Information Security Analyst

Ready to build your career in information security? At Virgin Atlantic, you’ll help protect the information our customers and colleagues trust us with, while gaining practical experience in cyber governance, risk and compliance.

As our Information Security GRC Analyst – Audit & Compliance, you’ll support security audits, gather evidence and track improvements that help keep our business secure. Working with Information Security specialists, Technology colleagues and external auditors, you’ll develop your understanding of how security standards, including PCI DSS, work in practice.

You'll work under the guidance of a Principal Analyst, gathering and checking evidence and raising issues for decision.

This opportunity could suit someone with an Information Security, Cyber Security or related degree, or someone moving into security from a related field, with some relevant experience gained through a placement, work or study. You’ll bring curiosity, attention to detail and a willingness to learn, with opportunities to contribute from the outset. We'll support you to build your knowledge and work towards relevant professional qualifications.

Day to day

• Help coordinate security audits and PCI DSS compliance activities, along with other aviation and regulatory assessments such as CAA cyber oversight, SWIFT CSP and TSA requirements, bringing together information and evidence from teams across the business.
• Review evidence for accuracy and completeness, flagging gaps and asking questions where something needs clarification.
• Keep audit records, compliance trackers and action logs up to date, following up with colleagues on agreed improvements.
• Support security risk and control assessments, building your knowledge of frameworks such as ISO 27001 and NIST.
• Prepare clear progress updates and evidence packs, helping the team understand audit readiness and outstanding actions.
• Suggest ways to make evidence gathering, reporting and everyday compliance processes more efficient.

About you

You’re keen to turn your knowledge and experience into practical skills. You enjoy getting into the detail, solving problems and working with others, and you’re comfortable asking questions as you

• A degree in Information Security, Cyber Security or a related subject, or equivalent knowledge gained through work or other learning.
• A placement or work experience in information security, risk, compliance, audit, assurance or operational support.
• Strong organisational skills and attention to detail, with the ability to keep accurate records and manage competing deadlines.
• An analytical approach, with the confidence to spot inconsistencies and explain your findings clearly.
• Good communication and digital skills, including using spreadsheets to organise information and track progress.
• You don’t need to be an expert in every framework or tool. Familiarity with PCI DSS, ISO 27001, NIST or GRC tools as would be helpful, but isn’t essential. A degree in Information Security, Cyber Security or a related subject would be an advantage, but equivalent knowledge or experience gained through work or other learning is equally welcome. We’re interested in your potential, your transferable skills and your enthusiasm for developing a career in information security.