Global Digital & IT Risk Manager

Rolls-Royce; East Midlands; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Generous Annual Leave

Retirement Savings via RR Retirement

Group Life Assurance

Group Income Protection

Your Shares: Matched

Digital GP

Job summary

Rolls-Royce in Derby seeks a Global Digital & IT Risk Manager to strengthen risk identification, assessment, prioritisation, treatment, monitoring and reporting across the organisation. You will drive an engaging risk process with senior leaders, translating risk insights into ownership and actions for measurable reduction.

You will work with cross-functional teams to embed risk management into strategic planning and governance, delivering concise dashboards and horizon scanning across cultures

Qualifications

• Significant experience in Digital & IT risk management within a large, regulated organisation.
• Proven ability to facilitate risk conversations and workshops with senior leaders.
• Ability to translate risk insight into ownership, action plans and monitoring.
• Knowledge of ISO 31000, ISO 27001, NIST and COBIT frameworks.

Responsibilities

• Lead the operation and improvement of the Digital & IT risk management framework.
• Facilitate high-impact risk workshops with open discussion and clear decisions.
• Partner with risk owners to define treatment plans, milestones and success measures.
• Produce timely risk reporting, dashboards and executive insights for governance.
• Collaborate with cyber security, architecture, service management and procurement teams.

Skills

Digital & IT risk

Cyber security

Executive reporting

Stakeholder engagement

Risk workshops

Horizon scanning

Tools

ISO 31000

ISO 27001

NIST

COBIT

Job description

Job Description

Global Digital & IT Risk Manager

Derby

Full time

Why join Rolls-Royce?

At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting, and connecting people everywhere.

By joining Rolls-Royce, you'll have the opportunity to work on world-class solutions, supported by a culture that believes individuality is our greatest strength, and all perspectives, experiences and backgrounds help us innovate and enable our high-performance culture.

Position Summary

An exciting opportunity has arisen for an Global Digital & IT Risk Manager to join our Digital & IT team in Derby.

The Global Digital & IT Risk Manager is responsible for strengthening the way Digital & IT risks are identified, assessed, prioritised, treated, monitored, and reported across a complex, highly regulated aerospace and defence organisation.

Supporting the VP Digital Risk & Compliance, this role will lead an interactive an engaging risk management process that brings risk conversations to life, challenges assumptions, and helps leaders focus on the risks that matter most. You will work with Digital & IT, cyber security, engineering, business, legal, assurance, and regional stakeholders to translate risk insight into clear ownership, proportionate action, and measurable risk reduction.

The role has a global remit and will help embed a consistent, pragmatic, and forward-looking approach to risk management across different businesses, technologies, jurisdictions, and security environments. It will provide constructive challenge, support informed decision-making, improve the quality and timeliness of risk treatment, and ensure that material Digital & IT risks are clearly understood and escalated through the appropriate governance forums.

What you will be doing:

• Lead the operation and continuous improvement of the Digital & IT risk management framework, ensuring alignment with organisational risk appetite, enterprise risk processes, regulatory obligations, and recognised industry practices.
• Create an interactive and engaging risk process that focuses attention on the risks that matter most.
• Facilitate high-impact risk workshops that encourage open discussion, constructive challenge, and clear decisions.
• Partner with risk and action owners to define practical treatment plans, milestones, target risk positions, and success measures that deliver demonstrable risk reduction.
• Maintain a clear view of the global Digital & IT risk profile, including material exposures, emerging themes, and interdependencies, overdue actions, and areas where exposure may be moving outside agreed appetite or tolerance.
• Produce timely, concise, decision-focused risk reporting, dashboards, heat maps, trend analysis, and executive insights for senior leadership and governance committees, clearly setting out exposure, movement, action, and decisions required.
• Work closely with cyber security, architecture, service management, resilience, data, privacy, compliance, audit, engineering, procurement, and programme teams to integrate risk management into strategic planning, investment, change, supplier, and operational decisions.
• Promote consistent, high-quality risk assessments supported by clear evidence and effective controls.
• Anticipate emerging technology, cyber, geopolitical, supply chain, regulatory, and resilience risks through horizon scanning and scenario analysis.
• Build risk capability and culture through coaching, collaboration, practical guidance, data, automation, and appropriate AI-enabled tools.

Preferred requirements:

• Significant experience in Digital & IT, cyber, technology, operational, or enterprise risk management within a large, global, and highly regulated organisation.
• A strong track record of turning risk management into an engaging, valued business process that improves decisions, creates ownership, drives tangible risk outcomes/ risk reduction.
• Demonstrated ability to facilitate effective risk conversations and workshops with senior leaders, technical specialists, programme teams, and business stakeholders across cultures, functions, and geographies.
• Practical experience of risk identification, assessment, control evaluation, treatment planning, risk acceptance, escalation, monitoring, aggregation, and executive reporting.
• Ability to distinguish material risk from operational noise, connect technology exposure to business outcomes, and provide balanced challenge without unnecessary bureaucracy.
• Strong knowledge of Digital & IT risk, including cyber security, cloud and infrastructure, identity and access, data, resilience, third-party and supply chain, software and product, change, obsolescence, and emerging technology risks.
• Working knowledge of relevant frameworks, including ISO 31000, ISO 27001, NIST, and COBIT.
• Experience using risk appetite, key risk indicators, control effectiveness, scenarios, dashboards, and executive reporting.
• Confidence engaging with senior stakeholders and governance forums, combined with the judgement to challenge constructively, listen to different viewpoints, and build trusted relationships.

Regional Benefits

• Generous Annual Leave
• Retirement Savings through the Rolls-Royce Retirement Savings Trust
• Group Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-Royce
• Group Income Protection provides an income in the event that you are unable to work due to illness or injury
• Your Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free! Rolls-Royce | Your Shares: Matched
• Digital GP provides a convenient way for you to access GP consultations

Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient, and growing company. Join us, and it can be your future vision too.

Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.

Closing Date:10.11.2026

As part of our selection process, candidates in certain locations may be asked to complete an online assessment, which can include cognitive and behavioural aptitude testing relevant to the role. If required, full instructions for the next steps will be provided.

Job Category

Information Technology

Posting Date

27 Oct 2026; 00:10

Posting End Date

10 Nov 2026