IT Security Compliance & Reporting Analyst

Vastbouw; Greater London; Hybrid; GBP 52,000 - 86,000; Full time

Benefits offered by this job

Love to Connect

Love to Grow

Love to Give Back

Love to Succeed

Job summary

Ricoh Europe is seeking an IT Security Compliance & Reporting Analyst to strengthen governance and resilience of our European IT environment. The role sits at the intersection of IT security, compliance, risk and data, turning security requirements into practical controls and actionable reporting for technology teams and leadership.

Ideal candidates will bring hands-on experience across ISO 27001, NIST CSF and security dashboards, with stakeholder collaboration across infrastructure and cloud

Qualifications

• Experience in IT Security, Information Security Governance, IT Risk or Security Compliance.
• Experience developing security policies, standards, controls and governance documentation.
• Strong understanding of ISO 27001 and NIST CSF.
• Experience producing security reporting, MI or dashboards, ideally using Power BI.

Responsibilities

• Develop and maintain IT security policies, standards and control requirements.
• Build security compliance dashboards and reporting using Power BI.
• Monitor, measure and report on IT security compliance across technology domains.
• Own and maintain the IT Security Risk Register and ensure risks are documented and managed.
• Facilitate security and technology risk assessments with technical teams to mitigate risks.
• Support audit, assurance and ISO 27001 compliance activities.
• Translate security frameworks into practical, operational standards and controls.
• Analyze security and compliance data to identify trends and gaps.
• Produce clear reporting for senior technology and business stakeholders.
• Identify opportunities to improve governance, reporting and control effectiveness.

Skills

IT Security

Information Security Governance

IT Risk

Security Compliance

Stakeholder management

Power BI

Tools

Power BI

Job description

About Ricoh

A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant, are listed in the Global 100 Most Sustainable Companies, and have been named one of Forbes’ World’s Best Employers 2025.

At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future.

Find your place. Transform your future

Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful.

People transform when they Love What They Do

This belief sits at the heart of The Ricoh Promise. It guides how we recruit, how we support our people, and how we work together every day, creating an environment where you can grow, feel valued and make a difference.

When you join us, you are encouraged to share your ideas, challenge the way things are done, and work with others to build something better. If you are looking for a place where your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh.

#RicohEurope

What you will be doing

At Ricoh, we’re looking for an IT Security Compliance & Reporting Analyst to help strengthen the security, governance and resilience of our European IT environment.

This is a great opportunity for someone who enjoys working at the intersection of IT security, compliance, risk and data. You’ll play a key role in turning security requirements and frameworks into practical controls, meaningful reporting and actionable insight that helps our technology teams and leadership make better security decisions.

Working across infrastructure, cloud, identity and operational IT teams, you’ll help us understand where we are performing well, where risks exist and where we need to improve. You’ll also have the opportunity to influence how we mature our security governance and compliance approach across Europe.

If you’re analytical, naturally curious and enjoy working with stakeholders to turn complex security requirements into clear, practical actions, we’d love to hear from you.

Key Responsibilities Include:

• Develop and maintain IT security policies, standards and control requirements, ensuring they remain aligned with business and security needs.


• Build and maintain security compliance dashboards and reporting, using tools such as Power BI to turn data into meaningful insight.


• Monitor, measure and report on IT security compliance across key technology and operational domains.


• Own and maintain the IT Security Risk Register, ensuring risks are clearly documented, assessed and actively managed.


• Facilitate security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans.


• Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.


• Translate security frameworks and regulatory requirements into practical, operational standards and controls.


• Analyse security and compliance data to identify trends, gaps and areas requiring attention.


• Produce clear reporting and insight for senior technology and business stakeholders.


• Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function.


• Partner with technical teams to help embed a culture of security, accountability and continuous improvement.

You will ideally have

You’ll have experience working in IT Security, Information Security Governance, IT Risk, Security Compliance or a similar environment, with the ability to work confidently across both technical and business teams.

Ideally, you’ll bring:

• Experience in IT Security, IT Risk, Security Governance or Security Compliance.


• Experience developing and maintaining security policies, standards, controls and governance documentation.


• A strong understanding of security frameworks such as ISO 27001 and NIST CSF.


• Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.


• Experience managing or supporting IT/security risk registers and risk assessments.


• An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance.


• The ability to analyse complex information and turn it into clear, actionable insight.


• Strong communication and stakeholder management skills, with the confidence to engage with both technical specialists and senior stakeholders.


• A proactive approach to identifying gaps, risks and opportunities for improvement.


• Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer would be advantageous.

In return for your commitment, you can expect

Love to Connect

You become part of a global community built on openness, inclusion and genuine collaboration. Across teams, countries and roles, you'll find people who listen, involve and encourage you - helping you feel valued and able to be yourself every day.

Love to Grow

Your development truly matters to us. With access to learning pathways, mentoring and career opportunities across functions and countries, you'll be supported to stretch your skills, explore new directions and stay future-ready in a changing world.

Love to Give Back

Purpose is part of how we work. You'll have opportunities to make a difference through volunteering, sustainability initiatives and community programmes that reflect our shared values and commitment to positive impact.

Love to Succeed

Success at Ricoh is something we pursue together. You'll benefit from fair rewards, flexible working, wellbeing resources and real recognition - including programmes such as the Imagine. Change. Awards, where colleagues celebrate each other's achievements.

We are an equal opportunities employer

We believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process. If you require any reasonable adjustments at any stage of the recruitment journey, please let us know and we will support you to bring your best self forward.