IT Security Compliance & Reporting Analyst in London

About Ricoh: A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant, are listed in the Global 100 Most Sustainable Companies, and have been named one of Forbes’ World’s Best Employers 2025. At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future.

Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful.

At Ricoh, we’re looking for an IT Security Compliance & Reporting Analyst to help strengthen the security, governance and resilience of our European IT environment. This is a great opportunity for someone who enjoys working at the intersection of IT security, compliance, risk and data. You’ll play a key role in turning security requirements and frameworks into practical controls, meaningful reporting and actionable insight that helps our technology teams and leadership make better security decisions.

Working across infrastructure, cloud, identity and operational IT teams, you’ll help us understand where we are performing well, where risks exist and where we need to improve. You’ll also have the opportunity to influence how we mature our security governance and compliance approach across Europe.

If you’re analytical, naturally curious and enjoy working with stakeholders to turn complex security requirements into clear, practical actions, we’d love to hear from you.

Key Responsibilities Include:

• Develop and maintain IT security policies, standards and control requirements, ensuring they remain aligned with business and security needs.
• Build and maintain security compliance dashboards and reporting, using tools such as Power BI to turn data into meaningful insight.
• Monitor, measure and report on IT security compliance across key technology and operational domains.
• Own and maintain the IT Security Risk Register, ensuring risks are clearly documented, assessed and actively managed.
• Facilitate security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans.
• Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.
• Translate security frameworks and regulatory requirements into practical, operational standards and controls.
• Analyse security and compliance data to identify trends, gaps and areas requiring attention.
• Produce clear reporting and insight for senior technology and business stakeholders.
• Identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function.
• Partner with technical teams to help embed a culture of security, accountability and continuous improvement.

You will ideally have:

• Experience working in IT Security, Information Security Governance, IT Risk, Security Compliance or a similar environment, with the ability to work confidently across both technical and business teams.
• Experience in IT Security, IT Risk, Security Governance or Security Compliance.
• Experience developing and maintaining security policies, standards, controls and governance documentation.
• A strong understanding of security frameworks such as ISO 27001 and NIST CSF.
• Experience producing security compliance reporting, MI or dashboards, ideally using Power BI.
• Experience managing or supporting IT/security risk registers and risk assessments.
• An understanding of IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance.
• The ability to analyse complex information and turn it into clear, actionable insight.
• Strong communication and stakeholder management skills, with the confidence to engage with both technical specialists and senior stakeholders.
• A proactive approach to identifying gaps, risks and opportunities for improvement.
• Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer would be advantageous.

In return for your commitment, you can expect:

• Work should feel meaningful, supportive and fulfilling.
• Access to learning pathways, mentoring and career opportunities across functions and countries.
• Opportunities to make a difference through volunteering, sustainability initiatives and community programmes.
• Fair rewards, flexible working, wellbeing resources and real recognition.

We are an equal opportunities employer. We believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process.

If you require any reasonable adjustments at any stage of the recruitment journey, please let us know and we will support you to bring your best self forward.

Ready to love what you do? Apply now and help us shape what comes next.