Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Category Manager

London
2 weeks ago
Create job alert

Category Manager - Cloud & Information Security Procurement

The WTW Procurement Sourcing Team are seeking an experienced IT Procurement professional to own the Cloud & Information Security category and drive commercial value, risk reduction, and supplier performance across a global stakeholder base. You will build and execute a 6–12‑month category strategy and pipeline, lead complex sourcing and renewals spanning cloud infrastructure/services and cyber tooling, and act as the steward of data quality in Ariba so that decisions, reporting, and governance are rock solid. Specific product expertise is a plus, but proven IT procurement and category leadership matter most. You’ll collaborate daily with colleagues in UK/US/France & Mumbai. This role requires a minimum two days per week in London office.

The Role:

Category strategy & pipeline:

  • Own the Cloud & InfoSec category plan for 6–12 months: size the opportunity, define value levers (cost, risk, performance), set KPIs, and maintain a visible, prioritized pipeline of sourcing events and renewals aligned to stakeholder and security roadmap goals.

  • Embed ESG/diversity considerations and standardized ways of working that align with Procurement’s operating model.

    Sourcing, negotiation & contracting:

  • Lead end‑to‑end sourcing projects or contract renewals in Ariba (RFI/RFP, evaluation, BAFO, award) and negotiate commercial/contractual terms in partnership with Business Stakeholders, Legal and Risk functions; ensure contract records are created/updated and stored within Ariba Contracts.

  • Deliver measurable outcomes (TCO savings, cost avoidance, payment terms improvements, consolidation of suppliers/licenses) and log benefits in the approved Ariba workflow.

    Data stewardship in Ariba (single source of truth):

  • Champion data quality across sourcing projects, contracts and savings forms—owning taxonomy alignment, metadata completeness and timeliness (e.g., renewal dates, values, clauses). Use the latest upload templates and required fields; fix gaps rapidly to keep reporting dependable.

  • Produce category MI from, SpendViz and Ariba to inform decisions (pipeline, cycle times, compliance, value delivery).

    Supplier Risk Management (SRM) & compliance:

  • Initiate and coordinate SRM assessments and ongoing reviews (e.g., InfoSec, Privacy, BCM/Resilience) for material/critical suppliers; ensure Riskonnect/Ariba status and artefacts are up to date.

  • Operate to the Procurement Policy and Source‑to‑Pay process—no supplier discussions or commitments outside approved Ariba pathways; ensure stakeholder are advised to raise PO’s and approvals follow policy thresholds.

    Stakeholder engagement & business partnership:

  • Act as trusted advisor to the Cloud and ICS teams and adjacent technology stakeholders (HR/Finance/CRM platform owners, service management, programme teams), aligning category plans with roadmaps and transformation priorities.

  • Work seamlessly across UK/US/France & Mumbai teams; drive clarity on business requirements, evaluation criteria and decision governance.

    What Success Looks Like (first 6-12 months)

  • Build and develop your Category plan and have approved and refreshed quarterly; visible project pipeline covering new events and all renewals 6–12 months ahead.

  • Data Quality excellence within Ariba: 100% of in‑scope contracts loaded in a timely manner with complete, correct metadata; sourcing projects and savings forms kept current; reporting is “board‑ready”.

  • Value & risk: Achieve agreed savings/avoidance targets to support overall Sourcing team savings targets; all material suppliers through SRM with actions tracked to closure.

  • Stakeholder engagement: build appropriate stakeholder relationships.

    Qualifications

    The Requirements:

  • Extensive experience in IT Procurement / Category Management (cloud services, software/SaaS, or cyber security). Strong record leading multi‑stage sourcing and complex negotiations.

  • Demonstrable a clear understanding of category planning capability (market analysis, segmentation, strategy, pipeline) and stakeholder management across business/technology and global time zones.

  • Ideally to have hands‑on with Ariba Sourcing & Contracts (or equivalent S2P), or a commitment to learn and work within Ariba, with a clear data stewardship mindset—comfortable owning metadata, templates, and reporting to drive decisions.

  • Solid understanding of supplier risk workflows and partnering with Legal, InfoSec, Privacy and BCM.

  • Strategic and analytical thinker who converts insight into pragmatic commercial actions; excellent written and verbal communication, with a positive and “can do” approach to their work.

    Nice to Have:

  • Working knowledge of hyperscale cloud and security ecosystems (e.g., AWS/Azure/GCP; SIEM/EDR/IAM tooling) and cloud commercials (committed spend, RIs/Savings Plans, unit‑based pricing) – willingness to learn the specifics is essential.

  • CIPS or equivalent; experience with FinOps or cloud cost optimization concepts; prior experience in global financial services.

    Equal Opportunity Employer:

    At WTW, we believe difference makes us stronger. We want our workforce to reflect the different and varied markets we operate in and to build a culture of inclusivity that makes colleagues feel welcome, valued and empowered to bring their whole selves to work every day. We are an equal opportunity employer committed to fostering an inclusive work environment throughout our organization. We embrace all types of diversity.

    At WTW, we trust you to know your work and the people, tools and environment you need to be successful. The majority of our colleagues work in a” hybrid” style, with a mix of remote, in-person and in-office interactions dependent on the needs of the team, role and clients. Our flexibility is rooted in trust and “hybrid” is not a one-size-fits-all solution.

    We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants

Related Jobs

View all jobs

Supplier Risk & Performance Lead

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Hiring Trends 2026: What to Watch Out For (For Job Seekers & Recruiters)

As we move into 2026, the cyber security jobs market in the UK is changing fast. Attackers are scaling up with automation & AI, cloud estates are more complex, & regulators are tightening expectations around resilience & data protection. At the same time, budgets are under pressure & some organisations are consolidating their tech teams. Despite all this, demand for cyber security skills remains strong. Skilled defenders, engineers & leaders are still hard to find, & the stakes are only getting higher. Whether you are a cyber security job seeker planning your next move, or a recruiter building security teams, understanding the key cyber security hiring trends for 2026 will help you make better decisions.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.