Cyber Security Governance & Reporting Lead

Kingfisher plc; Southampton; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Kingfisher plc seeks a Cyber Security Governance Lead to define and oversee the security governance framework, ensuring executive oversight and clear risk reporting. You will coordinate governance forums, deliver actionable metrics, and align policies with regulatory requirements across the organisation.

You will partner with Security, Technology, Legal, Risk and Internal Audit to drive remediation governance and measure outcomes, contributing to overall security posture and strategic

Qualifications

• Experience developing governance, risk, compliance or assurance frameworks.
• Experience producing executive, Board and committee reporting.
• Ability to develop meaningful KPIs, KRIs, metrics and dashboards.
• Knowledge of cyber security governance, risk management, compliance and control frameworks (ISO 27001, NIST CSF).
• Strong analytical capability, with data interpretation and trend analysis.
• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions.

Responsibilities

• Define and maintain the Security Governance Framework with clear decision-making structures and executive oversight.
• Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee.
• Coordinate and improve security reporting, metrics, KRIs and KPIs to show security posture and progress.
• Analyse governance, risk, compliance and assurance data to identify trends and recommendations for senior stakeholders.
• Maintain the Security Policy and Standards Library, keeping policies current and aligned to regs.
• Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance and oversight of remediation activity.
• Track and report Security Strategy initiatives, risks, dependencies and outcomes.
• Measure the effectiveness of governance processes and reporting capabilities for continuous improvement.
• Manage the Policy Library and ensure content is up to date.

Skills

Governance frameworks

Executive reporting

KPIs and dashboards

ISO 27001 knowledge

NIST CSF knowledge

Data analysis

Stakeholder engagement

Tools

Power BI

Excel

GRC platforms

Job description

Kingfisher plc seeks a Cyber Security Governance Lead to define and oversee the security governance framework, ensuring executive oversight and clear risk reporting. You will coordinate governance forums, deliver actionable metrics, and align policies with regulatory requirements across the organisation.

You will partner with Security, Technology, Legal, Risk and Internal Audit to drive remediation governance and measure outcomes, contributing to overall security posture and strategic