IT Security GRC Analyst: Strengthen Controls & Risk

Vastbouw; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Ricoh is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance, risk management and control maturity across the European IT landscape. You will collaborate with infrastructure, cloud, identity and operations teams to embed policies, standards and controls while managing the IT Security Risk Register.

The role emphasizes turning frameworks into practical controls, partnering with technical teams and senior stakeholders to improve security posture and

Qualifications

• Experience in IT Security, Information Security Governance, IT Risk, Security Controls, GRC or a similar environment.
• Strong understanding of security governance within a complex organisation.
• Experience conducting or supporting technology/security risk assessments and maintaining risk registers.
• Knowledge of security control frameworks such as ISO 27001 and NIST CSF.
• Experience supporting internal or external audits, assurance reviews and compliance programmes.

Responsibilities

• Develop, maintain and embed IT security policies, standards, procedures and control requirements.
• Support the development and continuous improvement of the IT security governance and control framework.
• Own and maintain the IT Security Risk Register, ensuring risks are appropriately assessed, documented, monitored and managed.
• Facilitate technology and security risk assessments, working with technical teams to identify risks and agree mitigation plans.
• Assess the effectiveness of security controls and identify gaps and opportunities for improvement.
• Translate security frameworks and requirements into practical operational controls.
• Support audit, assurance and compliance activities, including ISO 27001 and internal control programmes.
• Build strong relationships with technical and business stakeholders as a trusted partner on security risk and governance.

Job description

Ricoh is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance, risk management and control maturity across the European IT landscape. You will collaborate with infrastructure, cloud, identity and operations teams to embed policies, standards and controls while managing the IT Security Risk Register.

The role emphasizes turning frameworks into practical controls, partnering with technical teams and senior stakeholders to improve security posture and