Crypto Custodian

Job Description

Crypto Custodian

Bristol, UK

Bristol on site

We have an exciting opportunity for a Crypto custodian to join our team in Bristol.

The Crypto Custodian is accountable for the secure handling, storage, accounting, and distribution of cryptographic materials across the Defence organisation.

The role provides leadership and governance for crypto delegates, oversight of crypto suppliers, and assurance to senior stakeholders that cryptographic assets are managed in full compliance with UK national standards, MOD policies, and corporate requirements. Provide SME guidance to end users and business stakeholders

This role requires travel to secure Defence and supplier facilities.
UK national security clearance (Developed Vetting) is a requirement. The role is designated as a position of trust; strict adherence to confidentiality and integrity is mandatory.

Why Rolls-Royce?

Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount.

We are proud to be a force for progress, powering, protecting, and connecting people everywhere.

We want to ensure that the excellence and ingenuity that has shaped our history continues into our future, and we need people like you to come and join us on this journey.

We’ll provide an environment of caring and belonging where you can be yourself. An inclusive, innovative culture that invests in you, gives you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference.

What we offer:

We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts.

What you will be doing:

Custodial & Security Duties

Creates and manages the crypto plan (Policy, registers, audits, incident process, governance)

Management of cryptographic items: controlling, storing, accounting for, and disposing of cryptographic material (physical and digital) throughout its lifecycle.

Implementing and enforcing security measures to protect against compromise or misuse.

Maintaining accurate records, inventories, and logs in line with national and organisational requirements.

Briefing, debriefing, and training users to ensure they understand crypto responsibilities.

Ensures Crypto environments and assets standards are adhered to and audited

Leadership & Oversight

Leading and directing crypto delegates, ensuring effective tasking, compliance, and succession planning.

Acting as the accountable owner of crypto accounts, delegating responsibilities where appropriate.

Oversight of cryptographic suppliers, ensuring they comply with security, contract, and regulatory obligations.

Establishing clear governance processes, escalation routes, and assurance checks across the crypto domain.

Compliance, Assurance & Risk

Ensuring adherence to JSP 440, JSP 490, DEFSTAN 05-138, SDIP27/29 and other relevant MOD/NCSC guidance.

Supporting accreditation and assurance activities for cryptographic systems.

Leading internal audits and facilitating external inspections, addressing findings and implementing corrective actions.

Owning the risk register for cryptographic assets and reporting into Information Security governance forums.

Investigating and reporting crypto incidents or compromises, liaising with authorities as required.

Stakeholder Engagement

Working closely with business, programme, IT, engineering, and security teams to ensure cryptographic needs are met.

Acting as the organisational point of contact for MOD, primes, and partners on crypto matters.

Providing expert advice on confidentiality, integrity, and availability risks linked to cryptographic assets.

Promoting awareness and training to embed a culture of crypto security across the organisation.

Who we’re looking for

At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles. For this role you will need to demonstrate understanding of the appliable health and safety standards and we are looking for someone who is/has:

• Proven experience in cryptographic account management, COMSEC, or related INFOSEC roles.
• Strong understanding of UK Defence security frameworks (JSP 440, JSP 490, SDIP27/29 DEFSTAN 05-138).
• Experience managing compliance, audits, and incident reporting within a high-security environment.
• Demonstrated leadership skills, with experience managing staff or delegates.
• Ideally already holds or capable of achieving UK national security clearance (Developed Vetting).

We are an equal opportunities employer. We’re committed to developing a diverse workforce and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives. And the more perspectives we have, the more successful we’ll be. By building a culture of respect and appreciation, we give everyone who works here the opportunity to realise their full potential.

We welcome applications from people with a refugee background.

You can learn more about our global Inclusion strategy at Our people | Rolls-Royce

Job Category

Information Technology