Senior Procurement Specialist (6 months contract)

• Analyse technology and operating spend (e.g. cloud, SaaS, IT infrastructure, cybersecurity, digital marketing, BPO) to identify optimisation, consolidation, and cost‑saving opportunities.
• Support and lead RFx for key technology and outsourcing initiatives, including requirements consolidation, commercial and risk evaluation, and recommendation papers for management approval.
• Coordinate due diligence on critical and cloud service providers covering information security, data privacy, business continuity, and financial soundness, in line with HKMA outsourcing and cloud governance requirement.
• Work with Legal, Risk, Compliance, Third-party risk management team and contract owners to draft and negotiate contracts, service levels and exit provisions that address HKMA requirements on outsourcing, security controls, confidentiality and audit rights.
• Track supplier performance for critical and major vendors using KPIs and SLAs, escalate service issues, and support remediation plans and periodic vendor reviews.
• Maintain accurate vendor, contract and risk records for outsourced and cloud arrangements, ensuring approvals, risk assessments, and HKMA‑relevant documentation are properly filed and retrievable for audit.
• Collaborate with Finance and Operations to monitor actual vs. budgeted spend, capture savings and cost avoidance, and support product/feature business cases with procurement assumptions.
• Contribute to the design and continuous improvement of procurement and outsourcing governance, including policies, standard templates, playbooks and approval workflows.
• Support Head of SCM on daily and ad hoc requests

• Bachelors degree in Business, Supply Chain Management, Finance, Information Systems or related discipline
• 5–7 years of procurement / sourcing / vendor management experience, with at least 2–3 years in financial services, fintech or virtual banking, or in technology procurement for regulated institutions.
• Solid exposure to banking products, marketing, IT and cloud‑related sourcing (e.g. IaaS, PaaS, SaaS, managed services, cybersecurity tools, data platforms) and understanding of typical commercial and risk clauses for such contracts.
• Familiarity with Third-party Risk Management (Third-party security assessment, Data privacy assesments, outsourcing assessments, etc.) and how they translate into procurement, contracting and vendor management.
• Strong Excel and comfort with BI/reporting tools for spend and performance analysis.

Competencies and skills

• Strong analytical and problem‑solving skills, able to turn spend and risk data into clear, actionable sourcing and vendor strategies.
• Good understanding of technology concepts (cloud, APIs, cybersecurity basics, data residency) to communicate effectively with IT, Third-party Risk Management team and vendors.
• Excellent stakeholder management and communication skills; able to challenge and support product, tech and operations teams in a fast‑moving digital environment.
• High level of integrity and risk awareness, with a structured approach to documentation, audit‑trail, and regulatory compliance.
• Proficiency in written and spoken English.