Senior Information Assurance Specialist

Job Description

Job Title: Senior Information Assurance Specialist

Working Pattern: Fulltime

Working location: Indianapolis, IN

Rolls-Royce offers an excellent opportunity for an Information Assurance Specialist to join our Cyber Security, Risk and Compliance team. In this role you will be providing Information Assurance through the application of policy, standards and best practice to support the IT product teams.

Why Rolls-Royce?

Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount.

We are proud to be a force for progress, powering, protecting and connecting people everywhere.

We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey.

Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive.

At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference.

Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics.

What you will be doing:

With this attractive opportunity you will also be required to work with other IA specialists to ensure a common approach to cyber security issues is developed and documented.

Key Accountabilities:

• Run a large global team
• Ensure your team has coverage for day-to-day challenges by providing direction, support and leadership
• Develop and define Information Security policies, standards, guidelines, and procedure to an agreed framework (ISO27000 / CMMC)
• Provide direction, support and approvals to Cyber Security initiatives and projects, providing advice, guidance and approvals for the implementation of cyber security policies and standards
• Ensure that compliance evidence is maintained against required regulatory standards such as CMMC
• Support the US Defense business and build relationships with US Gov and DiB companies across the US
• Provide authoritative advice, guidance and approvals for the application and operation of all types of security controls including legislative or regulatory requirements
• Lead on the benefits of risk management and reduction and promote awareness in conjunction with the Global Security awareness programmes
• Support the management of Business, EcoSystem and Vendor relationships within Information Security workspace

Basic Qualifications:

• Bachelors Degree in Information Security or Cyber with 8 plus years of experience in Information Security or Cyber
• Masters Degree in Information Security and or Cyber with 6 plus years of experience in Information Security or Cyber
• JD/PhD with 3 years of experience in Information Security or Cyber
• In lieu of degree, 12 plus years of experience in Information Security or Cyber
• In order to be considered for this opportunity, you must be a US Citizen

Preferred Qualifications:

• Degree or MSc in Information Security or equivalent
• CISSP/CISM or equivalent
• Experience in Microsoft Azure
• Results oriented
• Self Starter
• Previous experience leading a regional cyber security team
• Excellent understanding of regional, regulatory and compliance requirements for our US Defense business
• Demonstrable knowledge of information systems practices and applications. Thorough understanding of Rolls-Royce management processes and practical knowledge of the principles of information security
• Understands cyber security compliance practices and acknowledges the need to maintain and practical and pragmatic approach to standards compliance
• Communicates well and has the skill to influence through persuasion in a formal context
• Experience / awareness of cloud technologies and capabilities in an enterprise environment
• Willingness to promote wider compliance requirements such as Product Safety, Data Privacy and Export Control