GRC Governance and Reporting Manager

Kingfisher plc; Southampton; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Kingfisher plc seeks a Cyber Security Governance Lead to define and oversee the security governance framework, ensuring executive oversight and clear risk reporting. You will coordinate governance forums, deliver actionable metrics, and align policies with regulatory requirements across the organisation.

You will partner with Security, Technology, Legal, Risk and Internal Audit to drive remediation governance and measure outcomes, contributing to overall security posture and strategic

Qualifications

• Experience developing governance, risk, compliance or assurance frameworks.
• Experience producing executive, Board and committee reporting.
• Ability to develop meaningful KPIs, KRIs, metrics and dashboards.
• Knowledge of cyber security governance, risk management, compliance and control frameworks (ISO 27001, NIST CSF).
• Strong analytical capability, with data interpretation and trend analysis.
• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions.

Responsibilities

• Define and maintain the Security Governance Framework with clear decision-making structures and executive oversight.
• Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee.
• Coordinate and improve security reporting, metrics, KRIs and KPIs to show security posture and progress.
• Analyse governance, risk, compliance and assurance data to identify trends and recommendations for senior stakeholders.
• Maintain the Security Policy and Standards Library, keeping policies current and aligned to regs.
• Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance and oversight of remediation activity.
• Track and report Security Strategy initiatives, risks, dependencies and outcomes.
• Measure the effectiveness of governance processes and reporting capabilities for continuous improvement.
• Manage the Policy Library and ensure content is up to date.

Skills

Governance frameworks

Executive reporting

KPIs and dashboards

ISO 27001 knowledge

NIST CSF knowledge

Data analysis

Stakeholder engagement

Tools

Power BI

Excel

GRC platforms

Job description

We’re Kingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes, Better Lives, For everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information into actionable insight and help leaders make informed decisions that support Kingfisher’s security resilience and strategic priorities.

This role follows our 12 days a month hybrid policy, with your base location being either Southampton or Paddington in the UK or Krakow in Poland.

What's the job?

• Define and maintain the Security Governance Framework, with clear decision‑making structures and appropriate executive oversight.
• Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee.
• Coordinate and improve security reporting, metrics, key risk indicators and key performance indicators to show security posture, emerging risks, remediation progress and strategic performance.
• Analyse governance, risk, compliance and assurance data to identify trends, emerging issues and opportunities for improvement, then communicate clear recommendations to senior stakeholders.
• Maintain the Security Policy and Standards Library, keeping policies, standards and guidance current, aligned to regulatory requirements and embedded across the organisation.
• Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance, assurance and oversight of remediation activity over new or changing regu lations.
• Track and report Security Strategy initiatives, risks, dependencies and outcomes consistently across leadership and governance forums.
• Measure the effectiveness of governance processes, reporting capabilities and committee outcomes, driving continuous improvement in governance maturity.
• Mange the Policy Library and ensure that content is kept up to date.

What You'll Bring

• Experience developing, implementing and operating governance, risk, compliance or assurance frameworks in a technology or cyber security environment.
• Experience producing executive, Board and committee reporting, translating complex technical information into clear business insight.
• Ability to develop meaningful KPIs, KRIs, metrics and dashboards, using tools such as Power BI, Excel or GRC platforms.
• Knowledge of cyber security governance, risk management, compliance and control frameworks, including standards such as ISO 27001 and NIST CSF.
• Strong analytical capability, with experience interpreting data, identifying trends and recommending improvements that reduce risk and strengthen performance.
• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions.
• Attention to detail and highly organised.

How We Work

We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in‑person collaboration.

We value the perspectives new team members bring.

What We Offer

An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here. ( https://www.kingfisher.com/responsible-business/our-priorities/colleagues)

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits.

Diversity & Inclusion

Our customers come from all walks of life - and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.