Information Security - GRC: Risk and Compliance

View All Jobs Date: 7 May 2026 Location: Description Ryanair Labs are currently recruiting for a Information Security Risk and Compliance Analyst to join Europe’s Largest Airline Group! This is a very exciting time to join Ryanair as we look to expand our operation to 800 aircraft and 300 million guests within the next 10 years. Ryanair Labs is the technology brand of Ryanair. Labs is a state of-the-art digital & IT innovation hub creating Europe's Leading Travel Experience for our customers. The Role: The Governance, Risk & Compliance (GRC) Specialist plays a key role in supporting the organization’s security governance framework, risk management activities, and compliance requirements. This hands‑on role operates in a fast‑paced environment and works closely with teams across the business to maintain risk oversight, ensure up‑to‑date security documentation, support audit readiness, and help drive a strong security‑aware culture. The ideal candidate has practical technical understanding, experience with security standards and regulations, and a strong interest in governance, risk, and compliance. Responsibilities: Support the Governance, Risk & Compliance Program across the organization. Manage and maintain the information security risk register, track remediation progress, and prepare concise risk reporting. Assess security risks with a practical technical understanding and work closely with IT and Engineering teams on mitigation plans. Maintain and update company security documentation, policies, standards, and procedures. Coordinate and prepare evidence for internal and external audits, ensuring accuracy and timely responses. Monitor risk and compliance initiatives, escalate issues when required, and provide regular updates to management. Collaborate with Vulnerability Management and Incident Response teams to ensure visibility of gaps, emerging threats, and required actions. Drive core security awareness activities including onboarding/annual training, internal communications, and phishing simulations. Maintain training and compliance records and support regulatory/audit requirements. Track metrics for all GRC activities and share timely reports with management. Contribute to strengthening governance, compliance, and risk‑aware culture across the organization. Requirements Bachelor's Degree preferred in Information Security, Cybersecurity, Information Technology or Business. Good understanding of information security principles and best-practices. Knowledge of risk management and vulnerability management. Experience working with industry‑standard security frameworks (e.g., NIST, ISO, COBIT). Ability to understand and translate technical impacts to educate the users in line with their day-to-day responsibilities and expertise. Knowledge of aviation regulations such as EASA and ICAO (advantage). Experience with compliance activities including policy management, documentation updates, and audit preparation. Strong ethical values and sense of compliance. Experience with reporting processes and reporting technology. Good written and verbal communication skills in English. Hands‑on background in system infrastructure, security operations, or security engineering. Ability to work effectively in an international, cross‑functional team environment. Benefits Our offer: Contract of employment (permanent after trial period) Hybrid home office (2 days per week from the office, 3 days remote) Discounted and unlimited travel to over 250 destinations Multisport card Private health care Group insurance scheme Possibility to take part in conferences, training and courses - - - and - - - Office located in the city center with a view for an Old Market Square Annual events (i.e. St. Patrick’s Day 🍀) Regular social meetings 🍻 Paid referral system New office building surrounded by great dinettes right in the city centre 🌆 Recruitment process Send us your application in English and let's get started! Here's what you can expect: Phone Call – get to know the Recruiter, and let us learn a bit about you. Technical Interview – dive deeper with our Team to explore your expertise and approach. Final Interview – meeting with the Team Lead, Head of Security Operations, Director of Cybersecurity and Recruiter, combining technical questions and soft skills discussion. Offer – if we’re a match, we’ll present you with an offer and schedule your start day with us! During each of above steps we'll be happy to answer any questions you may have. Apply today to discuss the role in more detail! Competencies Cyber Security Awareness Information Security Risk Management Communication