Information Security GRC Analyst

Job Description:

Salary: Competitive per annum

Hours: 37.5 per week, Monday to Friday

Location: Flexible working with up to 3 days a week in our VHQ, Crawley

Contract: Permanent

Closing Date: 22nd June 2025

At Virgin Atlantic Airways, we believe that everyone can take on the world, and it’s our vision to become the most loved travel company.  As we embark on this next exciting stage of our journey, we’re harnessing our spirit of entrepreneurship and innovation to challenge the status quo.  

 Join our team of forward-thinkers who approach the world with a different lens.  We value individuals who are vocal about driving positive change and are willing to dive into both big and small tasks.  If you’re ready to take your career to new heights, this opportunity is for you.  

In a nutshell

The role is responsible for supporting the governance of information security, ensuring identification, management, and mitigation of information and cyber security risks across VA’s operations, with emphasis on risk assessment, third-party supply chain security, control and compliance effectiveness, and operationalising the GRC strategy by embedding security and compliance considerations into business change initiatives, digital programmes, and transformation projects. The role supports regulatory compliance and operational resilience, aligned with frameworks such as ISO/IEC 27001:2022, NIST CSF, PCI-DSS, and relevant airline information security regulatory requirements.

The role is also responsible for supporting the communication of governance matters with internal and external groups, for example Internal Audit, Technology Governance forums, Safety & Security, Virgin Group or key suppliers.

This makes it a great role for those looking to step into senior GRC or advisory roles.

Day to day

As our Information Security GRC Analyst, you’ll be the trusted advisor guiding our teams through risk, regulation, and resilience. From embedding security into digital transformation to assessing third-party risks and ensuring compliance with ISO 27001, NIST CSF, PCI-DSS, and more — you’ll be the voice of assurance in a fast-moving world.
You’ll work across projects, suppliers, and stakeholders, translating technical controls into business impact, and helping us stay one step ahead of emerging threats.

About you

Hands-on experience with risk assessments, supplier reviews, project advisory and control evaluations
Working knowledge of frameworks like ISO/IEC 27001:2022, NIST CSF, PCI-DSS, and UK GDPR
Strong communication skills — able to engage both technical and non-technical audiences
A collaborative mindset and a passion for making security a business enabler
Certifications like CISA, CRISC, or ISO 27001 Lead Implementer are a plus — but what matters most is your drive to make a difference.

Why This Role?

This is more than a job — it’s a launchpad. Whether you’re looking to grow into a senior GRC or advisory role, or want to make a real impact in a regulated, high-trust environment, this is your opportunity to lead from the front.

Our recipe for leadership

At Virgin Atlantic, our leaders empower teams to thrive through collaboration, innovation, and excellence. Explore our Leadership Recipe and discover the 20 core ingredients that define what it means to lead with us, driving our mission to be the most loved travel company and achieve sustainable profit. Want to learn more? Click here

Be yourself

Our customers come from all walks of life and so do our colleagues. That’s why we’re proud to be an equal opportunity employer and actively encourage applications from all backgrounds. At Virgin Atlantic, we believe everyone can take on the world - no matter your age, gender, gender identity, gender expression, ethnicity, sexual orientation, disabilities, religion, or beliefs. We celebrate difference and everything that makes our colleagues unique by upholding an inclusive environment in which we can all thrive. So that everyone at Virgin Atlantic can be themselves and know they belong.

To make your journey with us accessible and individual to you, we encourage you to let us know if you’d like a little extra help with your application, or if you have any individual requirements at any stage along your recruitment journey. We are here to support you, so please reach out to our team, (recruitmentfly.virgin.com) feeling confident that we’ve got your individual considerations covered.

Job Ident #: 2699

Company Details

Virgin Atlantic

Fleming Way
Crawley, England United Kingdom, International RH10 9DF International
www.virginatlantic.com/us/en

Virgin Atlantic uses a mixed fleet of Airbus and Boeing wide-body aircraft and operates to destinations in North America, the Caribbean, Africa, the Middle East and Asia from its main hub at London–Heathrow, and its secondary hub at Manchester

(Job and company information not to be copied, shared, scraped, or otherwise disseminated/distributed without explicit consent of JSfirm, LLC)

Job Info

Location

Crawley , England, United Kingdom

Type

Permanent

Company Details

Virgin Atlantic

Fleming Way
Crawley, England United Kingdom, International RH10 9DF International
www.virginatlantic.com/us/en