Insider Risk Program Lead — Hybrid & Data Protection

Kingfisher; Southampton; Hybrid; GBP 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

Competitive benefits package

Zusammenfassung

Kingfisher is seeking an Insider Risk Manager to protect data, systems and people from internal threats. You’ll shape the insider risk programme, implement technical and people-based controls, and work with Information Security, Technology, Legal and People teams to reduce risk across the organisation.

You’ll lead awareness initiatives, monitor for data leakage and policy breaches, and report on trends to inform security improvements.

Qualifikationen

• Experience in information security, cyber risk, insider risk or data protection.
• Ability to analyse security alerts and trends to identify risks.
• Experience supporting investigations, incident response or risk assessments.
• Strong stakeholder management and communication skills.
• Knowledge of ISO 27001, NIST, CIS Controls or GDPR is beneficial.

Aufgaben

• Develop and improve insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios such as data leakage.
• Partner with security and business teams to strengthen controls and data protection.
• Deliver awareness and training to promote secure behaviours.
• Coordinate triage and escalation of insider risk events with governance.
• Produce reporting to identify trends and inform security improvements.

Kenntnisse

Information security

Cyber risk

Insider risk

Data protection

Security operations

Incident response

Stakeholder management

Communication skills

ISO 27001

NIST

GDPR

Jobbeschreibung

Kingfisher is seeking an Insider Risk Manager to protect data, systems and people from internal threats. You’ll shape the insider risk programme, implement technical and people-based controls, and work with Information Security, Technology, Legal and People teams to reduce risk across the organisation.

You’ll lead awareness initiatives, monitor for data leakage and policy breaches, and report on trends to inform security improvements.