Supplier Assurance Manager

Were Kingfisher A team made up of over 74000 passionate people who bring Kingfisher - and all our other brands: B&Q Screwfix Brico Depot Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes and we work every day to make that a reality. Join us and help shape the future of home improvement.

Role purpose

• Own and continuously improve the Third-Party Risk Management Framework and supplier assurance processes across the full supplier lifecycle from onboarding through to offboarding.
• Conduct security and risk assessments of suppliers reviewing certifications controls and evidence to ensure compliance with organisational requirements risk appetite and industry standards.
• Maintain supplier risk registers identify control gaps and remediation actions track progress and escalate risks where necessary to ensure timely resolution.
• Partner with Procurement Legal and Vendor Management teams to embed security requirements into contracts supplier engagements subcontractor arrangements and onboarding processes.
• Provide expert guidance to business stakeholders on supplier security risks new services technical integrations and supply chain risk management promoting a strong security culture.
• Support audits regulatory engagements and reporting activities maintaining key supplier assurance tools processes and metrics including risk profiles OKRs and assurance documentation.
• Drive continuous improvement of supplier assurance methodologies workflows and tooling while monitoring emerging threats industry trends and supply chain risks to strengthen organisational resilience.

Essential

• Proven experience in Information Security Supplier Risk Management or Third-Party Risk Management (TPRM) with expertise in designing and operating supplier assurance processes at scale.
• Strong knowledge of security frameworks and standards including ISO 27001 SOC 2 and NIST with the ability to assess complex security controls and risks.
• Experience negotiating commercial agreements and advising on security requirements risk mitigation and contractual obligations.
• Excellent communication and stakeholder management skills with the ability to translate technical concepts into clear actionable guidance for both technical and non-technical audiences.
• Proven ability to build trusted relationships influence decisions and drive positive outcomes across all levels of an organisation.
• Highly organised and analytical with strong problem-solving decision-making and prioritisation skills alongside a deep understanding of emerging security threats and business risk.
• A proactive and collaborative team player who demonstrates integrity sound judgement customer focus and a commitment to regulatory compliance business objectives and a positive team culture.

Desirable

• Experience in large enterprise or multibrand environments
• Familiarity with procurement and contracting processes
• Relevant certifications (e.g. CTPRP CISM CRISC ISO 27001 Lead Auditor).
• English French and Polish Language (spoken and written)