# Governance, Risk and Compliance Manager

**Company**: Virgin Atlantic Airways
**Location**: Crawley, West Sussex
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: Competitive
**Category**: Security
**Industry**: Technology

**Apply**: https://iagime.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/649?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a615a958-7be

## Description

At Virgin Atlantic Airways, we believe that everyone can take on the world, and it's our vision to become the most loved travel company.

As Governance, Risk and Compliance Manager, you'll play a key role in making sure our information security risks are understood, managed and aligned with the standards that protect our business.

**Day to day**

- Ensuring Information Security governance, risk and compliance activities are effective, up to date and aligned with business and regulatory requirements

- Identifying, assessing and monitoring information security risks, working with stakeholders to agree practical actions and ensure risks are appropriately managed

- Overseeing compliance with key security standards and regulations, including PCI DSS, and supporting audits, assurance reviews and the resolution of control gaps

- Working with Technology, business teams and external suppliers to assess third-party security risks, strengthen due diligence and ensure appropriate safeguards are in place

- Producing clear risk and compliance reporting for senior stakeholders, highlighting emerging threats, control weaknesses and opportunities for improvement

- Championing continuous improvement across GRC processes, tools and reporting, helping embed a consistent and proactive approach to information security across the business

**About you**

- Proven experience in Information Security Governance, Risk & Compliance, with a strong understanding of security frameworks, risk management and regulatory requirements

- Knowledge of PCI DSS, COBIT, privacy legislation and relevant information security standards, with awareness of aviation-specific cyber regulations such as CAP1753

- Experience assessing security controls, supporting audits and investigations, identifying risks and working with stakeholders to deliver effective remediation

- Excellent communication and influencing skills, with the confidence to explain complex security requirements clearly, challenge constructively and build relationships across technical and non-technical teams

- Strong analytical and problem-solving skills, with a proactive approach to improving governance processes, managing competing priorities and supporting informed business decisions

A relevant professional certification such as CRISC, CISA or CISM, or an equivalent qualification, is important for this role. Experience within aviation, travel or another highly regulated environment would also be valuable.

**Benefits**

We’re committed to making our recruitment process accessible. If you need reasonable adjustments or additional support, you can let us know in your application.

## Skills

### Required
- Information Security Governance
- Risk & Compliance
- PCI DSS
- COBIT
- privacy legislation
- security frameworks
- risk management
- regulatory requirements

### Nice to have
- CRISC
- CISA
- CISM
- aviation-specific cyber regulations such as CAP1753

---

Source: [Apply at iagime.fa.ocs.oraclecloud.com](https://iagime.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/649?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)