IT Risk & Compliance Lead – PCI DSS / SOX, Airline Tech

Ryanair - Europe's Favourite Airline; Dublin; On-site; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Pension scheme

Leave entitlement 20 days +

Travel discounts

Job summary

Ryanair Labs is actively seeking an IT Risk & Compliance Consultant to strengthen PCI DSS and SOX programmes across a fast-moving tech environment. You will lead PCI DSS controls, work with QSAs and auditors, and support SOX IT controls across the IT landscape.

The role requires strong framework knowledge (PCI DSS, ISO27001, or NIST), hands-on collaboration with technical teams and business stakeholders, and excellent communication and documentation skills.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity or related field.
• 4+ years in IT risk, compliance or security with hands-on PCI DSS / ISO27001 / NIST.
• Experience supporting SOX IT control activities.
• Certifications such as CISA, CISSP, CCSP, CISM, CRISC or PCI ISA/QSA is required.

Responsibilities

• Lead and maintain PCI DSS compliance programme across systems, processes and designs.
• Coordinate with QSAs and internal teams to embed PCI DSS requirements.
• Support SOX IT control activities and lead implementation of new controls.
• Provide practical advice on control design, risk mitigation and compliance best practices.
• Perform continuous monitoring and risk assessments to ensure controls remain effective.
• Maintain clear compliance documentation, policies and procedures.

Skills

IT risk

Compliance

PCI DSS

SOX controls

IAM

Cloud technologies

Audit coordination

Communication

Reporting

Risk assessment

Education

Bachelor's in IT/CS

Tools

ISO27001

NIST

Job description

Ryanair Labs is actively seeking an IT Risk & Compliance Consultant to strengthen PCI DSS and SOX programmes across a fast-moving tech environment. You will lead PCI DSS controls, work with QSAs and auditors, and support SOX IT controls across the IT landscape.

The role requires strong framework knowledge (PCI DSS, ISO27001, or NIST), hands-on collaboration with technical teams and business stakeholders, and excellent communication and documentation skills.