Hybrid Information Security GRC Manager

Virgin holidays; Crawley; Ibrido; GBP 70.000 - 100.000; Tempo pieno

Descrizione del lavoro

Virgin Atlantic Airways is seeking a Manager – Governance, Risk & Compliance (GRC) to lead information security governance, risk management and regulatory compliance. The role works with Information Security, Technology and Internal Audit to shape policies, controls and governance frameworks, ensuring robust protection and compliance across the business.

The post requires strong stakeholder engagement, clarifying complex security requirements, and championing improvements while supporting secure

Competenze

• Proven experience in Information Security Governance, Risk & Compliance.
• Strong understanding of security frameworks, risk management & regulatory requirements.
• Knowledge of PCI DSS, COBIT, privacy legislation and aviation cyber regulations.

Mansioni

• Maintain security governance, risk & compliance activities.
• Identify, assess and monitor information security risks with stakeholders.
• Oversee audits, compliance with security standards and regulatory requirements.
• Collaborate with Technology and business teams to manage third-party security risks.
• Produce risk and compliance reporting for senior stakeholders.
• Drive continuous improvement of GRC processes and reporting.

Conoscenze

Governance & compliance

Information security

Regulatory requirements

PCI DSS knowledge

CobIT

Security risk assessment

Stakeholder management

Communication

Descrizione del lavoro

Virgin Atlantic Airways is seeking a Manager – Governance, Risk & Compliance (GRC) to lead information security governance, risk management and regulatory compliance. The role works with Information Security, Technology and Internal Audit to shape policies, controls and governance frameworks, ensuring robust protection and compliance across the business.

The post requires strong stakeholder engagement, clarifying complex security requirements, and championing improvements while supporting secure