Global Digital & IT Risk Manager

Rolls--royce; East Midlands; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Annual Leave

Retirement Savings

Group Life Assurance

Group Income Protection

Rolls-Royce Shares Matched

Digital GP

Job summary

Rolls-Royce is seeking a Global Digital & IT Risk Manager in Derby to strengthen risk identification, assessment, treatment, and reporting across our regulated aerospace and defence operations.

You will lead a global risk framework, engage with cyber security, engineering, and governance teams, and deliver risk-informed decisions with measurable reductions. The role emphasizes horizon scanning and proactive risk culture.

Qualifications

• Significant experience in Digital & IT risk within a large, global, highly regulated organisation.
• Strong track record of turning risk management into an engaging, valued business process that improves decisions and risk reduction.
• Ability to facilitate risk conversations and workshops with senior leaders, technical specialists, programme teams, and business stakeholders across cultures.

Responsibilities

• Lead the operation and continuous improvement of the Digital & IT risk management framework.
• Create an interactive and engaging risk process focusing on material risks.
• Facilitate high-impact risk workshops with open discussion and clear decisions.
• Partner with risk and action owners to define practical treatment plans and milestones.
• Produce timely, concise risk reporting, dashboards, heat maps, and executive insights for leadership.

Skills

Digital & IT risk

Stakeholder management

Risk workshops

Horizon scanning

Executive reporting

Education

CRISC certification

ISO 27001 knowledge

Tools

GRC tools

Job description

Job DescriptionGlobal Digital & IT Risk ManagerDerbyFull timeWhy join Rolls-Royce?At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting, and connecting people everywhere.By joining Rolls-Royce, you'll have the opportunity to work on world-class solutions, supported by a culture that believes individuality is our greatest strength, and all perspectives, experiences and backgrounds help us innovate and enable our high-performance culture.Position SummaryAn exciting opportunity has arisen for a n Global Digital & IT Risk Manager to join our Digital & IT team in Derby.The Global Digital & IT Risk Manager is responsible for strengthening the way Digital & IT risks are identified, assessed, prioritised, treated, monitored, and reported across a complex, highly regulated aerospace and defence organisation.Supporting the VP Digital Risk & Compliance, this role will lead an interactive an engaging risk management process that brings risk conversations to life, challenges assumptions, and helps leaders focus on the risks that matter most. You will work with Digital & IT, cyber security, engineering, business, legal, assurance, and regional stakeholders to translate risk insight into clear ownership, proportionate action, and measurable risk reduction.The role has a global remit and will help embed a consistent, pragmatic, and forward-looking approach to risk management across different businesses, technologies, jurisdictions, and security environments. It will provide constructive challenge, support informed decision-making, improve the quality and timeliness of risk treatment, and ensure that material Digital & IT risks are clearly understood and escalated through the appropriate governance forums.What you will be doing:Lead the operation and continuous improvement of the Digital & IT risk management framework, ensuring alignment with organisational risk appetite, enterprise risk processes, regulatory obligations, and recognised industry practices.Create an interactive and engaging risk process that focuses attention on the risks that matter most.Facilitate high-impact risk workshops that encourage open discussion, constructive challenge, and clear decisions.Partner with risk and action owners to define practical treatment plans, milestones, target risk positions, and success measures that deliver demonstrable risk reduction.Maintain a clear view of the global Digital & IT risk profile, including material exposures, emerging themes, and interdependencies, overdue actions, and areas where exposure may be moving outside agreed appetite or tolerance.Produce timely, concise, decision-focused risk reporting, dashboards, heat maps, trend analysis, and executive insights for senior leadership and governance committees, clearly setting out exposure, movement, action, and decisions required.Work closely with cyber security, architecture, service management, resilience, data, privacy, compliance, audit, engineering, procurement, and programme teams to integrate risk management into strategic planning, investment, change, supplier, and operational decisions.Promote consistent, high-quality risk assessments supported by clear evidence and effective controls.Anticipate emerging technology, cyber, geopolitical, supply chain, regulatory, and resilience risks through horizon scanning and scenario analysis.Build risk capability and culture through coaching, collaboration, practical guidance, data, automation, and appropriate AI-enabled tools.Preferred requirements:Significant experience in Digital & IT, cyber, technology, operational, or enterprise risk management within a large, global, and highly regulated organisation.A strong track record of turning risk management into an engaging, valued business process that improves decisions, creates ownership, drives tangible risk outcomes/ risk reduction.Demonstrated ability to facilitate effective risk conversations and workshops with senior leaders, technical specialists, programme teams, and business stakeholders across cultures, functions, and geographies.Practical experience of risk identification, assessment, control evaluation, treatment planning, risk acceptance, escalation, monitoring, aggregation, and executive reporting.Ability to distinguish material risk from operational noise, connect technology exposure to business outcomes, and provide balanced challenge without unnecessary bureaucracy.Strong knowledge of Digital & IT risk, including cyber security, cloud and infrastructure, identity and access, data, resilience, third-party and supply chain, software and product, change, obsolescence, and emerging technology risks.Working knowledge of relevant frameworks, including ISO 31000, ISO 27001, NIST, and COBIT.Experience using risk appetite, key risk indicators, control effectiveness, scenarios, dashboards, and executive reporting.Confidence engaging with senior stakeholders and governance forums, combined with the judgement to challenge constructively, listen to different viewpoints, and build trusted relationships.Regional BenefitsGenerous Annual LeaveRetirement Savings through the Rolls-Royce Retirement Savings TrustGroup Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-RoyceGroup Income Protection provides an income in the event that you are unable to work due to illness or injuryYour Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free! Rolls-Royce | Your Shares: MatchedDigital GP provides a convenient way for you to access GP consultationsOur vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient, and growing company. Join us, and it can be your future vision too.Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.Closing Date:10.11.2026As part of our selection process, candidates in certain locations may be asked to complete an online assessment, which can include cognitive and behavioural aptitude testing relevant to the role. If required, full instructions for the next steps will be provided.Job CategoryInformation TechnologyPosting Date27 Oct 2026; 00:10Posting End Date10 Nov 2026