Supplier Assurance Manager

Overview

We’re Kingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

 

 

Role purpose

 

The Supplier Assurance Manager plays a key role in safeguarding the organisation by leading and continuously enhancing our Third-Party Risk Management and Supplier Assurance Framework. Working closely with Information Security, Procurement, Legal, Technology and business teams, you will ensure suppliers meet security, privacy, resilience and compliance requirements, while proactively identifying, assessing and managing supply chain risks. This role is critical in enabling the secure and efficient onboarding and management of third-party services, helping to protect the business while supporting strategic growth and innovation.   Please note that this role can be based from either Southampton or London Paddington with an expectation of 12 days per month in office.

What's the job?

• Own and continuously improve the Third-Party Risk Management Framework and supplier assurance processes across the full supplier lifecycle, from onboarding through to offboarding.
• Conduct security and risk assessments of suppliers, reviewing certifications, controls and evidence to ensure compliance with organisational requirements, risk appetite and industry standards.
• Maintain supplier risk registers, identify control gaps and remediation actions, track progress, and escalate risks where necessary to ensure timely resolution.
• Partner with Procurement, Legal and Vendor Management teams to embed security requirements into contracts, supplier engagements, subcontractor arrangements and onboarding processes.
• Provide expert guidance to business stakeholders on supplier security risks, new services, technical integrations and supply chain risk management, promoting a strong security culture.
• Support audits, regulatory engagements and reporting activities, maintaining key supplier assurance tools, processes and metrics, including risk profiles, OKRs and assurance documentation.
• Drive continuous improvement of supplier assurance methodologies, workflows and tooling, while monitoring emerging threats, industry trends and supply chain risks to strengthen organisational resilience.

What you'll bring

Essential

• Proven experience in Information Security, Supplier Risk Management or Third-Party Risk Management (TPRM), with expertise in designing and operating supplier assurance processes at scale.
• Strong knowledge of security frameworks and standards, including ISO 27001, SOC 2 and NIST, with the ability to assess complex security controls and risks.
• Experience negotiating commercial agreements and advising on security requirements, risk mitigation and contractual obligations.
• Excellent communication and stakeholder management skills, with the ability to translate technical concepts into clear, actionable guidance for both technical and non-technical audiences.
• Proven ability to build trusted relationships, influence decisions and drive positive outcomes across all levels of an organisation.
• Highly organised and analytical, with strong problem-solving, decision-making and prioritisation skills, alongside a deep understanding of emerging security threats and business risk.
• A proactive and collaborative team player who demonstrates integrity, sound judgement, customer focus and a commitment to regulatory compliance, business objectives and a positive team culture.

 

Desirable

• Experience in large enterprise or multi‑brand environments
• Familiarity with procurement and contracting processes
• Relevant certifications (e.g. CTPRP, CISM, CRISC, ISO 27001 Lead Auditor).
• English, French and Polish Language (spoken and written)

 

How We WorkWe believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.We value the perspectives new team members bring and encourage you to apply - even if you don’t meet 100% of the requirements.  What We OfferAn inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here.  We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career.   Diversity & InclusionOur customers come from all walks of life - and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation. Interested? Great, apply now and help us to Power the Possible. 

#LI-AK1