IT Security GRC Analyst - Build Strong Security Controls

Ricoh; City Of London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Ricoh is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance across its European IT environment. You will turn security frameworks into practical controls and work with infrastructure, cloud, identity and operations teams to manage technology risks.

You’ll guide assurance activities, support ISO 27001/NIST CSF alignment and report on risk, control effectiveness and remediation to senior stakeholders across Europe.

Qualifications

• Experience in IT Security, IT Risk, Governance, and controls in complex organisations.
• Experience developing and maintaining security policies, standards, procedures and control frameworks.
• Strong understanding of security governance and risk management principles.
• Experience conducting or supporting technology/security risk assessments and maintaining risk registers.
• Good knowledge of security control frameworks such as ISO 27001 and NIST CSF.
• Experience assessing control design and effectiveness, identifying gaps and supporting remediation.
• Vulnerability management, patching, IAM, PAM, and backup governance.
• Experience supporting internal or external audits, assurance reviews and compliance programmes.

Responsibilities

• Develop, maintain and embed IT security policies, standards, procedures and control requirements.
• Support the development and continuous improvement of the IT security governance and control framework.
• Own and maintain the IT Security Risk Register, ensuring risks are appropriately assessed, documented, monitored and managed.
• Facilitate technology and security risk assessments, working with technical teams to identify risks and agree appropriate mitigation plans.
• Assess the effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement.
• Translate security frameworks and requirements, including ISO 27001 and NIST CSF, into practical operational controls.
• Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.
• Work with technology teams to ensure security controls are understood, implemented and operating effectively.
• Provide clear reporting and insight on security risks, control effectiveness, compliance and remediation activity.
• Track remediation actions and work with stakeholders to ensure identified risks and control gaps are addressed.
• Support the continuous improvement of security governance, risk and control processes across the European IT function.
• Build strong relationships with technical and business stakeholders, acting as a trusted partner on security risk and governance matters.

Skills

IT Security

Security Governance

IT Risk

Security Controls

GRC

ISO 27001

NIST CSF

Vulnerability Management

Identity & Access

Patching

Audits & Compliance

Job description

Ricoh is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance across its European IT environment. You will turn security frameworks into practical controls and work with infrastructure, cloud, identity and operations teams to manage technology risks.

You’ll guide assurance activities, support ISO 27001/NIST CSF alignment and report on risk, control effectiveness and remediation to senior stakeholders across Europe.