MANAGER , PROCUREMENT & COMPLIANCE
CITAGLOBAL TELECOMMUNICATION SDN BHD
Job Purpose:
The Manager – Procurement & Compliance is responsible for establishing and strengthening procurement governance, regulatory compliance, enterprise risk management and internal control practices within CG Telco. The role ensures procurement activities are transparent, ethical and efficient, aligned with Citaglobal Berhad’s Group Procurement Policy, approved Limits of Authority (LOA), applicable legislation and corporate governance standards. The role also leads risk assessments, compliance monitoring and Anti-Bribery and Corruption (ABC) initiatives.
Key Responsibilities:
1 .Procurement Governance & SOP Development
- Develop, implement, review and continuously improve CG Telco Procurement SOPs in line with Citaglobal Berhad’s Group Procurement Policy and governance framework.
- Establish end-to-end procedures for requisitions, sourcing, quotations and tenders, evaluation, vendor selection, purchase orders, contract awards and records.
- Ensure compliance with LOA, approval matrices, financial thresholds and required procurement documentation.
- Maintain procurement checklists, forms, supplier evaluation criteria and approval evidence.
- Oversee single-source justifications, procurement waivers, exceptions and relevant approvals.
- Coordinate with Group Procurement, Finance, Legal and Compliance; identify control gaps and drive corrective actions.
- Drive alignment of procurement SOPs and governance requirements with ERP-enabled processes, workflow automation, system controls and audit-ready reporting.
2. Compliance & Corporate Governance
- Establish and maintain compliance governance aligned with Group policies and applicable legal and regulatory obligations.
- Monitor relevant requirements including the Malaysian Anti-Corruption Commission Act 2009, Companies Act 2016 and applicable Bursa Malaysia Listing Requirements.
- Maintain a compliance obligations register and coordinate periodic assessments and management reporting.
- Ensure applicable related-party transaction (RPT) declarations, reviews, escalation and approvals are followed.
- Review policies and processes for control weaknesses; track preventive and corrective measures.
- Provide governance advice and coordinate with Group Legal, Compliance and Internal Audit.
3. Enterprise Risk Management & Assessments
- Coordinate risk management requirements in line with the Group ERM framework and ISO 31000 principles.
- Facilitate risk assessments across departments, projects, procurement, vendors and operational activities.
- Maintain the Risk Register, documenting likelihood, impact, controls, owners and mitigation plans.
- Coordinate Business Continuity Risk Assessments (BCRA) and operational resilience reviews with owners.
- Assess operational, financial, compliance and third-party risks.
- Track mitigation progress, overdue actions and key risk indicators; provide reporting to Management and Group Risk Management.
4. Anti-Bribery & Corruption (ABC)
- Coordinate implementation and monitoring of Group ABC requirements and applicable Malaysian anti-corruption legislation.
- Support Section 17A compliance and applicable adequate-procedures principles.
- Conduct or coordinate ABC risk assessments, particularly for procurement and third-party engagement.
- Monitor employee ABC declarations, conflict-of-interest disclosures, gifts and hospitality requirements and due diligence.
- Coordinate ABC training and awareness; identify red flags and escalate concerns through approved channels.
- Maintain records of ABC controls and liaise with Group Integrity, Legal, Compliance and Internal Audit.
5. Vendor Governance & Third-Party Risk
- Maintain vendor registration, due diligence, screening, evaluation, appointment and periodic performance reviews.
- Assess supplier financial, delivery, continuity, information security and regulatory risks.
- Monitor supplier contract obligations and maintain appropriate vendor and audit records.
6. Audit, Internal Controls & Reporting
- Coordinate internal and external audits covering procurement, governance, compliance and risk.
- Maintain complete and traceable records; track audit findings and management action closure.
- Prepare periodic compliance, procurement, ABC and risk reports for management and relevant Group functions.
7. ERP Alignment, Integration & Process Digitisation
- Align procurement SOPs, approval workflows, vendor governance and compliance controls with CG Telco’s ERP systems and the Group’s digital transformation roadmap.
- Collaborate with IT, Finance, Procurement, system owners and ERP implementation partners to translate approved procurement policies and Limits of Authority into system configurations, roles and workflows.
- Support integration of purchase requisitions, purchase orders, vendor master data, contract records, goods/services receipt, invoice matching and financial reporting, including relevant Odoo or other approved ERP modules.
- Define business requirements and participate in ERP process mapping, user acceptance testing, data migration validation, user training and change management for procurement and compliance functions.
- Ensure appropriate ERP controls, including segregation of duties, approval limits, audit trails, exception management, access permissions and data integrity.
- Monitor data quality and ERP-generated dashboards to improve procurement transparency, compliance tracking, vendor performance, risk reporting and management decision-making.
8.Key Deliverables & Performance Indicators:
- Procurement SOP- SOP approved, implemented and annually reviewed against Group Procurement Policy
- Procurement compliance - Target 100% compliance with applicable LOA, approvals and documentation
- Risk register -Updated at least quarterly with coordinated risk assessments
- Risk mitigation -At least 90% of actions completed within approved timelines
- ABC compliance -100% employee ABC declarations and acknowledgements
- Compliance obligations -Register maintained and periodic reviews conducted
- Vendor governance - Risk-based due diligence for relevant vendors
- Audit findings - 100% assigned owners and tracked to closure
- Reporting - Timely monthly / quarterly risk and compliance updates
- ERP integration & digitization - Approved procurement workflows and control requirements mapped to ERP; implementation, testing and improvement milestones tracked with IT and Finance.
Qualifications & Experience:
- Bachelor’s degree in Business Administration, Procurement, Supply Chain, Risk Management, Finance, Law or related discipline.
- Relevant credentials such as CIPS, ISO 31000 or ISO 37001 are advantageous.
- Minimum 5–8 years’ relevant experience in procurement governance, compliance, risk management or corporate governance.
- Demonstrated experience developing SOPs, conducting risk assessments, maintaining risk registers and supporting audit and ABC obligations.
- Telecommunications, technology, infrastructure or public-listed company experience is advantageous.
Required Competencies:
- Procurement governance, sourcing procedures, internal controls and LOA compliance.
- ABC governance, corporate compliance and enterprise risk management.
- Analytical assessment, policy drafting, documentation and management reporting.
- Stakeholder coordination, sound judgment, integrity, confidentiality and accountability.
- Proficiency in Microsoft Office and experience with ERP/procurement platforms (including Odoo or equivalent), process mapping, workflow configuration and data-driven reporting.
Key Working Relationships:
Internal: CG Telco Management and department heads; Group Procurement; Group Legal & Compliance; Finance; Risk Management; Internal Audit & Risk Management (IARM); Human Resources; Operations, Projects, Technology and Commercial teams.
External: Vendors, suppliers, contractors, auditors, advisers and relevant regulatory authorities.
Expected Outcomes:
A controlled, transparent and accountable procurement and compliance environment, supported by aligned SOPs, timely risk assessments and mitigation, effective ABC compliance, strong vendor oversight, documented audit remediation and decision-ready governance reporting. Procurement governance processes are aligned and integrated with the approved ERP ecosystem to support efficient end-to-end workflows, reliable information, appropriate access controls and auditable decision-making.