Senior IT & Security Risk Manager (12 month FTC)

Kingfisher•Lower Southampton Township, PA

2d•Hybrid

About The Position

We have an exciting opportunity for a Senior IT & Security Risk Manager to join us on a 12 month FTC. With the threat landscape ever-changing and cyber security attacks increasing, this position will strengthen how Kingfisher manages technology and cyber risk across its multi-jurisdictional organisation, helping to protect our customers, colleagues and operations. You will shape and embed a clear, effective IT and Security Risk Management Framework, giving leaders visibility of risk and supporting informed decision-making, as well helping to build and influence a strong, risk-aware culture across teams, processes and technology. We are open to basing this role out of either our Paddington or Southampton offices, with an expectation of 12 days a month in the office. If based out of Paddington, we would need flexibility to work out of the Southampton office at least once a week due to the majority of the Security and Tech teams being based there.

Requirements

Strong experience in IT and security risk management and compliance, working in similar roles within a technology-focused environment.
Proven ability to design, implement and manage risk frameworks and mitigation programmes.
Experience working across a range of technologies and delivery models, including cloud, networks and agile or product-led environments.
Confident communicator, able to explain complex technical risks clearly and influence a wide range of stakeholders.
Knowledge of relevant regulatory and industry standards, such as GDPR, NIST and PCI DSS.

Nice To Haves

Even if you don’t meet 100% of the requirements, we encourage you to apply.

Responsibilities

Lead the development, implementation and ongoing improvement of the IT and Security Risk Management Framework across technology and cyber risk.
Oversee risk identification, assessment and monitoring, ensuring potential risks are clearly understood and visible.
Drive effective risk mitigation by shaping both strategic and tactical responses to reduce risk exposure.
Partner with technology and business teams to develop and deliver corrective action plans for risk and compliance gaps.
Maintain compliance and design effective controls in collaboration with IT compliance, supporting risk reduction.
Develop and maintain clear reporting and dashboards to provide leadership with insight into risk posture and appetite.
Promote and embed a positive, risk-aware culture, influencing stakeholders and supporting governance forums and audit activities.