Group Procurement and Compliance Manager
RemoteBengaluru, Karnataka, India
Job Summary
Lead all procurement activities for goods and services across the Tomia Business Unit, managing the complete lifecycle from business requirement through supplier selection, contracting, and ongoing governance. Drive commercial negotiations for new contracts and renewals while developing supplier performance measures, conducting regular reviews, and identifying opportunities for consolidation and cost optimization. Own and manage the compliance framework, leading the implementation and maintenance of ISO 27001, ISO 27017, and ISO 27018 management systems, coordinating annual surveillance audits, and tracking remediation plans. Produce procurement reporting and analytics on spend, savings, and contract status, while preparing compliance dashboards and risk updates for senior leadership. Partner with Finance, Legal, Information Security, and business stakeholders to embed governance requirements into processes and support customer due diligence for RFPs and tenders.
Required Qualifications
- Essential Experience managing procurement and supplier governance within a global organisation
- Strong commercial negotiation and contract management experience
- Experience implementing and maintaining ISO 27001 and related information security standards
- Experience supporting external audits and certification programmes
- Knowledge of supplier risk management and third-party governance
- Strong understanding of procurement best practice and purchasing controls
- Excellent stakeholder management and influencing skills
- Strong analytical and reporting capability
- Excellent organisational skills with the ability to manage multiple priorities
- High attention to detail and commitment to continuous improvement
Desired Qualifications
- Desirable Experience with ISO 27017 and ISO 27018
- Experience supporting SOC 1 or SOC 2 audit programmes
- Knowledge of ESG and carbon reporting requirements
- Experience working within software, telecommunications or technology organisations
- Professional procurement qualification (CIPS) or equivalent
- Information Security or Compliance qualification (ISO Lead Implementer/Lead Auditor or similar)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.