> Markdown version of [/jobs/ext/4642355-grc-governance-and-reporting-manager](https://www.wearedevelopers.com/jobs/ext/4642355-grc-governance-and-reporting-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Governance and Reporting Manager

- **Company:** Kingfisher plc
- **Location:** London, UK (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Data Analysis, Cyber Security, Power BI, National Institute of Standards and Technology Cybersecurity Framework, RSA Archer Platform
- **Published:** November 9, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/grc-governance-and-reporting-manager/55558815

## About the Role

Track and report Security Strategy initiatives, risks, dependencies and outcomes consistently across leadership and governance forums. Measure the effectiveness of governance processes, reporting capabilities and committee outcomes, driving continuous improvement in governance maturity. Mange the Policy Library and ensure that content is kept up to date. What you'll bringExperience developing, implementing and operating governance, risk, compliance or assurance frameworks in a technology or cyber security environment. Experience producing executive, Board and committee reporting, translating complex technical information into clear business insight. Ability to develop meaningful KPIs, KRIs, metrics and dashboards, using tools such as Power BI, Excel or GRC platforms. Knowledge of cyber security governance, risk management, compliance and control frameworks, including standards such as ISO 27001 and NIST CSF. Strong analytical capability, with experience interpreting data, identifying
trends and recommending improvements that reduce risk and strengthen performance. Ability to facilitate governance forums and influence senior stakeholders across technology, risk, audit and business functions. Attention to detail and highly organised How We Work We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration. We value the perspectives new team members bring and encourage you to apply - even if you don't meet 100% of the requirements. What We Offer An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here. ( We also offer a competitive benefits package and plenty of
opportunities to stretch and grow your career. Scroll down below to find out more about our benefits. Diversity & Inclusion Our customers come from all walks of life - and so do we. We're committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation. Interested? Great, apply now and help us to Power the Possible. #LI-JK1 Job SummaryEntity: Group TechnologyID: 2026-162026Category: IT GovernanceType: Full TimeContract: PermanentHours Per Week: 37.5

## Description

What's the job?Define and maintain the Security Governance Framework, with clear decision-making structures and appropriate executive oversight. Manage security governance forums and reporting for Security Leadership, Executive Committees and the Audit Committee. Coordinate and improve security reporting, metrics, key risk indicators and key performance indicators to show security posture, emerging risks, remediation progress and strategic performance. Analyse governance, risk, compliance and assurance data to identify trends, emerging issues and opportunities for improvement, then communicate clear recommendations to senior stakeholders. Maintain the Security Policy and Standards Library, keeping policies, standards and guidance current, aligned to regulatory requirements and embedded across the organisation. Partner with Security, Technology, Legal, Risk, Compliance and Internal Audit to align governance, assurance and oversight of remediation activity over new or changing regulations.