Security GRC Analyst - Governance, Risk & Controls

Ricoh Europe; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Global community

Learning opportunities

Flexible rewards

Job summary

Ricoh Europe is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance, risk management and controls across the European IT landscape. You will translate standards into practical controls, work with infra, cloud and identity teams, and support assurance activities.

You will join a role focused on governance, risk and control maturity with opportunities to influence senior stakeholders and improve security posture across Ricoh's European operations.

Qualifications

• Experience in IT Security, Governance, Risk and Controls within a complex organisation.
• Ability to translate security frameworks into practical operational controls.
• Experience supporting audits, assurance and compliance programmes.

Responsibilities

• Develop, maintain and embed IT security policies, standards and controls.
• Own and maintain the IT Security Risk Register and remediation tracking.
• Facilitate security risk assessments with technical teams and stakeholders.
• Assess control design, identify gaps and drive improvements.
• Support ISO 27001, Cyber Essentials and internal control programmes.
• Report on risks, control effectiveness and remediation progress.

Skills

IT Security

Information Security Governance

IT Risk

Security Controls

GRC

Security Frameworks

Tools

ISO 27001

NIST CSF

Job description

Ricoh Europe is seeking an IT Security Governance, Risk & Controls Analyst to strengthen security governance, risk management and controls across the European IT landscape. You will translate standards into practical controls, work with infra, cloud and identity teams, and support assurance activities.

You will join a role focused on governance, risk and control maturity with opportunities to influence senior stakeholders and improve security posture across Ricoh's European operations.