Crypto Custodian

The Crypto Custodian is accountable for the secure handling, storage, accounting, and distribution of cryptographic materials across the Defence organisation. The role provides leadership and governance for crypto delegates, oversight of crypto suppliers, and assurance to senior stakeholders that cryptographic assets are managed in full compliance with UK national standards, MOD policies, and corporate requirements. Provide SME guidance to end users and business stakeholders. This role requires travel to secure Defence and supplier facilities. UK national security clearance (Developed Vetting) is a requirement. The role is designated as a position of trust; strict adherence to confidentiality and integrity is mandatory.

• 
  
• Custodial & Security Duties: Creates and manages the crypto plan (Policy, registers, audits, incident process, governance).
  
• Management of cryptographic items: controlling, storing, accounting for, and disposing of cryptographic material (physical and digital) throughout its lifecycle; implementing and enforcing security measures to protect against compromise or misuse; maintaining accurate records, inventories, and logs in line with national and organisational requirements; briefing, debriefing, and training users to ensure they understand crypto responsibilities.
  
• Ensures Crypto environments and assets standards are adhered to and audited.
  
• Leadership & Oversight: Leading and directing crypto delegates, ensuring effective tasking, compliance, and succession planning; acting as the accountable owner of crypto accounts, delegating responsibilities where appropriate; oversight of cryptographic suppliers, ensuring they comply with security, contract, and regulatory obligations; establishing clear governance processes, escalation routes, and assurance checks across the crypto domain.
  
• Compliance, Assurance & Risk: Ensuring adherence to JSP 440, JSP 490, DEFSTAN 05-138, SDIP27/29 and other relevant MOD/NCSC guidance; supporting accreditation and assurance activities for cryptographic systems; leading internal audits and facilitating external inspections, addressing findings and implementing corrective actions; owning the risk register for cryptographic assets and reporting into Information Security governance forums; investigating and reporting crypto incidents or compromises, liaising with authorities as required.
  
• Stakeholder Engagement: Working closely with business, programme, IT, engineering, and security teams to ensure cryptographic needs are met; acting as the organisational point of contact for MOD, primes, and partners on crypto matters; providing expert advice on confidentiality, integrity, and availability risks linked to cryptographic assets; promoting awareness and training to embed a culture of crypto security across the organisation.
  

• 
  
• Proven experience in cryptographic account management, COMSEC, or related INFOSEC roles.
  
• Strong understanding of UK Defence security frameworks (JSP 440, JSP 490, SDIP27/29 DEFSTAN 05-138).
  
• Experience managing compliance, audits, and incident reporting within a high-security environment.
  
• Demonstrated leadership skills, with experience managing staff or delegates.
  
• Ideally already holds or capable of achieving UK national security clearance (Developed Vetting).
  
• We offer excellent development, a competitive salary and exceptional benefits. These include bonus, employee support assistance and employee discounts.
  

Why Rolls‑Royce? Work with us and we'll welcome you into a culture of caring and belonging where you can be yourself. We will listen first, embrace feedback and act with integrity. We will invest in your continuous learning and development, and make sure you have access to a wide breadth and depth of opportunities to grow your career and make a difference. Being a part of Rolls‑Royce, you'll know we put safety first, do the right thing, keep it simple and make a difference. These principles form our behaviours. They are an essential component of our assessment process and are fundamental qualities that we seek for all roles.