Insider Risk Manager

We’re Kingfisher, A team made up of over 7 0 ,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to lif e .

Guided by our purpose Better Homes.

Better Lives.

For Everyone.

We believe a better world starts with better homes, and we work every day to make that a reality .

Join us and help shape the future of home improvement.

As our Insider Risk Manager, you'll play a critical role in protecting Kingfisher's data, systems and people from internal security risks.

Working across Information Security, Technology, Legal, Privacy and People teams, you'll help identify, assess and reduce risks relating to inappropriate access, data loss, misuse of privileged access and compromised accounts.

This is an opportunity to shape and mature Kingfisher's insider risk capability, driving both technical controls and colleague awareness to support the safe and responsible use of technology across the organisation.

In doing so, you'll help protect our customers, colleagues and business while supporting our purpose of Better Homes, Better Lives, For Everyone.

• Develop and continuously improve Kingfisher's insider risk programme across people, process, data and technology controls.
• Identify, assess and mitigate insider risk scenarios, including data leakage, policy breaches, inappropriate access and compromised accounts.
• Partner with Information Security, Technology and business teams to strengthen preventative controls, monitoring and data protection measures.
• Deliver targeted awareness, communications and training activities that promote secure behaviours across the organisation.
• Support phishing simulations and other colleague-focused security initiatives, providing insight and recommendations for improvement.
• Coordinate the triage, investigation and escalation of suspected insider risk events, ensuring appropriate governance and confidentiality.
• Produce meaningful reporting and insights to identify trends, measure control effectiveness and inform security improvements.
• Experience within information security, cyber risk, insider risk, data protection, security operations or a similar risk-focused environment.
• Strong understanding of insider risk scenarios, including data loss, privileged access misuse, policy violations and account compromise.