Lead, S2C Process, Governance & Risk, SCM

Job Summary

Supply Chain Management (SCM) is responsible for the overall commercial and risk management with the bank’s third‑party providers. To meet increasing business demands, the SCM team is looking for a candidate with strong experience and expertise in Source to Contract (S2C) Risk and Governance, and the gravitas to engage stakeholders within SCB business function to support key priorities. The successful candidate will be accountable for owning and managing Source-to-Contract risks within the First Line of Defence, ensuring that risks identified through operations, audits, regulatory reviews, and monitoring activities are actively managed, remediated, and prevented from reoccurrence.

The role ensures that management action plans are delivered to closure, control enhancements are embedded into the S2C process and tooling, and lessons learned are systematically fed into S2C change, enablement, and training.

• Act as the First Line owner of S2C process risks, including sourcing governance, supplier selection and contracting.
• Maintain clear ownership of risk events, issues, and control weaknesses arising within S2C.
• Ensure risks are assessed, prioritised, and managed in line with the bank’s risk appetite and operational risk framework.
• Own and drive management action plans (MAPs) for all S2C‑related issues, including audit findings, regulatory observations, and internal risk events.
• Ensure MAPs are clearly defined, time‑bound, and sustainably remediated, not treated as one‑off fixes.
• Track progress, elevate delays or blockers, and provide transparent status reporting to senior management.
• Act as the primary First Line point of contact for Internal Audit, Compliance reviews, and regulatory requests relating to S2C.
• Coordinate evidence gathering and responses, ensuring accuracy, completeness, and consistency.
• Ensure audit outcomes and regulatory feedback are translated into concrete process, control, or behavioural changes.
• Analyse root causes of S2C issues and audit findings to identify systemic weaknesses.
• Partner with the Global Process Owner and S2C stakeholders to embed preventative controls upstream, reducing reliance on detective or manual controls.
• Ensure control improvements are practical, proportionate, and embedded into day‑to‑day execution.
• Act as the bridge between risk outcomes and S2C change initiatives.
• Ensure insights from audits, incidents, and risk monitoring directly inform:
  • Process design changes
  • Policy and standard updates
  • Tool enhancements (e.g. workflow, approvals, data capture)
  • Training and enablement materials
• Prevent repeat findings by ensuring lessons learned are institutionalised.
• Define and maintain risk and control MI for S2C, including issue trends, recurring exceptions, and control effectiveness.
• Use MI to proactively identify emerging risks and inform prioritisation of change activity.
• Provide clear, executive‑level reporting on risk posture and remediation status.
• Partner closely with Category Management, Legal, Risk, Compliance, and Technology to drive ownership and timely remediation.
• Challenge stakeholders constructively where risk acceptance or non‑compliance is proposed.
• Support change adoption by ensuring clear communication and enablement of new controls and processes.
• Process Owner – Source-to-Contract
• Global Process Owner – SCM Governance and Risk
• Procurement & Category Management
• Operational Risk, Compliance, and Legal
• Internal Audit
• Procurement Technology & Change teams
• Timely closure of S2C‑related management action plans
• Reduction in repeat audit findings and control failures
• Improved audit and regulatory outcomes for S2C
• Effective translation of risk insights into process and tool changes
• Strong stakeholder confidence in First Line risk ownership

• Bachelor/Master Degree with 5 years’ experience, of which experience in Business Planning would be a plus
• 5–10 years experience in Procurement, S2C/S2P, or Supply Chain Management, with specific experience in risk management.
• Significant experience in procurement, S2C operations, risk management, or governance within a regulated environment.
• Proven track record of owning and delivering management…