We’re Kingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

Role purpose

• Own and continuously improve the Third-Party Risk Management Framework and supplier assurance processes across the full supplier lifecycle, from onboarding through to offboarding.
• Conduct security and risk assessments of suppliers, reviewing certifications, controls and evidence to ensure compliance with organisational requirements, risk appetite and industry standards.
• Maintain supplier risk registers, identify control gaps and remediation actions, track progress, and escalate risks where necessary to ensure timely resolution.
• Partner with Procurement, Legal and Vendor Management teams to embed security requirements into contracts, supplier engagements, subcontractor arrangements and onboarding processes.
• Provide expert guidance to business stakeholders on supplier security risks, new services, technical integrations and supply chain risk management, promoting a strong security culture.
• Support audits, regulatory engagements and reporting activities, maintaining key supplier assurance tools, processes and metrics, including risk profiles, OKRs and assurance documentation.
• Drive continuous improvement of supplier assurance methodologies, workflows and tooling, while monitoring emerging threats, industry trends and supply chain risks to strengthen organisational resilience.

Essential

• Proven experience in Information Security, Supplier Risk Management or Third-Party Risk Management (TPRM), with expertise in designing and operating supplier assurance processes at scale.
• Strong knowledge of security frameworks and standards, including ISO 27001, SOC 2 and NIST, with the ability to assess complex security controls and risks.
• Experience negotiating commercial agreements and advising on security requirements, risk mitigation and contractual obligations.
• Excellent communication and stakeholder management skills, with the ability to translate technical concepts into clear, actionable guidance for both technical and non-technical audiences.
• Proven ability to build trusted relationships, influence decisions and drive positive outcomes across all levels of an organisation.
• Highly organised and analytical, with strong problem-solving, decision-making and prioritisation skills, alongside a deep understanding of emerging security threats and business risk.
• A proactive and collaborative team player who demonstrates integrity, sound judgement, customer focus and a commitment to regulatory compliance, business objectives and a positive team culture.

Desirable

• Experience in large enterprise or multi‑brand environments
• Familiarity with procurement and contracting processes
• Relevant certifications (e.g. CTPRP, CISM, CRISC, ISO 27001 Lead Auditor).
• English, French and Polish Language (spoken and written)