Crypto Custodian

Job Description

Crypto Custodian

Bristol UK

Bristol on site

What you will be doing:

The Crypto Custodian is accountable for the secure handling storage accounting and distribution of cryptographic materials across the Defence organisation.

The role provides leadership and governance for crypto delegates oversight of crypto suppliers and assurance to senior stakeholders that cryptographic assets are managed in full compliance with UK national standards MOD policies and corporate requirements. Provide SME guidance to end users and business stakeholders

This role requires travel to secure Defence and supplier facilities.
UK national security clearance (Developed Vetting) is a requirement. The role is designated as a position of trust; strict adherence to confidentiality and integrity is mandatory.

Responsibilities:

Custodial & Security Duties

Creates and manages the crypto plan (Policy registers audits incident process governance)

Management of cryptographic items: controlling storing accounting for and disposing of cryptographic material (physical and digital) throughout its lifecycle.

Implementing and enforcing security measures to protect against compromise or misuse.

Maintaining accurate records inventories and logs in line with national and organisational requirements.

Briefing debriefing and training users to ensure they understand crypto responsibilities.

Ensures Crypto environments and assets standards are adhered to and audited

Leadership & Oversight

Leading and directing crypto delegates ensuring effective tasking compliance and succession planning.

Acting as the accountable owner of crypto accounts delegating responsibilities where appropriate.

Oversight of cryptographic suppliers ensuring they comply with security contract and regulatory obligations.

Establishing clear governance processes escalation routes and assurance checks across the crypto domain.

Compliance Assurance & Risk

Ensuring adherence to JSP 440 JSP 490 DEFSTAN 05-138 SDIP27/29 and other relevant MOD/NCSC guidance.

Supporting accreditation and assurance activities for cryptographic systems.

Leading internal audits and facilitating external inspections addressing findings and implementing corrective actions.

Owning the risk register for cryptographic assets and reporting into Information Security governance forums.

Investigating and reporting crypto incidents or compromises liaising with authorities as required.

Stakeholder Engagement

Working closely with business programme IT engineering and security teams to ensure cryptographic needs are met.

Acting as the organisational point of contact for MOD primes and partners on crypto matters.

Providing expert advice on confidentiality integrity and availability risks linked to cryptographic assets.

Promoting awareness and training to embed a culture of crypto security across the organisation.

Why Rolls-Royce

Work with us and well welcome you into a culture of caring and belonging where you can be yourself. We will listen first embrace feedback and act with integrity. We will invest in your continuous learning and development and make sure you have access to a wide breadth and depth of opportunities to grow your career and make a difference.

We offer excellent development a competitive salary and exceptional benefits. These include bonus employee support assistance and employee discounts.

Hybrid working is a way in which our people can balance their time between the office home or another remote location. Its a locally managed and flexed informal discretionary arrangement. As a minimum were all expected to attend the workplace for collaboration and other specific reasons on average three days per week. Discover more on our GBS Service Portal about hybrid working.

Who were looking for:

Being a part of Rolls-Royce youll know we put safety first do the right thing keep it simple and make a difference. These principles form our behaviours. They are an essential component of our assessment process and are fundamental qualities that we seek for all roles.

• Proven experience in cryptographic account management COMSEC or related INFOSEC roles.
• Strong understanding of UK Defence security frameworks (JSP 440 JSP 490 SDIP27/29 DEFSTAN 05-138).
• Experience managing compliance audits and incident reporting within a high-security environment.
• Demonstrated leadership skills with experience managing staff or delegates.
• Ideally already holds or capable of achieving UK national security clearance (Developed Vetting).

Join us & help Rolls-Royce to become a high-performing competitive resilient business.

Please be aware that the priority will be given to employees identified as being at high risk.

The professional level and salary of the position will be dependent on the skills and experience of the successful candidate but is anticipated to be Level C.

This job is advertised at the grades shown and this is the desired operating level for this role.

We encourage applications from candidates with relevant experience from any grade.

It is advised that you inform your current manager of your application for this role.

We are an equal opportunities employer. Were committed to developing a diverse workforce and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives. And the more perspectives we have the more successful well be. By building a culture of respect and appreciation we give everyone who works here the opportunity to realise their full potential.

You can learn more about our global Inclusion strategy here.

Grade: Level C

Closing Date: 13/10/2025

Recruiter:

Job Category

Posting Date

Posting End Date