Insider Risk Manager

Kingfisher plc; United Kingdom; Hybride; GBP 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Private Health Care

Pension Scheme

25 Days Holiday

Staff Discount

Share Incentive Plan

Life Assurance

Bonus

Share Save

Résumé du poste

Kingfisher plc is seeking an Insider Risk Manager to protect data, systems and people from internal security risks across Information Security, Technology, Legal, Privacy and People teams. You’ll identify, assess and reduce insider risk, including data leakage and compromised accounts, enabling safer use of technology across the organisation.

Join a team shaping Kingfisher's insider risk capability and delivering technical controls, colleague awareness and meaningful reporting to drive security

Qualifications

• Experience in information security, cyber risk or insider risk environments.
• Ability to analyse data and security trends to identify risks.
• Strong stakeholder management and communication skills.
• Familiarity with ISO 27001, NIST, GDPR or equivalent.

Responsabilités

• Develop and mature insider risk programme across people, process, data and technology controls.
• Identify and mitigate insider risk scenarios including data leakage and privileged access misuse.
• Collaborate with Information Security, Technology and business teams to strengthen controls.
• Deliver awareness and training to promote secure behaviours.
• Coordinate triage, investigation and escalation of insider risk events.
• Produce reporting to identify trends and inform security improvements.
• Support phishing simulations and security initiatives.

Connaissances

Information security

Cyber risk

Insider risk

Data protection

Security monitoring

Incident response

Outils

ISO 27001

NIST

GDPR

Description du poste

We’reKingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctasto life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

As our Insider Risk Manager, you'll play a critical role in protecting Kingfisher's data, systems and people from internal security risks. Working across Information Security, Technology, Legal, Privacy and People teams, you'll help identify, assess and reduce risks relating to inappropriate access, data loss, misuse of privileged access and compromised accounts.

This is an opportunity to shape and mature Kingfisher's insider risk capability, driving both technical controls and colleague awareness to support the safe and responsible use of technology across the organisation. In doing so, you'll help protect our customers, colleagues and business while supporting our purpose of Better Homes, Better Lives, For Everyone.

Overview

We’reKingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctasto life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

As our Insider Risk Manager, you'll play a critical role in protecting Kingfisher's data, systems and people from internal security risks. Working across Information Security, Technology, Legal, Privacy and People teams, you’ll help identify, assess and reduce risks relating to inappropriate access, data loss, misuse of privileged access and compromised accounts.

This is an opportunity to shape and mature Kingfisher's insider risk capability, driving both technical controls and colleague awareness to support the safe and responsible use of technology across the organisation. In doing so, you’ll help protect our customers, colleagues and business while supporting our purpose of Better Homes, Better Lives

• Develop and continuously improve Kingfisher's insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios, including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.

What's the job

• Develop and continuously improve Kingfisher's insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios, including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.

• Experience within information security, cyber risk, insider risk, data protection, security operations or a similar risk-focused environment.
• Strong understanding of insider risk scenarios, including data loss, privileged access misuse, policy violations and account compromise.
• Experience supporting investigations, incident response, risk assessments or security monitoring activities.
• Ability to analyse data, security alerts and behavioural trends to identify risks and control gaps.
• Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non-technical audiences.
• Knowledge of frameworks and standards such as ISO 27001, NIST, CIS Controls, GDPR or equivalent would be beneficial.

How We Work

We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

We value the perspectives new team members bring and encourage you to apply - even if youdon’tmeet 100% of the requirements.

What We Offer

An inclusive environment where your potential is limited only by your imagination. We encouragenew ideas, support experimentation, and strive to create a workplace where everyone can be their best self.Find out more about Diversity & Inclusion at Kingfisher here.

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits.

Diversity & Inclusion

Our customers come from all walks of life-and so do we.We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.

What we offer.

Benefits

• Private Health Care: Opportunity to receive up to family level cover with AXA. Join within three months of starting or at annual renewal in April. (This benefit is subject to Benefit In Kind taxation).
• Kingfisher Pension Scheme: Immediate eligibility through auto-enrolment. Contribute 8% to receive a max 14% from the Company.
• 25 Days' Holiday: 25 days per annum plus bank holidays as stated in your contract (pro rated for part time colleagues).
• Staff Discount: 20% discount at B&Q and Screwfix. Eligible after 3 months service.
• Kingfisher Share Incentive Plan (SIP): Share ownership in a tax efficient way. Save between £10 to £150 per month. Join at any time once three months service is reached.
• Life Assurance: x4 Salary plus benefit equal to value of your Retirement Account (if an active member of KPS-MP) or x1 Salary if not active member.
• Bonus: Competitive bonus scheme that aligns to work level of role.
• Kingfisher Share Save: Save with the option to buy Kingfisher plc shares at the end of a 3 or 5 year period. Offered annually. Three months service is required at the annual invitation date, normally in October.

Our Behaviours

At Kingfisher, being all-in means contributing fully to our ambitions, supporting one another, and helping create a culture where we succeed together.

Continuously curious. Listen to understand. Always improving.

We are brave

Aim high. Act with courage. Move with pace.

We win together

Lead with customer. Commit to deliver. Help each other win.

Our employees know us best. We wouldn’t be Kingfisher without them. So, we want to share what they think with you.

Development and progression is a high priority at Kingfisher, I’ve always felt well supported.

I’m proud to work for Kingfisher, I’ve had great opportunities that have enabled me to contribute to an exciting forward-thinking company.

Training & Development

Conversations with senior leaders

Resources and tools to help you grow

Initiatives that measure development

Find your path

Sharing is caring

Reach for the stars

Why Kingfisher

We’re an innovative, international retailer on a journey to actively make a difference. Always striving to take that next step. You can be part of the difference. From bottom to top you can progress in a collaborative environment. So, why not Kingfisher?