This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At Virgin Atlantic, we’re committed to keeping our customers, people and operations secure in an increasingly complex digital world. We’re looking for a Senior Manager – Information Security Governance, Risk, Compliance & Identity Governance to lead a critical function at the heart of our cyber security capability. We believe everyone can take on the world. Our ambition is to become the most loved travel company, and we’re using innovation and bold thinking to get there.
Job Responsibility
Lead and develop the Information Security GRC and Identity Governance function, setting direction, priorities and operating model
Own and evolve the information security governance and policy framework, ensuring it aligns to regulatory, audit and business requirements
Oversee enterprise security risk management, ensuring risks are clearly identified, assessed, tracked and treated
Lead audit, compliance and regulatory readiness, ensuring effective engagement, evidence management and remediation governance
Own and mature identity governance, including access governance, privileged access, lifecycle controls and assurance
Provide clear, risk-based reporting and recommendations to senior stakeholders to support informed decision-making
Represent the function in senior forums and act as a delegate for the Head of Information and Cyber Security where required
Requirements
Proven leadership experience in Information Security GRC, security governance or cyber risk within a complex, regulated environment
Strong understanding of frameworks and regulations such as ISO 27001, NIST CSF, PCI-DSS, UK GDPR, NIS/NIS2 and aviation or resilience requirements
Experience leading multi-disciplinary teams, including managers, and driving performance and capability development
Deep knowledge of risk management, control assurance, compliance and governance frameworks
Strong understanding of identity and access governance, including privileged access, segregation of duties and lifecycle controls
Experience supporting audit and regulatory engagements, including remediation and assurance
Ability to influence and challenge senior stakeholders across business and technology in a complex, matrixed environment
Professional certifications such as CISSP, CISM, CRISC or CISA (or equivalent)