• Assess current P2P processes and identify transformation opportunities. • Design future-state P2P operating models, policies, and controls. • Lead process improvements across Requisition-to-PO, Invoice-to-Pay, and Vendor Management. • Drive automation and digital transformation initiatives (Coupa, Oracle, AI/RPA). • Analyze P2P KPIs, process bottlenecks, and value-leakage opportunities. • Support stakeholder management, change management, and user adoption. • Develop business cases, transformation roadmaps, and implementation plans. • Ensure compliance with procurement policies, SOX controls, and governance requirements. • Collaborate with sourcing, procurement, AP, finance, and technology teams. • Track benefits realization, cost savings, and operational improvements.

Role Description We're looking for a Web Security Consultant who can help us build secure websites from the ground up. Security isn't something that should be addressed at the end of a project—it's something that should be considered throughout the entire development lifecycle. We're looking for someone who can help us establish best practices, identify potential risks before they become problems, and create repeatable standards that every project can follow. In this role, you'll work closely with our development team to review websites and web applications, ensure they meet current security standards, and build practical processes that improve consistency across every project. Our web environment is primarily built on WordPress, alongside other modern web technologies. Because of this, strong experience securing WordPress websites, plugins, themes, hosting environments, and deployment workflows is a significant advantage. Beyond identifying vulnerabilities, you'll help create documentation, checklists, and security guidelines that become part of our standard development workflow. Responsibilities - Reviewing websites and web applications to ensure they follow current web security best practices. - Conducting security reviews for WordPress websites and other web applications, identifying platform-specific risks and recommending practical remediation strategies. - Identifying security vulnerabilities and recommending practical remediation strategies. - Performing security reviews throughout the development lifecycle rather than only before launch. - Developing a standardized security checklist that becomes part of every new website project. - Creating internal documentation and security best practices for developers and project teams. - Advising developers on secure coding practices and common web application vulnerabilities. - Helping establish secure deployment, hosting, authentication, and access management standards. - Recommending security best practices for WordPress core updates, plugin management, user permissions, backups, and hosting configurations. - Working with project managers and technical teams to ensure security requirements are incorporated into project planning. - Staying current on evolving security threats, frameworks, and industry standards. - Supporting periodic security audits and continuous improvements across existing client websites. Qualifications - Web application security principles and secure development practices. - Familiarity with the OWASP Top 10 and common web application vulnerabilities. - Security reviews for modern web applications and websites. - Strong experience securing WordPress websites, including themes, plugins, user roles, hosting environments, and update strategies. - Authentication, authorization, session management, and access control best practices. - HTTPS, SSL/TLS, HTTP security headers, and Content Security Policy (CSP). - Security testing tools and vulnerability assessment methodologies. - Experience reviewing websites built with modern CMS platforms and JavaScript frameworks. - Strong documentation skills and experience developing internal standards or technical playbooks. - Excellent communication skills and the ability to explain technical concepts to both technical and non-technical stakeholders. What Success Looks Like - Every new website follows a consistent security review process before launch. - Developers have clear, practical security standards they can apply throughout development. - WordPress projects follow consistent security standards for deployment, maintenance, and ongoing updates. - Common vulnerabilities are identified and addressed early in the project lifecycle. - Internal security documentation and checklists become part of the agency's standard workflow. - Clients can trust that their websites are built according to current security best practices. - The studio continuously improves its security posture as technologies and threats evolve. Bonus Points - Penetration testing or vulnerability assessments. - Cloud hosting platforms such as AWS, Azure, or Google Cloud. - Web application firewalls (WAF) and CDN security. - DevSecOps practices and CI/CD security integration. - Compliance frameworks such as SOC 2, ISO 27001, GDPR, or PCI DSS. - Deep expertise in WordPress security, including hardening, plugin vulnerability management, hosting security, and performance/security best practices. - Shopify, Webflow, headless CMS, or modern JavaScript framework security. - Security automation and monitoring tools. Why Join Invisible Colors? At Invisible Colors, we build digital experiences that clients trust. Most of our web projects are built on WordPress, making security expertise in that ecosystem especially valuable. Security is a critical part of delivering quality work—not an afterthought. You'll help establish the standards and processes that shape how every website is built, giving our developers the tools and guidance they need to deliver secure, reliable solutions from day one. If you're passionate about making security practical, scalable, and integrated into modern web development, we'd love to hear from you.

• Provide a dedicated, consistently high level of service to all clients tailored to their individual requirements with a desire to always exceed client expectation. • Effectively manage your workload to meet all deadlines as required, either set by the client or within R&M • Ability and willingness to service different client industry sectors across the wider business • Demonstrate innovative thinking and provide a consultative approach • To be proficient in R&M and Navan Technology, sharing knowledge with the client to ensure an all-encompassing service • To be responsible for the delivery of all air, rail, car rental, ferry, black car and charter reservations and to advise clients on best practice utilising R&M and Navan technology • Manage your own full client portfolio to the highest R&M and Navan standard, demonstrating extraordinary customer service to your wider team • Pro-actively build meaningful and long-lasting relationships both internally and externally • Always exceed client’s expectation • Identify and implement opportunity to add value to each booking • Ability to apply a variety of fare types and ticketing methods, whilst maintaining an up-to-date knowledge of industry innovations (e.g., airline direct connect) • Working with IFD (International Fares Desk) to proactively identify cross market and local inventory differences • Procure the best hotel rates for clients utilising GDS and non GDS channels, as well as leveraging supplier relationships to gain the best result • Monitor all bookings for further saving opportunities up until completion of the trip • Utilise detailed understanding of the client policy to drive compliance whilst maximising opportunity to enhance the traveller experience • To oversee the client experience by utilising mixed mode booking tools and to provide 1st line support for both offline/online bookings • Demonstrate proactive thinking when providing travel solutions • Able to provide cost effective solutions across all aspects of travel • To always comply with the client policies and guidelines • Achieve SLAs for all accounts • Regular interaction with overseas colleagues • Apply Quality Control procedures and processes in line with company and GREC requirements.

• Function as a technology implementation coach • Provide health center clinicians and leaders with strategies and tools • Optimize clinical practice through leveraging EHR functionality and data • Redefine clinical and operational workflows • Collaborate with clinicians and leadership to assess current-state workflows • Support deployment of digital health tools • Manage multiple projects related to clinical improvement simultaneously