Senior Cyber Risk & Security Strategy Lead (BISO) - Hybrid

Kingfisher plc; Southampton; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Private Health Care

Kingfisher Pension Scheme

25 Days' Holiday

Staff Discount

Kingfisher SIP

Job summary

Kingfisher plc is seeking a senior Business Information Security Officer (BISO) to align security strategy with business objectives. You will act as a key liaison between the Information Security function and business functions, embedding cybersecurity into operations and projects.

The role requires leadership experience, strong knowledge of security frameworks, and the ability to influence decisions at all levels.

Qualifications

• Extensive leadership experience in information security or cyber security teams.
• Strong knowledge of ISO 27001, NIST, OWASP, PCI DSS and NIS2.
• Excellent communication, translating complex concepts for technical and non-technical audiences.
• Deep understanding of cybersecurity risks and threats affecting business operations.
• Proven ability to build trusted stakeholder relationships and drive positive security outcomes.

Responsibilities

• Serve as primary cybersecurity advisor and liaison between security and business functions.
• Maintain cyber risk register and support risk-based decision making.
• Ensure projects and changes are Secure by Design and manage risks.
• Lead security incident and breach response activities when required.
• Drive governance by reviewing systems, suppliers, and processes against standards.
• Report security strategy, vulnerability management, and roadmaps to senior stakeholders.

Skills

Cybersecurity leadership

Security governance

Stakeholder management

Secure by design

Communication

Analytical thinking

Influence decisions

Regulatory awareness

Job description

Kingfisher plc is seeking a senior Business Information Security Officer (BISO) to align security strategy with business objectives. You will act as a key liaison between the Information Security function and business functions, embedding cybersecurity into operations and projects.

The role requires leadership experience, strong knowledge of security frameworks, and the ability to influence decisions at all levels.