KIS 2016 is an excellent choice. You'll want to activate UAC, or, it's highly recommended to activate UAC. As silversurfer said, you need at least one on-demand scanner. If you get the portable versions, they don't decrease system performance.
Get a password manager like keepass or lastpass because you really want to use unique passwords for each site. Other than that i agree with the guys above.
Add a backup browser for convenience on browsing when your primary may suffer some issues. Other than that follow those highly important category which rated your setup as risk.