It’s time to go places

Description

Ryanair Labs are currently recruiting for an IT Risk and Compliance Consultant to join Europe’s Largest Airline Group!

This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years.

Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe’s Leading Travel Experience for our customers.

The Role.

We are looking for an experienced IT Risk & Compliance professional to strengthen our PCI DSS and SOX compliance programmes across a fast‑moving technology environment. You will take a lead role in maintaining PCI DSS compliance and supporting key SOX IT control activities across our IT landscape. 

This role suits someone with strong technical knowledge of at least one major security framework (PCI DSS, ISO27001, or NIST) and hands‑on experience working with technical teams, business stakeholders, and audit teams. 

Responsibilities.

• Lead and maintain our PCI DSS compliance programme, including control operations, evidence management, audit coordination and remediation support.
• Work closely with internal teams and QSAs to ensure PCI DSS requirements are embedded into systems, processes and technical designs.
• Support SOX IT control activities and lead the implementation of new controls where required.
• Provide practical advice to IT and engineering teams on control design, risk mitigation and compliance best practices.
• Perform continuous monitoring and ongoing risk assessments to ensure controls remain effective.
• Maintain clear, concise compliance documentation, policies and procedures. 

Requirements

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
• 4+ years of relevant experience in IT risk, compliance or security, with hands‑on work in PCI DSS / ISO27001 / NIST, and at least 3 years supporting SOX IT control activities.
• Strong understanding of IT general controls, cloud technologies, IAM, and change/release processes.
• Experience working with internal and external auditors.
• Strong communication and reporting skills, with the ability to work effectively with technical teams.
• One or more relevant certifications such as CISA, CISSP, CCSP, CISM, CRISC, PCI ISA/QSA, or PCI‑P is required. 

Nice to have: 

• Experience with control automation or leveraging AI tools to improve compliance efficiency is a strong plus. 

Benefits

Competencies