Insider Risk & Data Security Lead

Kingfisher; England; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

Kingfisher is seeking an Insider Risk Manager to protect data, systems and people from internal security risks. You will work with Information Security, Technology, Legal, Privacy and People teams to identify, assess and reduce insider risk as it relates to data loss, privileged access misuse and account compromise.

The role involves shaping and maturing the insider risk capability, implementing technical controls, and driving colleague awareness to support secure technology use across the

Qualifications

• Experience in information security, cyber risk, insider risk, data protection, security operations or similar risk-focused environment.
• Strong understanding of insider risk scenarios including data loss, policy violations and account compromise.
• Experience supporting investigations, incident response, risk assessments or security monitoring activities.

Responsibilities

• Develop and continuously improve Kingfisher's insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.

Skills

Insider risk

Data protection

Security operations

Risk assessments

Stakeholder management

Communication

Job description

Kingfisher is seeking an Insider Risk Manager to protect data, systems and people from internal security risks. You will work with Information Security, Technology, Legal, Privacy and People teams to identify, assess and reduce insider risk as it relates to data loss, privileged access misuse and account compromise.

The role involves shaping and maturing the insider risk capability, implementing technical controls, and driving colleague awareness to support secure technology use across the