IT Security Compliance & Reporting Analyst

Salary: £62,000 - 102,000 per year

Requirements:

• We have experience in IT Security, IT Risk, Security Governance or Security Compliance.
• We have experience developing and maintaining security policies, standards, controls and governance documentation.
• We have a strong understanding of security frameworks such as ISO 27001 and NIST CSF.
• We have experience producing security compliance reporting, MI or dashboards, ideally using Power BI.
• We have experience managing or supporting IT/security risk registers and risk assessments.
• We understand IT security controls and disciplines, including vulnerability management, patching, identity and access management, privileged access management and backup governance.
• We can analyse complex information and turn it into clear, actionable insight.
• We have strong communication and stakeholder management skills, with the confidence to engage with both technical specialists and senior stakeholders.
• We take a proactive approach to identifying gaps, risks and opportunities for improvement.
• Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer would be advantageous.

Responsibilities:

• We develop and maintain IT security policies, standards and control requirements, ensuring they remain aligned with business and security needs.
• We build and maintain security compliance dashboards and reporting, using tools such as Power BI to turn data into meaningful insight.
• We monitor, measure and report on IT security compliance across key technology and operational domains.
• We own and maintain the IT Security Risk Register, ensuring risks are clearly documented, assessed and actively managed.
• We facilitate security and technology risk assessments, working with technical teams to identify appropriate and practical mitigation plans.
• We support audit, assurance and compliance activities, including ISO 27001, Cyber Essentials and internal control programmes.
• We translate security frameworks and regulatory requirements into practical, operational standards and controls.
• We analyse security and compliance data to identify trends, gaps and areas requiring attention.
• We produce clear reporting and insight for senior technology and business stakeholders.
• We identify opportunities to improve security governance, reporting, risk management and control effectiveness across the IT function.
• We partner with technical teams to help embed a culture of security, accountability and continuous improvement.

Technologies:

• Cloud
• Support
• Power BI
• Security

More:

We are Ricoh, a global leader in digital services recognised for innovation, sustainability and a people-first culture. We are featured in the Gartner Magic Quadrant, listed in the Global 100 Most Sustainable Companies, and named one of Forbes Worlds Best Employers 2025. We believe people do their best work when they feel valued and supported, and we create inclusive workplaces where you can grow, contribute and make a positive impact while helping build a more sustainable future. This is an IT Security Compliance & Reporting Analyst role within our European IT environment, where you will work across infrastructure, cloud, identity and operational IT teams. You will benefit from our Ricoh Promise, including opportunities to connect globally, grow through learning and mentoring, give back through volunteering and sustainability initiatives, and succeed with fair rewards, flexible working, wellbeing resources and recognition. We are an equal opportunities employer committed to a fair and inclusive recruitment process.

last updated 37 week of 2026