Expert- Governance, Risk & Compliance

Are you passionate about IT Governance, Risk & Compliance and interested in making a real impact across an international organisation?

Canon EMEA is looking for an Expert - IT Governance, Risk & Compliance to join our IT Risk & Compliance team in Amstelveen. In this highly visible role, you will help shape and manage the IT compliance landscape across the entire Canon EMEA region, ensuring our IT controls, governance frameworks, and compliance processes support reliable financial reporting and effective risk management. The role focuses primarily on IT compliance, audit coordination, IT controls, and continuous improvement initiatives across the organisation.

As a senior individual contributor, you will work closely with internal stakeholders, external auditors, control owners, and senior leadership to strengthen Canon's governance framework, maintain a strong compliance posture, and drive meaningful improvements across the IT organisation.

• Lead key IT Compliance initiatives across Canon EMEA, with a primary focus on J-SOX, IT General Controls (ITGC) and the IT Governance Framework, while also supporting GDPR compliance and other relevant regulatory requirements.
• Act as a trusted advisor and ambassador for IT Governance, Risk, and Compliance across the organisation.
• Drive a risk-aware and control-conscious culture within IT while building strong relationships with business and technology stakeholders.
• Own and continuously improve the IT Risk & Control Matrix (IT RCM), ensuring controls remain relevant, effective, and aligned to business needs.
• Lead internal IT compliance testing activities and act as a key point of contact for internal and external auditors, including challenging audit observations, coordinating responses and driving resolution of audit findings.
• Coordinate audit readiness activities, management testing, evidence collection, and compliance reviews.
• Drive remediation of audit findings and control deficiencies, ensuring sustainable corrective actions are implemented.
• Manage projects and programmes related to governance, audit, compliance, and control improvement initiatives.
• Track, analyse, and report on compliance KPIs, audit metrics, remediation progress, and control effectiveness.
• Drive simplification, standardisation and automation of IT compliance and control processes, identifying opportunities to improve efficiency, consistency and control effectiveness.
• Deliver training, guidance, and coaching to IT teams, control owners, and stakeholders on governance and compliance best practices.
• Support the ongoing evolution of Canon's governance, risk management, and compliance capabilities.

• Bachelor's or Master's degree in Information Technology, Information Security, Business Administration, Audit, Risk Management, or a related discipline.
• 7+ years of relevant experience within IT Governance, IT Risk, IT Compliance, IT Audit, or Internal Controls environments.
• Strong understanding of IT General Controls (ITGC), J-SOX, internal controls, audit practices and IT risk management, with practical experience in key ITGC domains, including user access management, privileged access, change and release management, and application, database and infrastructure controls.
• Experience managing IT Risk & Control Matrix (IT RCM), compliance frameworks, management testing and audit remediation programmes.
• Experience working with internal and external auditors and coordinating audit activities.
• Knowledge of governance frameworks and standards such as COBIT, COSO, ITIL, ISO 27001, and GDPR.
• Strong project and stakeholder management skills with the ability to influence senior stakeholders.
• Excellent communication and presentation skills with the ability to explain complex topics in an engaging and practical manner.
• Strong analytical mindset with the ability to translate findings into actionable recommendations.
• Hands-on, proactive, and collaborative approach to problem solving.

Nice to have

• Experience within an Internal Audit, IT Audit, Risk, or Compliance function. The hiring manager particularly values candidates with an audit background combined with practical IT knowledge.
• Experience managing or supporting IT operations, applications, or technology services.
• Experience with Third-Party Risk Management (TPRM), including reviewing and assessing SOC 1, SOC 2 and ISAE 3402 assurance reports, identifying relevant control requirements and following up on identified gaps.
• Professional certifications such as CISA, CRISC, CISM, CGEIT, CIA, CISSP, CCSP, CIPP/E, CIPM, ISO 27001 Lead Auditor/Implementer, or RE.

Why join Canon?

This is an opportunity to play a key role in safeguarding and strengthening IT compliance across the entire Canon EMEA region. You will work on high-profile governance and compliance initiatives, partner with senior leaders, auditors, and stakeholders, and contribute directly to Canon's ability to maintain trust in its financial reporting and control environment.

You'll join a highly collaborative and international team where relationships matter, ideas are welcomed, and people support one another. The team has a friendly, flat structure and values openness, trust, and professional growth.

What we offer

• Hybrid working policy and flexible working hours
• Performance-based bonus
• 31 days annual leave
• Pension plan
• Learning and development opportunities
• International working environment
• Canon employee discounts
• Travel reimbursement and excellent onsite facilities

Location: Amstelveen, The Netherlands

Grade: 13

Canon EMEA Behaviours:

• Drive for Results

• Focus on the Customer

• Take ownership & accountability

• Act as a team player

• Shows courage & conviction

• People orientated

• Caring for self and others