Analyst (Supervisory ICT Risk and Cybersecurity)

About Department

The Supervisory ICT Risk and Cybersecurity Function forms part of the MFSA’s Supervision Directorate, it is cross-sectorial, and has been established to focus on one of the Authority’s outlined key strategic priorities – Address ICT risks and digital finance challenges with a focus on strengthening operational resilience within the framework of the Digital Operational Resilience Act (DORA). As a supervisory function, its portfolio of activities includes effective supervision, which aims to ensure that regulated firms within the industry, are effectively managing their ICT risks, and have a resilient cybersecurity framework in place, in line with Acts, Regulations, rules and sector-specific guidelines. The function participates and contributes in various Working Groups, Task Forces and Committees at local and international levels, and develops policies and guidelines for the industry.

The Supervisory ICT Risk and Cybersecurity Function provides expert advice on ICT and Cybersecurity matters to other functions within the MFSA as required. It is also a contributor on emerging strategies especially those that are technology focused. The function is also the contact point for cyber incident reporting by regulated firms.

About Role

Within this role you will be joining an analytical and multidisciplinary team of policy experts and supervisors. As an Analyst in Grade 7 within the Supervisory ICT Risk & Cybersecurity Function, you will be expected to:

• Assist Supervisory functions during the authorisation stage of prospective Licence Holders;
• Assist in supervisory activities in line with supervisory priorities and the risk-based supervisory approach established by the Authority;
• The conduct of micro and macro level analyses arising from the various activities carried out by the function to identify any patterns and/or trends;
• Assist other functions within the MFSA on ICT Risk and Cybersecurity matters as required;
• The opportunity to participate in various Working Groups, Task Forces and Committees at local and international levels in relation to ICT Risk and Cybersecurity;
• Assist in the preparation of replies on EU proposals on legislative changes as well as eventual transposition of EU legislation into Maltese law;
• Assist in the development and amendment of rules and guidelines as necessary to address changes arising from EU Regulation, Directives and other EU legislative acts, national law, European Supervisory Authority policy, guidelines and market developments;
• Assist in public consultations pertaining to the publication of new or amended rules and guidelines;
• The development and maintenance of operational procedures;
• Assist in the preparation of reports as required;
• Assist in cross-functional projects and initiatives as necessary;
• Assist in the preparation of documents or position papers for submission to the Authority’s decision-making body and/or follow up on decisions taken by the latter in relation to ICT Risk and Cybersecurity;
• Keep abreast with developments in the areas of ICT Risk and Cybersecurity, including keeping current with technology advancements, emerging technologies especially those in use within the Financial Services sphere, and the persistent threat landscape;
• Keep abreast with regulatory development and market evolution;
• Other duties that may be assigned by the respective line manager and/or head of function from time to time.

About You

We are looking for candidates with solid academic background in Law, Finance, Accountancy, FinTech, Business Administration, ICT law and/or computer information systems, information technology, or information security, and/or in a similar policy-oriented background or relevant experience.

The role calls for an academic qualification in a relevant field of study at National Qualification Framework Level 6 or better, duly certified by the Malta Qualifications Recognition Information Centre (MQRIC) or a widely recognised professional qualification at a comparable level. Possession of a post graduate degree in a discipline relevant to the financial services sector would be considered an asset.

You will also possess a minimum of three (3) years working experience in the area related to the role. Candidates with longer working experience relevant to the role will be preferred. If you do not have the necessary academic or professional qualifications but you have at least seven (7) years of relevant experience, we would still be interested in speaking with you.

The following skill set is a must for this position:

• The ability to multi-task and work on own initiative;
• The ability to work in a team;
• Good verbal and written communication skills;
• Have a desire to learn.