Insider Risk Lead: Data & Security Champion (Hybrid)

Kingfisher plc; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Competitive benefits package

Hybrid work model

Job summary

Kingfisher plc is seeking an Insider Risk Manager to protect our data, systems and people from internal security risks across Information Security, Technology, Legal, Privacy and People teams. You will develop and mature insider risk capabilities, drive technical controls and colleague awareness, and deliver reporting to steer security improvements. Join a diverse, hybrid-working environment that supports Better Homes.

Better Lives. For Everyone.

Qualifications

• Experience in information security, cyber risk, insider risk, data protection, or security operations.
• Knowledge of insider risk scenarios, data loss, privileged access misuse, policy violations and account compromise.
• Experience supporting investigations, incident response, risk assessments or security monitoring.
• Ability to analyse data, security alerts and behavioural trends to identify risks and gaps.
• Strong stakeholder management and communication skills to explain security topics to varied audiences.
• Knowledge of ISO 27001, NIST, CIS Controls, GDPR or equivalent would be beneficial.

Responsibilities

• Develop and continuously improve Kingfisher's insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios, including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.

Skills

Information security

Cyber risk

Insider risk

Data protection

Security operations

Job description

Kingfisher plc is seeking an Insider Risk Manager to protect our data, systems and people from internal security risks across Information Security, Technology, Legal, Privacy and People teams. You will develop and mature insider risk capabilities, drive technical controls and colleague awareness, and deliver reporting to steer security improvements. Join a diverse, hybrid-working environment that supports Better Homes.

Better Lives. For Everyone.