Cybersecurity Controls Assessor

Job Title: Cyber Controls Assessor

Working Pattern: Full-time

Working location: Indianapolis, IN (Hybrid Schedule)

We are seeking a Cyber Controls Assessor to plan and execute security control assessments aligned with CMMC and/or NIST SP 800-53. This role evaluates the design and operating effectiveness of security controls, validates evidence, documents results, and partners with technical and business stakeholders to reduce risk and strengthen compliance—especially in environments supporting U.S. DoD and federal requirements. Experience in the aerospace industry or working with DoD / U.S. federal government programs is a strong plus.

Why Rolls-Royce?

Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount.

We are proud to be a force for progress, powering, protecting and connecting people everywhere.

We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey.

Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive.

Be part of a team that sets the industry standard and drives groundbreaking solutions.

At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference.

Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics.

What you will be doing

With this attractive opportunity you will get a chance to:

• Conduct security control assessments against CMMC and/or NIST SP 800-53 (and related standards as applicable).
• Plan assessment activities: scope, methodology, schedules, evidence requests, interviews, and sampling.
• Evaluate control implementation and effectiveness through documentation review, technical validation, and stakeholder walkthroughs.
• Collect, validate, and organize assessment evidence; maintain clear traceability from requirements to test results.
• Produce assessment deliverables such as control test plans, assessment reports, findings/risk statements, POA&Ms, and executive summaries.
• Identify control gaps and provide practical remediation recommendations aligned to risk and operational constraints.
• Partner with engineering, IT, security, and program teams to validate remediation and perform follow-up testing.
• Support governance activities including policy/standard updates, risk register inputs, and continuous monitoring improvements.
• Contribute to audit readiness and compliance support for federal/DoD-aligned environments (e.g., SSP/assessment artifacts as relevant).
• Maintain professional documentation standards and ensure consistent assessment quality across programs.

Who we’re looking for:

At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles.

Basic Requirements:

• Associate’s degree in Information Technology, Cybersecurity, Information Systems or and 7+ years of relevant IT experience, OR
• Bachelor’s degree in Information Technology, Cybersecurity, Information Systems and 5+ years of relevant IT experience, OR
• Master’s degree in Information Technology, Cybersecurity, Information Systems, and 3+ years of relevant IT experience, OR
• PhD and no years of experience, OR
• 9+ years of experience in lieu of degree

Preferred Requirements:

• Experience working on NIST RMF or controls assessment
• Experience as a SOC Security Analyst and familiarity with industry leading security products such as SIEMs and networking mapping, vulnerability scanning and packet capture and data analytics tools
• Experience of network anomaly detection using traffic analysis or network intruder detection systems
• A basic understanding of the cyber kill chain in relation to Advanced Persistent Threats (APTs)
• Experience and knowledge of threat actor tactics, techniques and procedures, vulnerabilities, attacks and countermeasures.
• Experience of presenting on cyber security issues

What we offer

We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts.

Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office or home.  It’s a locally managed and flexed informal discretionary arrangement.  As a minimum we’re all expected to attend the workplace for collaboration and other specific reasons, on average three days per week.

Relocation assistance is available for this position.

Global Grade Level C

Closing date: March 18th , 2026

Information Technology $114,400 - $185,900-Annually Indianapolis, IN

Benefits

Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements.