Aviation Cybersecurity Lead

The IAA seeks an Aviation Cybersecurity Lead on a 3 year fixed term contract to manage the implementation of cybersecurity oversight within the Aviation Security Department.

The Irish Aviation Authority (IAA) is the single aviation regulator for Ireland. We are responsible for the regulation of safety, security and consumer interests. For more information, please visit our website: About the Irish Aviation Authority ( ).

Mission: The Irish Aviation Authority regulates to the highest professional standards to ensure a safe, secure and consumer-focused aviation environment. Through regulations, we support word class performance and innovation in Irish and global aviation.

Values: Our values reflect what we believe in and how we behave when engaging with each other, our clients and partners, and the society in which we live.

• 
  
• Safety defines us: We are the industry experts and the authority in our field.
  
• The passenger is central: We protect the interests of passengers in everything we do.
  
• We champion excellence: Individually and collectively, we ensure that our practices and performance are of the highest standard in global aviation, and consistently implemented.
  
• Our value is in our people: Our professionalism and commitment are at the heart of everything we do.
  
• Clear and responsive: We are accessible. We meet and surpass our public service commitments and strive to provide clarity and promote understanding in all aspects of regulation.
  
• Collaborative: We promote teamwork within the Authority, and work with stakeholders and clients to find solutions.
  
• We promote sustainable and responsible practices: Aiming to promote the development of aviation in a sustainable and responsible way, meeting the imperative to protect our shared environment.
  

Manage the implementation of cybersecurity oversight within the Aviation Security Department.

• 
  
• Plan and manage the implementation the National Civil Aviation Security Quality Control Programme for monitoring implementation of the relevant Common Basic Standards, NIS 2, Critical Entities Resilience regulations (CER) and Irish policy requirements as defined in EU Regulations and the NCASP (National Civil Aviation Security Programme), including any enforcement actions that may be required.
  
• Foster and maintain a high-performance culture and organisation. This will involve leading, supporting and empowering the Cybersecurity Implementation team to build and retain internal knowledge, expertise and capacity as well as enhancing leadership capability by ensuring a focus on coaching, developing and empowering the team.
  
• Advise the Head of Aviation Security on specific or general matters relating to cybersecurity oversight, including but not limited to, variation, suspension, revocation or disqualification.
  
• Manage the approval of, and associated reporting about, entities implementing security controls and contribute to the submission of the Irish annual report to the European Commission.
  
• Manage and further develop operational policies and procedures for the Cybersecurity Implementation team, including budget, personnel performance, training and development in line with IAA policies.
  
• Develop and maintain up to date relevant guidance material for entities, both directly and in cooperation with other departmental managers.
  
• Liaise with other national competent authorities responsible for NIS 2 and CER implementation as well as the person responsible within the IAA for its role as Competent Authority under Part-IS.
  
• Conduct and manage surveys in accordance with the IAA’s policies and procedures.
  
• Coordinate and facilitate other State and/or regulatory organisations’ inspections of cybersecurity controls in the aviation sector in Ireland.
  
• Represent the IAA on matters relating to cybersecurity in aviation as appropriate in ICAO, European Commission, ECAC, EASA, EUROCONTROL and other international and/or government committees, working groups, et al. This task will require international travel for which a valid passport is required.
  
• Provide regular reports on the implementation and outcomes of the Cybersecurity Implementation team tasks.
  
• Develop and maintain a communications plan to ensure regulated entities are informed about regulatory developments, best practices and insights from oversight activities and incident reports.
  

This job description is not exhaustive, other items may be added or duties varied from time to time at the discretion of the Head of Aviation Security.

Note: As the Cybersecurity Department is developing, subject to workforce planning further details on the number of persons reporting to this role will be confirmed after the appointment of a successful candidate.

The successful candidate should have the following qualifications and skills:

• 
  
• 7–10+ years cybersecurity experience, with 3+ years in a leadership or regulatory oversight role.
  
• Demonstrated experience managing security compliance, risk assessment, and standards implementation (ISO 27001, NIST CSF, etc.).
  
• Experience working in highly regulated sectors (aviation, public sector, critical infrastructure).
  
• Demonstrated experience of incident response, threat awareness, and audit/inspection methodologies.
  
• Excellent IT skills, including the full range of O365 is a prerequisite. Ability to familiarise and become proficient with specialist software is also required.
  

• 
  
• A degree in Cybersecurity, Information Security, Computer Science, or relevant discipline (minimum NFQ Level 6 or equivalent).
  
• Ability to successfully complete an enhanced background check and national security clearance to top secret level.
  
• Commitment to work out of hours including evenings, weekends and public holidays as may be required from time to time and for which time in lieu will be provided.
  
• Experience with international aviation cybersecurity policy development.
  
• Experience with public sector/government cybersecurity processes.
  
• Experience in implementing national or EU cyber certification schemes.
  
• Experience conducting or managing threat modelling and simulations
  
• Experience in forensic investigation, insider risk, or DLP programmes.
  
• Experience delivering training, presentations, or technical briefings to diverse audiences.
  

Industry recognised certifications such as:

• 
  
• CISSP, CISM, CISA, CCSP (security management & governance).
  
• GIAC certifications (GCTI, GCIA, GCIH).
  

For assessment of applicants the following competency model will be used. This model reflects the changing and more complex environment in which those at this level operate. Each competency is supported by a list of key performance indicators set out below.

• 
  
• Leadership
  
• Judgement, Analysis & Decision Making
  
• Management & Delivery of Results
  
• Interpersonal & Communication Skills
  
• Specialist Knowledge, Expertise and Self Development
  

The salary range for this role is €83,662 to €102,342 - Commensurate with the experience and qualifications of the successful candidate.

Annual Leave excluding public holidays is 26 days per annum.

The successful candidate will on date of joining become a member of the Irish Aviation Authority pension scheme details of which will be communicated to the successful candidate on offer of appointment.

• 
  
• Access to cycle to work scheme
  
• Tax free Bus/ Luas/ Rail to assist with travel costs to and from work
  
• Access to Employee Assistance Programme
  
• Access to IAA health and wellbeing initiatives
  
• Learning and Development opportunities
  

The IAA is based in the Times Building, 11-12 D'Olier Street, Dublin 2 near Trinity College. We are convenient to all Luas lines; several Dublin Bus routes and are about 5 minutes from Tara Street Railway Station. We are also just minutes from O’Connell Street and St. Stephen’s Green.

Hybrid working arrangements may be agreed in line with IAA Remote Working Policy.

Applications must consist of the following to be considered for shortlisting:

• 
  
• A letter of motivation (max. two A4 pages) outlining why you wish to be considered for the post and where you believe your skills and experience meet the requirements of the position
  

should be received no later than 5pm Friday 13th March 2026.

Candidates should note that eligibility to compete is open to citizens of the European Economic Area (EEA), Switzerland, the UK and those with an IRP with stamp 4. To qualify candidates must be citizens of the EEA, Switzerland, the UK or have an IRP with stamp 4 on the date of application.

The IAA are not in the position to offer sponsorship for this role.

The IAA promotes equity, diversity, and inclusion and welcomes applications from people from diverse backgrounds and under-represented groups including, but not limited to, ethnic minority and people with disabilities. IAA firmly believes that such diversity enriches our workplace culture and drives innovation.

If you have a disability or need any specific accommodations during the application or selection process, please let us know. xcfaprz We are committed to providing reasonable adjustments to ensure all candidates have an equal opportunity to participate fully in the recruitment process. You can contact us at