirements and industry best practice, recommending improvements where appropriate.

Stakeholder Management

• Build strong working relationships across Procurement, Finance, Legal, Information Security, IT, Operations, Sales and Product teams.
• Provide expert advice to business leaders on procurement strategy, supplier governance and compliance obligations.
• Influence stakeholders to ensure governance requirements are embedded into business processes.
• Act as the primary point of contact for procurement and compliance matters within the Business Unit.

Knowledge, Skills & Experience

Essential

• Experience managing procurement and supplier governance within a global organisation.
• Strong commercial negotiation and contract management experience.
• Experience implementing and maintaining ISO 27001 and related information security standards.
• Experience supporting external audits and certification programmes.
• Knowledge of supplier risk management and third-party governance.
• Strong understanding of procurement best practice and purchasing controls.
• Excellent stakeholder management and influencing skills.
• Strong analytical and reporting capability.
• Excellent organisational skills with the ability to manage multiple priorities.
• High attention to detail and commitment to continuous improvement.

Desirable

• Experience with ISO 27017 and ISO 27018.
• Experience supporting SOC 1 or SOC 2 audit programmes.
• Knowledge of ESG and carbon reporting requirements.
• Experience working within software, telecommunications or technology organisations.
• Professional procurement qualification (CIPS) or equivalent.
• Information Security or Compliance qualification (ISO Lead Implementer/Lead Auditor or similar).