IT Compliance Lead

Kingfisher; Southampton; On-site; GBP 45,000 - 65,000; Full time

Job summary

A leading home improvement company is seeking a Compliance Lead to manage IT compliance frameworks and audit activities. The role involves collaborating with technology teams to ensure adherence to laws and regulations while providing consultancy on data protection. Ideal candidates will have experience in compliance management and strong communication skills.

Qualifications

• Experience in maintaining and improving compliance frameworks.
• Ability to communicate complex information clearly.
• Experience in leading data protection initiatives.

Responsibilities

• Maintain and improve the Controls framework for compliance.
• Collaborate with teams to develop corrective action plans.
• Manage internal and external audit activities.

Skills

Compliance frameworks

Data protection

Stakeholder communication

Audit management

Job description

Overview

We’re Kingfisher, a team made up of over 76,000 passionate people who bring Kingfisher and all our brands—B&Q, Screwfix, Brico Depot, Castorama, and Koctas—to life. We aim to become the leading home improvement company and grow the largest community of home improvers in the world. That’s where you come in.

At Kingfisher, our customers come from all walks of life, and so do we. We are committed to ensuring that all colleagues, future colleagues, and applicants are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious or philosophical beliefs, political opinions, disability, gender identity, gender expression, or sexual orientation.

You will be managing Kingfisher’s IT infrastructure, ensuring performance through expertise in systems, virtualization, scripting, networking, storage, and security.

The Compliance Lead will support the Senior IT & Security Compliance Manager in ensuring our technology estate complies with all applicable laws and regulations, with clear demonstration to regulators and auditors. Working within the Information Security & Risk team, you will maintain, develop, and implement a compliance program, including processes and evidential documentation, ensuring Group/Local Banner technology teams and suppliers understand and maintain operational compliance.

What's the job?

1. Maintain and improve the Controls framework, providing a view of effectiveness and driving continuous improvement.
2. Collaborate with Banners and technology teams to develop corrective action plans for compliance issues.
3. Convey sophisticated information clearly to stakeholders and embed policy, processes, and controls to maintain compliance.
4. Develop and recommend reporting packs for various aspects of the compliance landscape.
5. Provide SME consultancy to Group Technology and Banners/Group Functions on topics such as data protection and payments.
6. Operate a data protection office for Group Technology, leading data maps, DPIAs, and SARs.
7. Manage internal and external audit activities, including planning, facilitation, and implementing recommendations.

What you'll bring

• Experience in maintaining and improving compliance frameworks and driving continuous improvement.
• Ability to communicate complex information clearly to stakeholders.
• Experience in developing reporting packs related to compliance.
• Expertise in data protection and payments, providing consultancy to relevant teams.
• Experience in leading data protection initiatives, including data maps, DPIAs, and SARs.
• Experience managing audit activities and implementing findings effectively.