GRC Governance and Reporting Manager

This role will lead cyber security governance and reporting, creating a clear and trusted view of security risk, compliance, control effectiveness and strategic performance. You’ll strengthen executive oversight, turn complex information into actionable insight and help leaders make informed decisions that support Kingfisher’s security resilience and strategic priorities., This role follows our 12 days a month hybrid policy, with your base location being either Southampton or Paddington in the UK or Krakow in Poland. What’s the job?:

• Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight.

• Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee.

• Coordinate and improve security reporting, metrics, key risk indicators and key performance indicators to show security posture, emerging risks, remediation progress and strategic performance.

• Analyse governance, risk, compliance and assurance data to identify trends, emerging issues and opportunities for improvement, then communicate clear recommendations to senior stakeholders.

• Maintain the Security Policy and Standards Library, keeping policies, standards and guidance current, aligned to regulatory requirements and embedded across the organisation.

• Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance, assurance and oversight of remediation activity over new or changing regulations.

• Track and report Security Strategy initiatives, risks, dependencies and outcomes consistently across leadership and governance forums.

• Measure the effectiveness of governance processes, reporting capabilities and committee outcomes, driving continuous improvement in governance maturity.

• Mange the Policy Library and ensure that content is kept up to date.

What you’ll bring:

• Experience developing, implementing and operating governance, risk, compliance or assurance frameworks in a technology or cyber security environment.

• Experience producing executive, Board and committee reporting, translating complex technical information into clear business insight.

• Ability to develop meaningful KPIs, KRIs, metrics and dashboards, using tools such as Power BI, Excel or GRC platforms.

• Knowledge of cyber security governance, risk management, compliance and control frameworks, including standards such as ISO 27001 and NIST CSF.

• Strong analytical capability, with experience interpreting data, identifying trends and recommending improvements that reduce risk and strengthen performance.

• Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions.

• Attention to detail and highly organised

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits.

We’re Kingfisher, A team made up of over 70,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes, Better Lives, For everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement., An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here. (https://www.kingfisher.com/responsible-business/our-priorities/colleagues)