Information Assurance Specialist

Rolls-Royce; Derby; On-site; GBP 45,000 - 70,000; Full time

Job summary

An established industry player seeks an Information Assurance Specialist to enhance cybersecurity within their Cyber Security, Risk and Compliance team. This role involves developing policies, advising on compliance, and managing cybersecurity risks. Join a forward-thinking company committed to innovation and excellence, where your contributions will help shape the future of integrated power solutions. You will thrive in a supportive environment that values diversity and encourages personal growth, making a significant impact in a critical field.

Benefits

Competitive Salary

Bonuses

Employee Support

Discounts

Qualifications

• Good knowledge of information systems practices and applications.
• Understanding of IT security compliance with a pragmatic approach.

Responsibilities

• Assist in developing Information Security policies aligned with ISO27000.
• Review compliance with security policies and assess configurations.
• Advise users on risk management and promote security initiatives.

Skills

Information Security Principles

IT Security Compliance

Effective Communication

Cloud Technologies

Risk Management

Education

Relevant IT Security Qualifications

Job description

Job Description

Information Assurance Specialist

Full Time

Location: Derby

Rolls-Royce offers an excellent opportunity for an Information Assurance Specialist to join our Cyber Security, Risk and Compliance team. In this role, you will provide Information Assurance through the application of policy, standards, and best practices to support IT product teams. You will also collaborate with other IA specialists to develop and document a unified approach to cybersecurity issues.

At Rolls-Royce, innovation is in our DNA. We pioneer integrated power and propulsion solutions across multiple markets. We embrace data and technology, aiming to be Digital First in everything we do.

Why Rolls-Royce?

Rolls-Royce is one of the most enduring and iconic brands globally, at the forefront of innovation for over a century. We design, build, and service systems that provide critical power where safety and reliability are paramount. We are committed to progress, powering, protecting, and connecting people worldwide.

We strive to ensure that our tradition of excellence and ingenuity continues into the future. Join us to be part of this journey. We offer a caring, inclusive environment where you can be yourself. Our culture is innovative and invests in your growth, providing opportunities to make a difference.

What we offer:

We provide excellent development opportunities, a competitive salary, and benefits including bonuses, employee support, and discounts.

What you will be doing:

• Assist in developing and defining Information Security policies, standards, guidelines, and procedures aligned with ISO27000.
• Represent Cyber Security on large projects and within product teams, advising on cybersecurity implementation per policies and standards.
• Participate in initiatives such as University Technology Centres, Research Centres, Joint Ventures, and Supply Chain, providing cybersecurity guidance.
• Review compliance with security policies, assess configurations, and ensure adherence to legal and regulatory requirements.
• Provide authoritative advice on security controls, legislative, and regulatory requirements.
• Advise users on risk management, promote awareness, and support security initiatives.
• Identify, report, and manage cybersecurity risks and concessions.
• Support wider cybersecurity projects as needed.
• Maintain specific security controls to ensure confidentiality, integrity, and availability of information systems.

Who we're looking for

We value safety, integrity, simplicity, and making a difference. Candidates should demonstrate understanding of health and safety standards and possess:

• Good knowledge of information systems practices and applications, with a practical understanding of information security principles.
• Understanding of IT security compliance and a pragmatic approach to standards.
• Effective communication skills and the ability to influence others.
• Relevant IT security qualifications and broad knowledge of security practices.
• Experience or awareness of cloud technologies in enterprise environments.
• Willingness to learn and promote compliance with Product Safety, Data Privacy, and Export Control.

We are committed to diversity and inclusion, welcoming applications from all backgrounds, including refugees. Learn more about our inclusion strategy at Our people | Rolls-Royce.