Insider Risk Manager

Kingfisher; Southampton; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Competitive benefits package

Job summary

Kingfisher is seeking an Insider Risk Manager to protect data, systems and people from internal threats. You’ll shape the insider risk programme, implement technical and people-based controls, and work with Information Security, Technology, Legal and People teams to reduce risk across the organisation.

You’ll lead awareness initiatives, monitor for data leakage and policy breaches, and report on trends to inform security improvements.

Qualifications

• Experience in information security, cyber risk, insider risk or data protection.
• Ability to analyse security alerts and trends to identify risks.
• Experience supporting investigations, incident response or risk assessments.
• Strong stakeholder management and communication skills.
• Knowledge of ISO 27001, NIST, CIS Controls or GDPR is beneficial.

Responsibilities

• Develop and improve insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios such as data leakage.
• Partner with security and business teams to strengthen controls and data protection.
• Deliver awareness and training to promote secure behaviours.
• Coordinate triage and escalation of insider risk events with governance.
• Produce reporting to identify trends and inform security improvements.

Skills

Information security

Cyber risk

Insider risk

Data protection

Security operations

Incident response

Stakeholder management

Communication skills

ISO 27001

NIST

GDPR

Job description

Overview

We’reKingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctasto life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

As our Insider Risk Manager, you'll play a critical role in protecting Kingfisher's data, systems and people from internal security risks. Working across Information Security, Technology, Legal, Privacy and People teams, you'll help identify, assess and reduce risks relating to inappropriate access, data loss, misuse of privileged access and compromised accounts.

This is an opportunity to shape and mature Kingfisher's insider risk capability, driving both technical controls and colleague awareness to support the safe and responsible use of technology across the organisation. In doing so, you'll help protect our customers, colleagues and business while supporting our purpose of Better Homes, Better Lives, For Everyone.

What's the job?

• Develop and continuously improve Kingfisher’s insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios, including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.

What you'll bring

• Experience within information security, cyber risk, insider risk, data protection, security operations or a similar risk-focused environment.
• Strong understanding of insider risk scenarios, including data loss, privileged access misuse, policy violations and account compromise.
• Experience supporting investigations, incident response, risk assessments or security monitoring activities.
• Ability to analyse data, security alerts and behavioural trends to identify risks and control gaps.
• Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non-technical audiences.
• Knowledge of frameworks and standards such as ISO 27001, NIST, CIS Controls, GDPR or equivalent would be beneficial.

How We WorkWe believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

We value the perspectives new team members bring and encourage you to apply - even if youdon’tmeet 100% of the requirements.

What We OfferAn inclusive environment where your potential is limited only by your imagination. We encouragenew ideas, support experimentation, and strive to create a workplace where everyone can be their best self.Find out more about Diversity & Inclusion at Kingfisherhere.

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career.Scroll down below to find out more aboutour benefits.

Diversity & InclusionOur customers come from allwalks of life- and so do we.We’recommitted to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.

#LI-JK1