Global Head of Cyber Security Strategy & Enterprise Architecture

Job Description

Global Head of Cyber Security Strategy & Enterprise

Full time

Derby/London - Hybrid

Why Rolls-Royce?

Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount. We are proud to be a force for progress, powering, protecting and connecting people everywhere.

We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey.

We’ll provide an environment of caring and belonging where you can be yourself. An inclusive, innovative culture that invests in you, gives you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference.

What we offer

We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts.

Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location.  It’s a locally managed and flexed informal discretionary arrangement.  As a minimum we’re all expected to attend the workplace for collaboration and other specific reasons, on average three days per week.

What you will be doing

The Cyber Security function is accountable for Cyber Security and Information risks management in the Rolls-Royce Group as a Line of Defence 2 (LOD2) function within the IT function.

Cyber Security Strategy & Architecture leader is accountable and the custodian of the Group’s Cyber Security Strategy, and Cyber security architecture to ensure Rolls-Royce group is managing Cyber threats and risk agile, proactive manner whit highest level of Cyber Security & resilience.

The Cyber Security Strategy & Architecture Manager works closely with the Digital IT Strategy & Enterprise Architecture function, Digital Operations, portfolio of suppliers, industry partners. Ensures Cyber Security function’s strategies, standards, processes, guidelines and governance are implemented and in operation consistently across the Group to protect Rolls Royce.

Time to time the Cyber Strategy & Architecture Manager represents and participates in external engagements on behalf of the Rolls-Royce Cyber Security function and provides input to the broader collaboration with its industry peers.

Responsibilities

In this role you will be accountable for Cyber Security strategy, architectural standards, baselines, guidelines are consistently implemented, adopted across to Group to ensure the Group is protected against cyber threats & risks.

• Leading the Cyber Strategy & architecture team and ensures high performance delivery and develops his team

• Accountable for the development of the Cyber Security Strategy with consideration of Business and D&IT strategies, changing threat landscape, technology shifts and the dynamic Cyber Security product & market Changes

• Custodian of the Group’s Cyber Security strategy, must adopt an agile & proactive approach for dynamic response to the changes in threat landscape, regulatory requirements, business need, and identified gaps to protect the Group against Cyber threats and risk

• Accountable for the Cyber Security portfolio and its optimization in line with the strategy and ensures Cyber Security Function has the right capabilities in place for successful protection of the Group against Cyber Threats & Risks

• Leading the Digital Domain cyber-Security capability, and the development of Cyber Security strategies, responses to protect each domain against cyber-threats and risks. Acting as the Domain Architecture Authority

• Accountable for development of prioritised Strategic Cyber Security program, to ensure Cyber Security strategy implemented inclusive of each D&IT domains requirements to have highest-level Cyber Resilience, and consistently deployment, operation across the group.

• In line with the annual planning/budget process, leads the development of Cyber Security investment papers and operational budget requirements to ensure required funds are available.

• Accountable for Annual appraisal & assessment of the strategy & the strategic program

• Accountable for development of Domain Base lines for the Digital Landscape, continuous enhancement of them to respond to changing threat landscape and attack vectors and any keeping the baselines evergreen in line with the product developments

• Accountable for development of Cyber Security Architecture standards, guidelines and their structurally deployment and adoption by the Digital Operations & Application delivery teams

• Developing security architecture solutions and provides Cyber Security Solution architecture for high value Programs

• Advising Group CISO, Cyber Security Leadership team on cyber security strategy, any tactical responses in an agile and proactive manner

• An active & participating member of the Cyber Security LT contributes to the decisions of the function and consequently operates according to the functions strategies, guidelines, standards, policies, processes and behaviours

• A Strategic partner active & Participating member of any Digital Operation Service performance review behalf of the Cyber Security function to ensure Cyber Security assurance supplier delivery and KPI performance and the consistent implementation of the Cyber Security portfolio, strategies, guidelines, standards, policies, processes are adopted

• Leading the Cyber Security procurement process of the Cyber Tooling with the Procurement function for timely and cost-effective delivery based on the commercial strategy

• Leading External Collaboration & relations and provides external in view of Cyber Security industry and market to the Cyber Security Leadership team for continuous agile responses

• Accountable for compliance to strategic industry standards across the group and annual assessment of the level of the maturity and gaps to be dynamically closed with focus, and an agile approach

• Provides Cyber Security Solution architecture for high value Programs

• Establishing structural relationships with Digital Operation and any services party that are part of he EKO systems to ensure Cyber Security strategy and portfolio understood, service Towers are compliance to the standards, baselines and guidelines

• Ensuring Rolls-Royce Cyber security requirements are fit for purpose in an outsourced environment that protect the Group

• Explain complex cyber security strategy and the related strategic programs to executive management for their sponsorship

• Lead multi-specialist content view on Cyber Security strategic program projects

Who we’re looking for:

At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles.

• Substantial experience of IT service and project delivery management

• Substantial understanding of Strategy & architecture discipline

• Substantial experience in leading Global Cyber Security Risk and Compliance programmes

• Substantial experience in working and leading in a matrix structure and able to use influence and being inclusive

• Substantial experience and understanding of the key compliance and regulatory standards in Information Security and Compliance.

• Ability to represent requirements and incidents to senior executives

• Leadership skills and ability to work with remote / virtual teams across diverse cultures.

• Practical experience of managing within an outsourced and global environment.

• Has experience in staff management where influencing, developing/and or motivating people is critical to the achievement of objectives.

• Competent and familiar with the IT Controls Framework practices.

• Competent and familiar of Cyber Security practices and processes

We are an equal opportunities employer. We’re committed to developing a diverse workforce and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives which are crucial to innovation and problem solving. We believe the more diverse perspectives we have, the more successful we’ll be. By building a culture of caring and belonging, we give everyone who works here the opportunity to realise their full potential.

You can learn more about our global Inclusion strategy at Our people | Rolls-Royce

Closing date:

Job Category

Information Technology