Global Digital & IT Risk Manager

UK Space Jobs; East Midlands; Sur place; GBP 70 000 - 95 000; Plein temps

Avantages offerts par ce poste

Generous Annual Leave

Retirement Savings through the Rolls-R

Group Life Assurance

Group Income Protection

Employees Shares matched

Digital GP

Résumé du poste

Rolls-Royce is seeking a Global Digital & IT Risk Manager to strengthen risk practices across a global, regulated aerospace and defence environment. Based in Derby, the role partners with VP Digital Risk & Compliance to lead risk identification, assessment, and reporting, influencing leadership decisions and ensuring risk reduction across technology, cyber, and operations.

The role requires strong experience in Digital & IT risk, regulatory awareness (ISO/NIST/COBIT), and proven ability to drive

Qualifications

• Significant experience in Digital & IT risk management within a large, global, regulated organisation.
• Ability to turn risk management into a valued business process.
• Experience facilitating risk conversations with senior leaders and cross-functional teams.
• Practical experience across risk identification, assessment, control, treatment, escalation and reporting.

Responsabilités

• Lead the operation and continual improvement of the Digital & IT risk management framework.
• Facilitate risk workshops and drive clear, actionable decisions.
• Define practical treatment plans with milestones and target risk positions.
• Provide timely risk reporting, dashboards, and executive insights for governance committees.
• Collaborate with cyber security, architecture, service management, and programme teams to embed risk management into strategic decisions.
• Coach, guide, and build risk capability and culture across the organisation.

Connaissances

Digital risk management

Cyber security

Executive reporting

Stakeholder engagement

Risk workshops facilitation

Horizon scanning

Risk ownership and governance

Description du poste

Why join Rolls-Royce?

At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting, and connecting people everywhere.

Global Digital & IT Risk Manager

Derby

Full time

Position Summary

An exciting opportunity has arisen for a Global Digital & IT Risk Manager to join our Digital & IT team in Derby.

The Global Digital & IT Risk Manager is responsible for strengthening the way Digital & IT risks are identified, assessed, prioritised, treated, monitored, and reported across a complex, highly regulated aerospace and defence organisation.

Supporting the VP Digital Risk & Compliance, this role will lead an interactive an engaging risk management process that brings risk conversations to life, challenges assumptions, and helps leaders focus on the risks that matter most. You will work with Digital & IT, cyber security, engineering, business, legal, assurance, and regional stakeholders to translate risk insight into clear ownership, proportionate action, and measurable risk reduction.

The role has a global remit and will help embed a consistent, pragmatic, and forward-looking approach to risk management across different businesses, technologies, jurisdictions, and security environments. It will provide constructive challenge, support informed decision-making, improve the quality and timeliness of risk treatment, and ensure that material Digital & IT risks are clearly understood and escalated through the appropriate governance forums.

What You Will Be Doing

• Lead the operation and continuous improvement of the Digital & IT risk management framework, ensuring alignment with organisational risk appetite, enterprise risk processes, regulatory obligations, and recognised industry practices.
• Create an interactive and engaging risk process that focuses attention on the risks that matter most.
• Facilitate high-impact risk workshops that encourage open discussion, constructive challenge, and clear decisions.
• Partner with risk and action owners to define practical treatment plans, milestones, target risk positions, and success measures that deliver demonstrable risk reduction.
• Maintain a clear view of the global Digital & IT risk profile, including material exposures, emerging themes, and interdependencies, overdue actions, and areas where exposure may be moving outside agreed appetite or tolerance.
• Produce timely, concise, decision-focused risk reporting, dashboards, heat maps, trend analysis, and executive insights for senior leadership and governance committees, clearly setting out exposure, movement, action, and decisions required.
• Work closely with cyber security, architecture, service management, resilience, data, privacy, compliance, audit, engineering, procurement, and programme teams to integrate risk management into strategic planning, investment, change, supplier, and operational decisions.
• Promote consistent, high-quality risk assessments supported by clear evidence and effective controls.
• Anticipate emerging technology, cyber, geopolitical, supply chain, regulatory, and resilience risks through horizon scanning and scenario analysis.
• Build risk capability and culture through coaching, collaboration, practical guidance, data, automation, and appropriate AI-enabled tools.

Preferred Requirements

• Significant experience in Digital & IT, cyber, technology, operational, or enterprise risk management within a large, global, and highly regulated organisation.
• A strong track record of turning risk management into an engaging, valued business process that improves decisions, creates ownership, drives tangible risk outcomes/ risk reduction.
• Demonstrated ability to facilitate effective risk conversations and workshops with senior leaders, technical specialists, programme teams, and business stakeholders across cultures, functions, and geographies.
• Practical experience of risk identification, assessment, control evaluation, treatment planning, risk acceptance, escalation, monitoring, aggregation, and executive reporting.
• Ability to distinguish material risk from operational noise, connect technology exposure to business outcomes, and provide balanced challenge without unnecessary bureaucracy.
• Strong knowledge of Digital & IT risk, including cyber security, cloud and infrastructure, identity and access, data, resilience, third-party and supply chain, software and product, change, obsolescence, and emerging technology risks.
• Working knowledge of relevant frameworks, including ISO 31000, ISO 27001, NIST, and COBIT.
• Experience using risk appetite, key risk indicators, control effectiveness, scenarios, dashboards, and executive reporting.
• Confidence engaging with senior stakeholders and governance forums, combined with the judgement to challenge constructively, listen to different viewpoints, and build trusted relationships.

Regional Benefits

• Generous Annual Leave
• Retirement Savings through the Rolls-Royce Retirement Savings Trust
• Group Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-Royce
• Group Income Protection provides an income in the event that you are unable to work due to illness or injury
• Your Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free! Rolls-Royce | Your Shares: Matched
• Digital GP provides a convenient way for you to access GP consultations

Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient, and growing company. Join us, and it can be your future vision too.

Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.

Closing Date

10.11.2026

Job Category

Information Technology

Posting Date

27 Oct 2026; 00:10

Posting End Date

10 Nov 2026