Most mid-sized companies reach a point where purchasing has outgrown the habits that worked at half the size. Spend is spread across departments. Contracts sit in inboxes. A supplier fails an audit or a cyber questionnaire, and nobody can say who approved them. That is the point where procurement governance stops being optional.
Governance is the set of rules, controls and reporting that tells you whether buying is happening the way the business intended. It is not the same as sourcing, and it needs a different kind of person.
Who needs it, and how formal it should be
The depth should match the risk, not the headcount alone. A 60-person distributor can run light controls. A 400-person company cannot.
Signs you need a named owner:
- Spend is going through channels that procurement never sees
- Contracts are signed by whoever has the authority that week, with inconsistent terms
- You operate in more than one province, state or country, or you are publicly traded
- You work in a regulated sector such as financial services, food, healthcare or energy
- Your board, lender or insurer has started asking about third-party risk
- Suppliers have access to your systems or data
Nonprofits and foundations with large vendor bases belong on that list too.
What the work covers
A governance function usually owns four things:
- Policy: spend authority, approval thresholds, when competitive bids are required
- Contract compliance: whether negotiated terms are being used and honoured
- Supplier oversight: onboarding checks, risk tiers, periodic reviews, and what share of spend runs through approved suppliers
- Reporting: the measures that let executives and the board see risk and performance without asking for a special report
The value case is wider than savings. Good governance avoids losses that never show up as a line item: the penalty, the disrupted supply, the data incident. It also gives leaders better data to decide whether to proceed with a deal.
Why it fails
The usual problem is not design. It is adoption. Policies get written, then go stale. New managers receive a budget and no briefing. Senior leaders say they care but approve exceptions.
Three habits keep it alive:
- Leadership applies the rules to itself, visibly
- Policies are reviewed on a schedule, so staff can see they are current
- Anyone who gets budget authority or manages a third party is trained on their obligations at the start
The business will always want speed. The owner's job is to show that moving fast with protections in place is what keeps a company running when something goes wrong.
Who to hire
This is a hard role to fill because the title does not excite many people. The right candidate likes building structure and measuring whether it holds. The wrong one wants to negotiate deals all day.
Strong backgrounds to look at:
- Vendor or supplier relationship managers, who already work inside contracts and know where they break
- Procurement analysts who want to use data for recommendations rather than pure accounting
- Risk, compliance or internal audit staff who understand procurement well enough to translate obligations into daily practice
At the leadership level, look for end-to-end procurement knowledge, comfort with regulation, and clear communication. This person will spend as much time persuading finance, legal, IT and operations as writing policy. A candidate who cannot hold a room of sceptical department heads will struggle regardless of technical skill.
Set the scope before you post the job. A governance lead who is also expected to run daily sourcing will do neither well. Decide whether you need a builder who creates the framework from nothing, or an operator who tightens one that exists. Those are different hires with different pay expectations.
Starting small
You do not need a department. One experienced person with executive backing can set the policy, map the supplier base by risk, and produce a first quarterly report. A contract resource can cover a defined build if you only need the framework stood up and handed over.
What to do next
List your top 20 suppliers by spend and check three things: is there a current contract, was risk reviewed, and who owns the relationship. If you cannot answer quickly, you have your business case. A Traverse recruiter can help you define the role and find people who have built this before.