Governance and Risk and Compliance Analyst

Virgin Atlantic is recruiting for the role of Governance and Risk and Compliance Analyst. Support security audits, evidence gathering and compliance tracking in information security governance and risk. The role also helps with audit readiness, progress updates and practical work on standards and assessments used across the business.

Role details

• Location: Crawley
• Working pattern: Hybrid
• Job type: Permanent
• Salary: Competitive
• Closing date: 15/11/2026

What you’ll do

• Help coordinate security audits and compliance activities, bringing together information and evidence from across the business.
• Review evidence for accuracy and completeness, and flag gaps where clarification is needed.
• Keep audit records, compliance trackers and action logs up to date, and follow up on agreed improvements.
• Support security risk and control assessments and build knowledge of relevant frameworks.
• Prepare progress updates and evidence packs to show audit readiness and outstanding actions.
• Suggest ways to improve evidence gathering, reporting and everyday compliance processes.

What they’re looking for

• Have a degree in Information Security, Cyber Security or a related subject, or equivalent knowledge gained through work or other learning.
• Bring one to two years’ relevant experience from information security, risk, compliance, audit, assurance or operational support.
• Be organised and detail focused, with the ability to keep accurate records and manage competing deadlines.
• Use analysis and judgement to spot inconsistencies and explain findings clearly.
• Communicate well and use digital skills, including spreadsheets, to organise information and track progress.

Additional role information

• The role includes learning about PCI DSS in practice.
• There are opportunities to work towards relevant professional qualifications.
• The interview includes a short practical exercise reviewing a small set of evidence.