Business Information Security Officer (BISO)

Overview

We’re Kingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

Role purpose

What's the job?

• Serve as the primary cybersecurity advisor and key liaison between the Security Function and business stakeholders, balancing operational needs with security requirements.
• Build trusted relationships across the Banner/Group Functions, providing expert guidance and promoting a strong culture of cybersecurity awareness.
• Own and maintain the cyber risk register, supporting risk-based decision making, prioritisation, reporting, and remediation tracking.
• Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks.
• Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required.
• Drive assurance and governance activities by reviewing systems, applications, platforms, suppliers, and processes against security frameworks, policies, and standards.
• Provide regular reporting and strategic insight to senior stakeholders, ensuring security strategy, vulnerability management, and business roadmaps are aligned with organisational goals and compliance requirements.

What you'll bring

• Extensive experience in Information Security or a related field, including leadership or management experience within IT or Cyber Security teams.
• Strong knowledge of industry security frameworks and standards, including ISO 27001, NIST, OWASP, PCI DSS and NIS2.
• Excellent communication skills, with the ability to translate complex technical concepts into clear, actionable guidance for both technical and non-technical audiences.
• Deep understanding of cybersecurity risks, emerging threats, and their impact on business operations, with the ability to influence decision-making at all levels.
• Proven ability to build trusted relationships with stakeholders, drive positive outcomes, and effectively challenge and influence behaviours when required.
• Strong analytical, organisational and decision-making skills, with the ability to prioritise competing demands and balance risk against business objectives.
• A proactive and collaborative leader who demonstrates integrity, sound judgement, regulatory awareness, customer focus and a commitment to fostering a positive team culture.

How We Work We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

We value the perspectives new team members bring and encourage you to apply - even if you don’t meet 100% of the requirements.

What We Offer An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here.

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career.

Diversity & Inclusion Our customers come from all walks of life - and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.

Interested? Great, apply now and help us to Power the Possible.