# Governance and Risk and Compliance Analyst

**Company**: Virgin Atlantic
**Location**: Crawley, West Sussex
**Work arrangement**: hybrid
**Experience**: entry
**Job type**: full-time
**Salary**: Competitive
**Category**: Security
**Industry**: Technology

**Apply**: https://iagime.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/640?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/governance-and-risk-and-compliance-analyst-f9d610fa-b62/

## Description

We're seeking a Governance and Risk and Compliance Analyst to join our Information Security team at Virgin Atlantic. As our Information Security GRC Analyst – Audit & Compliance, you'll support security audits, gather evidence and track improvements that help keep our business secure. Working with Information Security specialists, Technology colleagues and external auditors, you'll develop your understanding of how security standards, including PCI DSS, work in practice.

**Day to day**

- Coordinate security audits and PCI DSS compliance activities, along with other aviation and regulatory assessments.

- Review evidence for accuracy and completeness, flagging gaps and asking questions where something needs clarification.

- Keep audit records, compliance trackers and action logs up to date, following up with colleagues on agreed improvements.

- Support security risk and control assessments, building your knowledge of frameworks such as ISO 27001 and NIST.

- Prepare clear progress updates and evidence packs, helping the team understand audit readiness and outstanding actions.

- Suggest ways to make evidence gathering, reporting and everyday compliance processes more efficient.

**About you**

- Degree in Information Security, Cyber Security or a related subject, or equivalent knowledge gained through work or other learning.

- One to two years’ relevant experience, which could include a placement or work in information security, risk, compliance, audit, assurance or operational support.

- Strong organisational skills and attention to detail, with the ability to keep accurate records and manage competing deadlines.

- Analytical approach, with the confidence to spot inconsistencies and explain your findings clearly.

- Good communication and digital skills, including using spreadsheets to organise information and track progress.

**Benefits**

- Opportunities to contribute from the outset

- Support to build your knowledge and work towards relevant professional qualifications

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Information Security
- Cyber Security
- PCI DSS
- ISO 27001
- NIST
- GRC tools

---

Source: [Apply at iagime.fa.ocs.oraclecloud.com](https://iagime.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/640?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)