Financial Intelligence Analysis Unit

The Financial Intelligence Analysis Unit is the national central agency in Malta that is responsible for the collection, collation, processing, analysis and dissemination of information to combat money laundering and the funding of terrorism. The Unit became operational on 1 October 2002, when it was established by virtue of Legal Notice 297 of 2002. This legal notice brought into force the comprehensive amendments to the Prevention of Money Laundering Act (Act XXXI of 2001). Though set up as an agency within the ministry responsible for finance, the Unit has a separate judicial personality and operates autonomously from its own offices with its own staff. The responsibilities related to the governance of the Unit are divided among the Board of Governors and the Director, with the Board establishing the policy and the Director being tasked with the execution of that policy. The Director is also responsible for carrying out all other functions of the Unit not attributed to the Board by the Prevention of Money Laundering Act. He is assisted by permanent staff operating within six distinct sections responsible for Intelligence Analysis, Supervision and Enforcement, Legal Affairs, Corporate Services & People Performance and Culture, Policy and Quality Assurance, and Technology and Information Security.

About

Cyber Security Analyst

The Network and Security Team is responsible for the FIAUs IT On-Premises and Cloud infrastructure security. Its main objective is to ensure that adequate security measures are adopted in accordance with the FIAUs requirements and in line with industry best practises.

The Cyber Security Analyst’s role plays a crucial role in protecting the Unit’s information systems and data from cyber threats. The selected candidate will monitor security systems, analyse security incidents, and implement effective measures to safeguard the Unit’s digital assets.

Main tasks and responsibilities

Continuously monitor security alerts and logs from various security tools (e.g., SIEM, IDS/IPS).
Identify, investigate, and respond to security incidents and potential threats in real time.
Assist in the development and implementation of incident response plans.
Conduct forensic analysis and post-incident reviews to understand the nature and impact of security breaches.
Perform regular vulnerability assessments and penetration testing.
Identify vulnerabilities in systems and applications, and work with IT teams to remediate them.
Assist in security audits to ensure compliance with organizational policies and regulatory requirements (GDPR, ISO27002, PCI-DSS).
Prepare documentation and reports on compliance status and security metrics.
Stay updated on emerging cyber threats and vulnerabilities by researching security trends and threats.
Use threat intelligence feeds to proactively identify and mitigate risks.
Collaborate with the security team to develop and maintain security policies, procedures, and guidelines.
Educate staff on security best practices and the importance of adhering to security policies.
Work closely with the network team to ensure secure configuration and management of systems.
Communicate security issues and incidents effectively to stakeholders at all levels.
Assisting the Network team with Level 1 and 2 support where necessary.
Carry out any other related duties as assigned by the Management, from time to time.

Educational and skill requirements

An MQF Level 6 qualification in Computer Science and at least 4 years relevant work experience OR an MQF Level 5 qualification in Computer Science and at least 5 years relevant work experience.
Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or equivalent will be considered an asset.
Strong understanding of networking concepts, protocols, and security technologies (e.g., firewalls, VPNs, antivirus).
Familiarity with security frameworks (e.g., NIST2, ISO 27002) and compliance regulations.
Proficiency with security tools (e.g., SIEM, endpoint protection).
Knowledge of scripting or programming languages (e.g., Python, PowerShell) is a plus.
Excellent analytical, problem-solving, and communication skills.

Job benefits