About Ricoh

A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant, are listed in the Global 100 Most Sustainable Companies, and have been named one of Forbes’ World’s Best Employers 2025.

At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future.

Find your place. Transform your future

Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful.

People Transform When They Love What They Do

This belief sits at the heart of The Ricoh Promise. It guides how we recruit, how we support our people, and how we work together every day, creating an environment where you can grow, feel valued and make a difference.

When you join us, you are encouraged to share your ideas, challenge the way things are done, and work with others to build something better. If you are looking for a place where your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh.

What you will be doing

We’re looking for an IT Security Governance, Risk & Controls Analyst to help strengthen the security, governance and resilience of our European IT environment.

This is an exciting opportunity for someone who enjoys working across security governance, technology risk and controls, helping organisations understand their security posture and make informed decisions about risk.

Working closely with infrastructure, cloud, identity and operational IT teams, you’ll help develop and embed security policies, standards and controls, manage technology risks and support assurance activities across the European IT landscape.

You’ll be someone who can take security frameworks and requirements and turn them into practical, effective controls — while building strong relationships with technical teams and senior stakeholders along the way.

If you enjoy improving security maturity, challenging the status quo and helping teams manage risk in a practical way, we’d love to hear from you.

Key Responsibilities Include:

• Develop, maintain and embed IT security policies, standards, procedures and control requirements.
• Support the development and continuous improvement of the IT security governance and control framework.
• Own and maintain the IT Security Risk Register, ensuring risks are appropriately assessed, documented, monitored and managed.
• Facilitate technology and security risk assessments, working with technical teams to identify risks and agree appropriate mitigation plans.
• Assess the effectiveness of security controls and identify control gaps, weaknesses and opportunities for improvement.
• Translate security frameworks and requirements, including ISO 27001 and NIST CSF, into practical operational controls.
• Support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.
• Work with technology teams to ensure security controls are understood, implemented and operating effectively.
• Provide clear reporting and insight on security risks, control effectiveness, compliance and remediation activity.
• Track remediation actions and work with stakeholders to ensure identified risks and control gaps are addressed.
• Support the continuous improvement of security governance, risk and control processes across the European IT function.
• Build strong relationships with technical and business stakeholders, acting as a trusted partner on security risk and governance matters.