Crypto Custodian

Overview

Crypto Custodian — Bristol, UK (on site)

Role based in Bristol. The Crypto Custodian is accountable for the secure handling, storage, accounting, and distribution of cryptographic materials across the Defence organisation. The role provides leadership and governance for crypto delegates, oversight of crypto suppliers, and assurance to senior stakeholders that cryptographic assets are managed in full compliance with UK national standards, MOD policies, and corporate requirements. Provide SME guidance to end users and business stakeholders. This role requires travel to secure Defence and supplier facilities. UK national security clearance (Developed Vetting) is a requirement. The role is designated as a position of trust; strict adherence to confidentiality and integrity is mandatory.

What you will be doing

Custodial & Security Duties

• Creates and manages the crypto plan (Policy, registers, audits, incident process, governance)
• Management of cryptographic items: controlling, storing, accounting for, and disposing of cryptographic material (physical and digital) throughout its lifecycle.
• Implementing and enforcing security measures to protect against compromise or misuse.
• Maintaining accurate records, inventories, and logs in line with national and organisational requirements.
• Briefing, debriefing, and training users to ensure they understand crypto responsibilities.
• Ensures Crypto environments and assets standards are adhered to and audited

Leadership & Oversight

• Leading and directing crypto delegates, ensuring effective tasking, compliance, and succession planning.
• Acting as the accountable owner of crypto accounts, delegating responsibilities where appropriate.
• Oversight of cryptographic suppliers, ensuring they comply with security, contract, and regulatory obligations.
• Establishing clear governance processes, escalation routes, and assurance checks across the crypto domain.

Compliance, Assurance & Risk

• Ensuring adherence to JSP 440, JSP 490, DEFSTAN 05-138, SDIP27/29 and other relevant MOD/NCSC guidance.
• Supporting accreditation and assurance activities for cryptographic systems.
• Leading internal audits and facilitating external inspections, addressing findings and implementing corrective actions.
• Owning the risk register for cryptographic assets and reporting into Information Security governance forums.
• Investigating and reporting crypto incidents or compromises, liaising with authorities as required.

Stakeholder Engagement

• Working closely with business, programme, IT, engineering, and security teams to ensure cryptographic needs are met.
• Acting as the organisational point of contact for MOD, primes, and partners on crypto matters.
• Providing expert advice on confidentiality, integrity, and availability risks linked to cryptographic assets.
• Promoting awareness and training to embed a culture of crypto security across the organisation.

Position Qualifications

• Proven experience in cryptographic account management, COMSEC, or related INFOSEC roles.
• Strong understanding of UK Defence security frameworks (JSP 440, JSP 490, SDIP27/29 DEFSTAN 05-138).
• Experience managing compliance, audits, and incident reporting within a high-security environment.
• Demonstrated leadership skills, with experience managing staff or delegates.
• Ideally already holds or capable of achieving UK national security clearance (Developed Vetting).

Regional Benefits

• Work in a safety-first environment where doing the right thing and keeping it simple are core principles.
• Join a culture that values making a real difference through your work.
• Develop your career as a mid-career professional blending technical expertise with strong personal qualities.
• Thrive in a role that encourages integrity, accountability, resilience, and curiosity.
• Collaborate and build relationships in a team-focused environment while also working independently.
• Take initiative, lead, and make smart decisions with confidence and support.
• Grow through continuous learning, openness to improvement, and exposure to challenging opportunities.

Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient, and growing company. Join us, and it can be your future vision too.

Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.

Closing Date: 17/02/2026

As part of our selection process, candidates in certain locations may be asked to complete an online assessment, which can include cognitive and behavioural aptitude testing relevant to the role. If required, full instructions for the next steps will be provided.

Job Category Information Technology Posting Date 03 Feb 2026; 00:02 Posting End Date 16 Feb 2026