GRC Governance and Reporting Manager

Overview

We’re Kingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes, Better Lives, For everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement. 

This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information into actionable insight and help leaders make informed decisions that support Kingfisher’s security resilience and strategic priorities. 

This role follows our 12 days a month hybrid policy, with your base location being either Southampton or  Paddington in the UK or Krakow in Poland.  

What's the job?

• Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. 

• Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. 

• Coordinate and improve security reporting, metrics, key risk indicators and key performance indicators to show security posture, emerging risks, remediation progress and strategic performance. 

• Analyse governance, risk, compliance and assurance data to identify trends, emerging issues and opportunities for improvement, then communicate clear recommendations to senior stakeholders. 

• Maintain the Security Policy and Standards Library, keeping policies, standards and guidance current, aligned to regulatory requirements and embedded across the organisation. 

• Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance, assurance and oversight of remediation activity over new or changing regulations.  

• Track and report Security Strategy initiatives, risks, dependencies and outcomes consistently across leadership and governance forums. 

• Measure the effectiveness of governance processes, reporting capabilities and committee outcomes, driving continuous improvement in governance maturity. 

• Mange the Policy Library and ensure that content is kept up to date. 

What you'll bring

• Experience developing, implementing and operating governance, risk, compliance or assurance frameworks in a technology or cyber security environment. 

• Experience producing executive, Board and committee reporting, translating complex technical information into clear business insight. 

• Ability to develop meaningful KPIs, KRIs, metrics and dashboards, using tools such as Power BI, Excel or GRC platforms. 

• Knowledge of cyber security governance, risk management, compliance and control frameworks, including standards such as ISO 27001 and NIST CSF. 

• Strong analytical capability, with experience interpreting data, identifying trends and recommending improvements that reduce risk and strengthen performance. 

• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions. 

• Attention to detail and highly organised 

How We Work 

We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration. 

We value the perspectives new team members bring and encourage you to apply - even if you don’t meet 100% of the requirements. 

What We Offer 

An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here. (https://www.kingfisher.com/responsible-business/our-priorities/colleagues) 

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits. 

Diversity & Inclusion 

Our customers come from all walks of life - and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation. 

Interested? Great, apply now and help us to Power the Possible. 

#LI-JK1