📍 Basel, Switzerland  · 

Monish
Pahwa

Third-Party Risk & AI Governance · Procurement Leader × Data Science & AI

ICT Procurement & Third-Party Risk professional with 15 years of global procurement experience in regulated Swiss financial services — assessing vendor risk, negotiating NDA/DPA/TOMs and ISO clause requirements, and conducting due diligence against DORA compliance and nDSG/GDPR obligations. I also bring hands-on Data Science & AI expertise: I design and deploy AI systems myself — NLP-driven spend management, RAG-based contract intelligence, and privacy-preserving local LLMs — which gives me a practitioner's view of AI vendor and model risk, not just a buyer's. Delivered 15% cost reduction and reduced procurement lead times by 15–20% through automation and analytics-driven sourcing.

15+
Years in ICT Procurement
15%
Cost reduction delivered
20%
Cycle time improvement
6+
AI tools built & deployed

Procurement domain expertise meets production data science — not theoretical, built and deployed in regulated environments.

⚡ Procurement
Strategic Sourcing Category Management Supplier Negotiation Contract Management Spend Analytics Post-Merger Integration
🛡️ Third-Party Risk & AI Governance
Vendor Risk Assessment Third-Party Due Diligence NDA / DPA / TOMs DORA Compliance nDSG / GDPR ISO 27001 Supplier Clauses Change of Control AI Vendor Risk
🧠 Data Science & AI
Python R SQL DuckDB NLP TF-IDF UMAP HDBSCAN RAG Pipelines Vector Databases LLMs Shiny
☁️ Cloud & Infrastructure
Docker Cloud Deployment AWS Azure DigitalOcean GitHub Linux
01 —

Profile

I am a Procurement Leader with Data Science & AI expertise with 15 years of global procurement experience across the Swiss regulated sector. I combine deep category expertise — ICT, Professional Services, Indirects — with hands-on AI and data science capabilities that most procurement professionals simply don't have.

I have envisioned, designed and deployed AI-based procurement tools using Python and R, including NLP-driven spend management platforms, contract intelligence pipelines using RAG and vector databases, and M&A spend-intelligence tools. I am proficient in LLMs, vector DBs, and cloud platforms including AWS and Azure.

A core part of that work is third-party risk management: screening and negotiating vendor contracts — NDA, DPA, TOMs, ISO clause requirements, change-of-control provisions — with due diligence against DORA compliance and nDSG/GDPR obligations before a supplier is onboarded. Because I also build the AI systems my organisation uses, I bring that same risk lens to AI governance: evaluating AI vendors and models on data lineage, explainability and lock-in risk from the inside, not just the outside.

Whether the role is Third-Party Risk / AI Governance Lead or senior ICT Procurement Manager, I bring a rare combination: the strategic credibility of 15 years in procurement and risk, and the technical depth to build and interrogate the AI tools that increasingly sit inside the third-party stack. Currently completing a Bachelor's in Data Science & AI at FHNW.

Areas of Expertise

Third-Party Risk Management AI Governance ICT Procurement Vendor Due Diligence DORA Compliance / nDSG / GDPR Global Sourcing Category Management NLP & LLMs RAG Pipelines Python · R AWS · Azure Spend Analytics Contract Intelligence Supplier Negotiation Post-Merger Integration

Languages

English · French · German

Location

Switzerland · German national with EU C permit

02 —

Experience

Jan 2024 — Present
Current Role
ICT Procurement Strategy Manager
HELVETIA INSURANCE GROUP · Basel Metropolitan Area
  • Developed and implemented ICT procurement strategies, achieving a 15% cost reduction across key categories.
  • Negotiated supplier contracts to secure favourable terms and enhanced service levels.
  • Led third-party risk assessments for ICT vendors — NDA, DPA, TOMs and ISO clause review — with due diligence against DORA compliance and nDSG/GDPR requirements as part of post-merger vendor consolidation.
  • Coordinated with IT and finance teams to align procurement strategies with organisational needs.
  • Analysed market trends to inform procurement decisions and contribute to strategic planning.
  • Built and deployed AI-powered procurement analytics tools adopted across the procurement function.
ICT Procurement Post-Merger Integration AI Tooling Supplier Strategy DORA Compliance nDSG/GDPR
Jan 2023 — Dec 2023
Category Management
Procurement Category Manager
EAO · Switzerland
  • Led supplier negotiations, achieving a 10% cost reduction in key categories through strategic contract terms.
  • Streamlined procurement processes, reducing lead time by 15% and enhancing operational efficiency.
  • Developed category strategies that improved supply chain performance and aligned with business objectives.
  • Conducted market analysis to identify trends, informing purchasing decisions and optimising sourcing outcomes.
Category Strategy Supplier Negotiation Market Analysis Process Improvement
Jan 2018 — Jan 2022
Global Role
Global Procurement Manager — Indirects
CERDIA (A Blackstone Company) · Basel, Switzerland
  • Managed global procurement for indirect categories, focusing on strategic sourcing and supplier relationship management.
  • Achieved a 15% reduction in costs through strategic sourcing projects across key categories.
  • Implemented process improvements that reduced procurement cycle time by 20%.
  • Negotiated favourable contract terms fostering long-term supplier partnerships.
  • Coordinated with cross-functional and cross-border teams to maintain supply chain continuity during market disruptions.
Global Sourcing Indirect Procurement Supplier Relations Cross-border Teams Cost Reduction
03 —

Third-Party Risk × AI Governance

Third-party risk is the backbone of my procurement work. Before any ICT vendor is onboarded, I lead the risk screening: reviewing NDA, DPA and Technical & Organisational Measures (TOMs), checking ISO 27001 supplier clauses and change-of-control provisions, and conducting due diligence against DORA compliance and nDSG/GDPR data-protection obligations. In the post-merger integration between Helvetia and Baloise, this meant re-screening a large ICT vendor portfolio against a harmonised risk framework as contracts were consolidated.

AI governance is the natural extension of that work. As AI vendors and AI-enabled tools enter the same third-party stack, the same questions apply — data lineage, sub-processor exposure, explainability, model change control, lock-in — just with new failure modes. What sets my angle apart is that I don't only assess AI vendors from the buyer side: I design, build and deploy AI systems myself, mostly as local, privacy-preserving LLM pipelines specifically because of nDSG and DORA compliance constraints. That means I evaluate AI vendor risk with a practitioner's understanding of where the risk actually lives in the stack — not just what a vendor's questionnaire answers claim.

I'm actively targeting roles at the intersection of Third-Party Risk Management and AI Governance in Swiss regulated financial services, where procurement risk discipline and hands-on AI fluency are both needed and rarely found in the same person.

TPRM in Practice

Vendor Risk Screening NDA / DPA / TOMs ISO 27001 Clauses Change of Control DORA Compliance nDSG / GDPR

AI Governance Angle

AI Vendor Risk Model Risk Awareness Data Lineage On-Prem / Privacy-Preserving AI Explainability

Supporting Tools I've Built

Contract RAG pipeline (nDSG/DORA clause search) · Change of Control detector · Supplier News & Risk Monitor

04 —

AI Projects

01
Spend Analysis Platform
End-to-end supplier consolidation tool processing large-scale invoice data. Fuzzy matching, clustering, and deduplication algorithms. Deployed on cloud infrastructure in a regulated environment.
⚡ No visibility into supplier landscape → Built NLP clustering platform → Enabled data-driven consolidation decisions at scale
R · Shiny · DuckDB · Docker · Cloud
02
Contract Intelligence Pipeline
Local-first RAG pipeline for large-scale contract analysis. Vector embeddings with hybrid semantic search and conversational Q&A. Zero data leaves the corporate perimeter — built for regulated environments.
⚡ Hundreds of PDFs unqueryable → Built local RAG pipeline → Team queries entire contract portfolio in natural language
DuckDB · Ollama · Vector Search · BM25 · TPRM
03
Category Intelligence App
Supplier matching and deduplication across multi-entity invoice datasets. Built for nDSG/GDPR compliance with session-based data handling. Fully Dockerized and deployed in production.
⚡ Duplicate suppliers across datasets → Built TF-IDF matching engine → Identified and consolidated suppliers across complex entity structures
R · Shiny · TF-IDF · Docker · nDSG
04
Contract Risk Analyzer
OCR pipeline with automated clause extraction across multiple risk categories. Change-of-control detection, severity classification, and structured report generation using a local LLM for privacy-preserving analysis.
⚡ Manual contract review taking weeks → Built OCR + LLM risk analyzer → Critical clauses identified and scored in hours
R · OCR · Local LLM · Structured Output · TPRM
05
Supplier News Monitor
Real-time supplier risk monitoring combining web search APIs and local LLM summarization. Delivers automated briefings on supplier developments relevant to active contracts and categories.
⚡ No supplier news monitoring → Built automated AI briefing tool → Team stays ahead of supplier risk without manual effort
R · Shiny · Web Search API · Ollama · TPRM
06
Negotiation Brief Generator
Automated negotiation preparation tool generating structured briefing documents from contract and spend data. Significantly reduces manual preparation time for strategic sourcing events.
⚡ Negotiation prep taking days → Built AI brief generator → Structured briefing documents produced in minutes
R · LLM · DuckDB · Word Output
05 —

Education & Certifications

2024 — 2028
BSc Data Science & Artificial Intelligence
FHNW — University of Applied Sciences Northwestern Switzerland
Present
MBA — Krannert School of Management
Purdue University
2021 — 2022
Certificate in Leading Innovation in Digital Procurement
IMD Business School
2022
Management of Biotech, Medtech & Pharma Ventures
EPFL — École Polytechnique Fédérale de Lausanne
2022 — 2023
Data Science, ML, Power BI, SQL & AI Certifications
DataCamp and Pluralsight — 25+ certificates
06 — CONTACT

Let's build something smarter.

Open to Third-Party Risk Management, AI Governance, senior ICT procurement, and procurement analytics roles in Switzerland. Available for discussions.

Send a message