Cyber Security Risk and Compliance Manager

Rolls-Royce; Bristol; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

An exciting opportunity for a Cyber Security Risk and Compliance Manager to join Rolls-Royce's Defence Cyber Security Team in Bristol. The role involves defining cyber risk management methodologies, ensuring compliance, and coordinating audits. Applicants should have relevant certifications and a deep understanding of global defence cyber requirements.

Benefits

Competitive salary

Bonus structure

Employee support assistance

Employee discounts

Continuous learning and development

Qualifications

• Current industry certification required: CRISC, CGRC, CISM, CISA.
• Degree level education in IT or Security, or equivalent qualification.
• Knowledge of global Defence cyber requirements including Cyber Essentials, NIST, DEFARS.

Responsibilities

• Define methodology for cyber risk management in Defence.
• Manage coordination and reporting of security assurance, KPIs, metrics.
• Coordinate regulatory compliance management and provide independent assurance.

Skills

Risk Management

Compliance Management

Interpersonal Skills

Communication

Education

IT or Security associated degree

CRISC, CGRC, CISM, CISA certification

Job description

Social network you want to login/join with:

Cyber Security Risk and Compliance Manager, Bristol

col-narrow-left

Client:

Rolls-Royce

Location:

Bristol, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

e1a20f0400b2

Job Views:

4

Posted:

02.06.2025

Expiry Date:

17.07.2025

col-wide

Job Description:

Description

Cyber Security Risk and Compliance Manager

Full Time

Bristol

Why Rolls-Royce?

An exciting opportunity has arisen for a Cyber Security Risk and Compliance Manager to join our Defence Cyber Security Team based in Bristol.

Reporting to the Head of Cyber Security for Rolls-Royce Defence, the role will deliver and evolve active risk management practice and maintain an evergreen compliance capability to meet our customer expectations throughout the world.

At Rolls-Royce, we pioneer the power that matters to our customers, to society and to the planet.

Work with us and we’ll welcome you into an inclusive culture, one that invests in your continuous learning and development, and gives you access to a wide breadth and depth of experience.

We offer excellent development, a competitive salary and remarkable benefits. These include bonus, employee support assistance and employee discounts.

Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home or another remote location.It’s a locally managed and flexed informal discretionary arrangement. As a minimum we’re all expected to attend the workplace for collaboration and other specific reasons, on average three days per week.

What you will be doing:

• Define methodology for cyber risk management in Defence.
• Partner with team members, key customers, partner companies and stakeholders to deliver and improve cyber security risk management.
• Manage coordination and reporting of security 2nd line cyber assurance, KPIs and metrics.
• Coordinate principle risk management across the Defence businesses, integrating with the overall Defence risk function.
• Coordinate regulatory cyber compliance management across the Defence function integrating with the overall Defence compliance function and provide independent assurance.
• Coordinate with external audits to ensure compliance with industry standards and customer satisfaction. Be the point of contact for audit related issues and facilitate timely resolutions for problems highlighted.
• Work alongside IT and business stakeholders to implement and operate security controls.

Who we are looking for?

• A current industry certification such as CRISC, CGRC, CISM, CISA.
• IT or Security associated degree level education or alternative equivalent qualification.
• Knowledge and experience of global Defence cyber requirements - Cyber Essentials, NIST, DEFARS, CMMC, DEFCONs, NATO.
• Broad knowledge of risk management principles, tools and techniques.
• Experience of cyber security audit, compliance practice and risk management
• A current understanding of cyber security risk and compliance trends and a drive to maintain this.
• Excellent interpersonal skills as well as both written and verbal communication and presentation skills to influence through persuasion in a formal context.

We are an equal opportunities employer. We’re committed to developing a diverse team and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives. And the more perspectives we have, the more successful we’ll be. By building a culture of respect and appreciation, we give everyone who works here the opportunity to realise their full potential.

We welcome applications from people with a refugee background.

You can learn more about our global Inclusion strategy at

This role requires the successful candidate to obtain SC clearance upon appointment and future DV clearance as required.