Hybrid GRC Manager: Information Security & Compliance

Virgin Atlantic; Crawley; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Virgin Atlantic is seeking a Governance, Risk & Compliance (GRC) Manager to lead information security governance, risk assessment and regulatory compliance. You will shape policies and controls, work with Information Security, Technology and Internal Audit, and guide risk-informed decisions across the business.

You'll build robust risk reporting, oversee third‑party security, support audits, and champion continuous improvement of GRC frameworks while aligning with aviation regulatory

Qualifications

• Proven experience in Information Security Governance, Risk & Compliance.
• Knowledge of PCI DSS, COBIT, privacy legislation and aviation cyber regulations.
• Experience assessing security controls and supporting audits.
• Excellent communication and stakeholder management skills.
• Professional certification such as CRISC, CISA or CISM is important.

Responsibilities

• Ensure information security governance, risk and compliance activities are effective and aligned.
• Identify, assess and monitor information security risks with stakeholders.
• Oversee compliance with key standards including PCI DSS and support audits.
• Assess third‑party security risks with technology and suppliers.
• Produce clear risk and compliance reporting for senior stakeholders.
• Champion continuous improvement across GRC processes and reporting.

Skills

Information Security Governance

Risk Management

Regulatory Compliance

Security Frameworks

Communication & Influence

Analytical Thinking

Stakeholder Management

Education

CRISC / CISA / CISM certification

Tools

PCI DSS

COBIT

CAP1753

Job description

Virgin Atlantic is seeking a Governance, Risk & Compliance (GRC) Manager to lead information security governance, risk assessment and regulatory compliance. You will shape policies and controls, work with Information Security, Technology and Internal Audit, and guide risk-informed decisions across the business.

You'll build robust risk reporting, oversee third‑party security, support audits, and champion continuous improvement of GRC frameworks while aligning with aviation regulatory