Head of IT & Security Governance Risk & Compliance

Kingfisher•Lower Southampton Township, PA

7d•Hybrid

About The Position

We’re Kingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas - to life. That’s right, we’re big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that’s where you come in. At Kingfisher our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation. We are open to flexible and agile working, both of hours and location. Therefore, we offer colleagues a blend of working from home and our offices. This role would require a weekly presence in both our London & Southampton offices. We're looking for a forward-thinking leader to establish, shape & drive our IT Governance, Risk, and Compliance Framework to manage risk and meet regulatory requirements. This role is key to ensuring our cyber resilience, aligning with best practices and regulatory standards, and enabling secure innovation across the Kingfisher Group.

Requirements

Proven experience embedding & delivering IT & Security GRC frameworks in a large, matrixed organisation.
Strong knowledge of security standards and frameworks (e.g. ISO27001, NIST, PCI DSS, Cloud Security).
Excellent understanding of the principles, theories, practices and techniques for activities associated with planning and implementing information security management frameworks and general IT controls
Experience in chairing effective governance meetings with senior representation with the ability to translate technical risks and impact to technical and non-technical colleagues in all areas of the business.
A collaborative leadership style with a focus on continuous improvement and service excellence.
High integrity, sound judgment, and a passion for building trusted relationships across all levels.
Be Customer Focused – constantly improving our customers’ experience
I listen to my customers
I use available data to help make decisions
Be Human – acting with humanity and care
I do the right thing
I am respectful
Be Curious – thrive on learning, thinking beyond the obvious
I build and share new ideas
I try new things and share my learnings
Be Agile – working with trust, pace and agility
I have courage to be creative
Done is better than perfect, I aim for 80/20
Be Inclusive – acting inclusively in diverse teams to work together
I embrace allyship
I have self-awareness and a desire to learn
Be Accountable – championing the plan to deliver results and growth
I own my actions
I understand the Kingfisher plan and how it relates to my role

Responsibilities

Lead the development and implementation of our IT & Security GRC framework across a complex, matrixed organisation.
Oversee internal security controls and risk mitigation, ensuring alignment with business goals and regulatory requirements.
Maintain and evolve our Information Security Management System (ISMS), ensuring ongoing compliance and certification.
Collaborate with stakeholders across the Group to embed effective security governance into business processes.
Partner with audit and risk teams to demonstrate measurable risk reduction and close audit findings effectively.
Lead and develop a high-performing GRC team, fostering a proactive and collaborative culture.
Report on key metrics and insights to demonstrate the impact and value of GRC initiatives.