About this Global Digital & IT Risk Manager role at Rolls-Royce
Job Description
Global Digital & IT Risk Manager
Derby
Full time
Why join Rolls-Royce?
At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting, and connecting people everywhere.
By joining Rolls-Royce, you'll have the opportunity to work on world-class solutions, supported by a culture that believes individuality is our greatest strength, and all perspectives, experiences and backgrounds help us innovate and enable our high-performance culture.
Position Summary
An exciting opportunity has arisen for an Global Digital & IT Risk Manager to join our Digital & IT team in Derby.
The Global Digital & IT Risk Manager is responsible for strengthening the way Digital & IT risks are identified, assessed, prioritised, treated, monitored, and reported across a complex, highly regulated aerospace and defence organisation.
Supporting the VP Digital Risk & Compliance, this role will lead an interactive an engaging risk management process that brings risk conversations to life, challenges assumptions, and helps leaders focus on the risks that matter most. You will work with Digital & IT, cyber security, engineering, business, legal, assurance, and regional stakeholders to translate risk insight into clear ownership, proportionate action, and measurable risk reduction.
The role has a global remit and will help embed a consistent, pragmatic, and forward-looking approach to risk management across different businesses, technologies, jurisdictions, and security environments. It will provide constructive challenge, support informed decision-making, improve the quality and timeliness of risk treatment, and ensure that material Digital & IT risks are clearly understood and escalated through the appropriate governance forums.
What you will be doing:
- Lead the operation and continuous improvement of the Digital & IT risk management framework, ensuring alignment with organisational risk appetite, enterprise risk processes, regulatory obligations, and recognised industry practices.
- Create an interactive and engaging risk process that focuses attention on the risks that matter most.
- Facilitate high-impact risk workshops that encourage open discussion, constructive challenge, and clear decisions.
- Partner with risk and action owners to define practical treatment plans, milestones, target risk positions, and success measures that deliver demonstrable risk reduction.
- Maintain a clear view of the global Digital & IT risk profile, including material exposures, emerging themes, and interdependencies, overdue actions, and areas where exposure may be moving outside agreed appetite or tolerance.
- Produce timely, concise, decision-focused risk reporting, dashboards, heat maps, trend analysis, and executive insights for senior leadership and governance committees, clearly setting out exposure, movement, action, and decisions required.
- Work closely with cyber security, architecture, service management, resilience, data, privacy, compliance, audit, engineering, procurement, and programme teams to integrate risk management into strategic planning, investment, change, supplier, and operational decisions.
- Promote consistent, high-quality risk assessments supported by clear evidence and effective controls.
- Anticipate emerging technology, cyber, geopolitical, supply chain, regulatory, and resilience risks through horizon scanning and scenario analysis.
- Build risk capability and culture through coaching, collaboration, practical guidance, data, automation, and appropriate AI-enabled tools.
Preferred requirements:
- Significant experience in Digital & IT, cyber, technology, operational, or enterprise risk management within a large, global, and highly regulated organisation.
- A strong track record of turning risk management into an engaging, valued business process that improves decisions, creates ownership, drives tangible risk outcomes/ risk reduction.
- Demonstrated ability to facilitate effective risk conversations and workshops with senior leaders, technical specialists, programme teams, and business stakeholders across cultures, functions, and geographies.
- Practical experience of risk identification, assessment, control evaluation, treatment planning, risk acceptance, escalation, monitoring, aggregation, and executive reporting.
- Ability to distinguish material risk from operational noise, connect technology exposure to business outcomes, and provide balanced challenge without unnecessary bureaucracy.
- Strong knowledge of Digital & IT risk, including cyber security, cloud and infrastructure, identity and access, data, resilience, third-party and supply chain, software and product, change, obsolescence, and emerging technology risks.
- Working knowledge of relevant frameworks, including ISO 31000, ISO 27001, NIST, and COBIT.
- Experience using risk appetite, key risk indicators, control effectiveness, scenarios, dashboards, and executive reporting.
- Confidence engaging with senior stakeholders and governance forums, combined with the judgement to challenge constructively, listen to different viewpoints, and build trusted relationships.
Regional Benefits
- Generous Annual Leave
- Retirement Savings through the Rolls-Royce Retirement Savings Trust
- Group Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-Royce
- Group Income Protection provides an income in the event that you are unable to work due to illness or injury
- Your Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free! Rolls-Royce | Your Shares: Matched
- Digital GP provides a convenient way for you to access GP consultations
Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient, and growing company. Join us, and it can be your future vision too.
Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.
Please be aware that the priority will be given to employees identified as being at high risk. The professional level and salary of the position will be dependent on the skills and experience of the successful candidate but is anticipated to be level C.
This job is advertised at the grades shown, and this is the desired operating level for this role. We encourage applications from candidates with relevant experience from any grade.
It is advised that you inform your current manager of your application for this role.
Grade: Level C
Closing Date:10.11.2026
For further information please contact: [email protected]
