PAM Product Owner

Overview

We're Kingfisher, a team made up of over 74,000 passionate people across our brands B&Q, Screwfix, Brico Depot, Castorama, and Koctasto. Guided by our purpose Better Homes. Better Lives. For Everyone, we believe a better world starts with better homes. We work every day to make that a reality. Join us to shape the future of home improvement.

We have a new opportunity for a PAM Product Owner to provide product leadership for Kingfisher's Privileged Access Management capability. You will define and deliver a strategy and roadmap that reduces identity risk, strengthens auditability, and supports a Zero Trust, cloud first approach. This role balances product ownership, security leadership and hands on technical direction to simplify privileged access journeys for engineers.

We are open to basing the role in any UK office location (Paddington, Southampton, or Yeovil) with an expectation of 12 days a month in the office. The role normally supports the Southampton site and requires occasional travel.

Responsibilities

• Own and continuously evolve the PAM product strategy, roadmap, backlog and OKRs to drive risk reduction, control maturity and improved engineer experience.
• Translate Zero Trust and architectural direction into clear PAM outcomes, epics and deliverables across servers, cloud, DevOps and endpoints.
• Define and maintain the PAM control framework, including just in time access, session management and recording, secrets management, endpoint privilege management and break glass processes.
• Reduce standing privilege through time bound elevation, approvals and monitoring, supported by strong analytics and detection capabilities.
• Ensure PAM services are secure, resilient and auditable, producing high quality evidence and resolving findings promptly.
• Lead PAM platform reliability, including SLOs, observability, disaster recovery routines and regular break glass testing.
• Work closely with engineering, security and identity partners to embed secure by default behaviours and clear guidance for privileged users.

Qualifications

• Hands on experience delivering PAM across servers, cloud and DevOps, including just in time access, session recording, credential rotation and break glass processes.
• Experience with enterprise PAM platforms such as Delinea (preferred), CyberArk or BeyondTrust.
• Proven ability to own a product roadmap, define OKRs, manage a backlog and deliver measurable outcomes at scale.
• Strong understanding of privileged access security controls, Zero Trust principles and audit expectations.
• Engineering fluency with APIs, automation, CI/CD and infrastructure as code or policy as code practices.
• Experience leading/directing managed service partners and delivering high quality incident, problem and change management.

How We Work

We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating-whether in our offices or at off site locations. On average, around 60% of your time will involve in person collaboration.

We value the perspectives new team members bring and encourage you to apply-even if you don't meet 100% of the requirements.

What We Offer

An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here.

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits.

Diversity & Inclusion

Our customers come from all walks of life-and so do we. We're committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression or sexual orientation.

Benefits Private Health Care

Opportunity to receive up to family level cover with AXA. Join within three months of starting or at annual renewal in April. (This benefit is subject to Benefit In Kind taxation).

Kingfisher Pension Scheme

Immediate eligibility through auto enrolment. Contribute 8% to receive a max 14% from the Company.

25 Days' Holiday

25 days per annum plus bank holidays as stated in your contract (pro rated for part time colleagues).

Staff Discount

20% discount at B&Q and Screwfix. Eligible after 3 months service.

Kingfisher Share Incentive Plan (SIP)

Share ownership in a tax efficient way. Save between £10 to £150 per month. Join at any time once three months service is reached.

Life Assurance

x4 Salary plus benefit equal to value of your Retirement Account (if an active member of KPS-MP) or x1 Salary if not active member.

Bonus

Competitive bonus scheme that aligns to work level of role.

Kingfisher Share Save

Save with the option to buy Kingfisher plc shares at the end of a 3 or 5 year period. Offered annually. Three months service is required at the annual invitation date, normally in October.

Application Process

Step 1: Application - Send in your application via our Kingfisher Careers website.

Step 2: Review - A member of the Talent Acquisition team will then review your application and let you know if you have progressed.

Step 3: Interview 1 - You'll have a telephone interview or one to one conversation with a recruiter.

Step 4: Interview 2 - As you progress, you'll be invited to attend a face to face or virtual interview.

Step 5: Feedback - Your recruiter will be in contact with feedback and, if successful, the details of your offer.