About the Department

As the Financial Services industry experiences a widespread increase in the use of, and reliance on Information and Communications Technology (ICT), and as ICT including emerging technologies, is enabling innovation within the industry including the introduction of new sectors altogether, the relevance of ICT Risk and Cybersecurity continues to persist.

The Supervisory ICT Risk and Cybersecurity Function forms part oSupervisory ICT Risk and Cybersecurityf the MFSA’s Supervision Directorate, it is cross-sectorial, and has been established to focus on one of the Authority’s outlined key strategic priorities – Address ICT risks and digital finance challenges with a focus on strengthening operational resilience within the framework of the Digital Operational Resilience Act (DORA). As a supervisory function, its portfolio of activities includes effective supervision, which aims to ensure that regulated firms within the industry, are effectively managing their ICT risks, and have a resilient cybersecurity framework in place, in line with Acts, Regulations, rules and sector-specific guidelines. The function participates and contributes in various Working Groups, Task Forces and Committees at local and international levels, and develops policies and guidelines for the industry.

The Supervisory ICT Risk and Cybersecurity Function provides expert advice on ICT and Cybersecurity matters to other functions within the MFSA as required. It is also a contributor on emerging strategies especially those that are technology focused. The function is also the contact point for cyber incident reporting by regulated firms.

About the Role

The MFSA is seeking to employ a Deputy Head within the Function which plans to grow and further evolve, to continue delivering effectively on its mission.

The selected candidate will work in a dynamic team within the Supervisory ICT Risk and Cybersecurity function. The role encompasses:

Influencing the strategic direction, objectives setting, capacity building, evolution and planning of the function;
Acting on, implementing and executing the strategy and plans of the function as directed;
Leading a unit or units within the Supervisory ICT Risk and Cybersecurity function effectively, and taking responsibility for the respective outcome, to time, cost and quality targets;
Deputising for the Head of function as and when required;
Leading the overall people management lifecycle within respective unit or units including workforce planning, talent identification and development, recruitment, and performance management of direct reports;
Cultivating a positive, learning, knowledge sharing and collaborative working environment within respective unit or units, promoting diversity and inclusion, and aiming at a high degree of employee engagement;
Mentoring, providing guidance to, and developing, direct reports including in the area of leadership;
Participating in, representing the Authority, and following up closely the, activities and developments of, Working Groups, Task Forces and Committees at local and international levels within the respective field, particularly but not exclusively, within the European System of Financial Supervision, the European Central Bank and the European Union Agency for Cybersecurity;
Building effective working relationships with peers within the organisation, with the relevant national public entities, and with National Competent Authorities in other European Member States;
Engaging and coordinating with subject matter experts to resolve complex issues;
Participating in outreach activities with Authorised Persons and other external stakeholders with a view of influencing, incentivising, and shaping digital operational resilience;
Organising training and awareness initiatives in area of responsibility/expertise alongside the Malta Financial Supervisors Academy;
Proactively contributing to the implementation of appropriate working practices and culture, by building effective processes, continually improving them, and ensuring documented procedures are in place within area of responsibility;
Developing and adopting clear and coherent outward facing Policies following a consultation process in respective unit or units;
Producing management reporting as required;
Taking initiative to advance own skills and identifying and managing development opportunities in area of responsibility/expertise, keeping abreast with emerging technologies, the threat landscape, regulatory developments and market evolution as well as leadership and people management skills;
Carrying out supervisory activities using a risk-based approach in the field of ICT Risk and Cybersecurity, as the case may be and as required;
Any other responsibilities that may be assigned by the Head of function or Chief Officer Supervision from time to time.

About you

We are looking for candidates with solid academic background which may be considered as relevant to this post. The role calls for an academic qualification in a relevant field of study at National Qualification Framework Level 6 or better, duly certified by the Malta Qualifications Recognition Information Centre (MQRIC) or a widely recognised professional qualification at a comparable level. You will also possess a minimum of six (6) years working experience in a senior level in the area related to the role. Candidates with longer working experience relevant to the role will be preferred. If you do not have the necessary academic or professional qualifications but you have at least ten (10) years of relevant experience in a senior level, we would still be interested in speaking with you. Skills and competencies:

Strong leadership capability with a track record of managing, motivating, and developing high-performing multidisciplinary teams.
Sound regulatory judgement and the ability to take balanced, defensible decisions in complex and high-risk situations.
Excellent analytical and problem-solving skills, with the ability to interpret regulatory, financial, and operational information critically.
Strategic mindset combined with a pragmatic, hands-on approach to execution and delivery.
High levels of integrity, professionalism, and independence, aligned with public-interest and supervisory values.
Strong stakeholder management and communication skills, including the ability to influence, challenge, and engage effectively at senior and international level.
Ability to manage competing priorities, operate under pressure, and deliver outcomes within tight timelines.
Strong organisational and governance awareness, with attention to risk management, controls, and accountability.
Resilience and adaptability in responding to regulatory change, market developments, and evolving supervisory expectations.

Other Important Information

The MFSA is an Equal Opportunities Employer as certified by the NCPE (National Commission for the Protection of Equality) and is committed to a policy of equal opportunity in all aspects of employment and will take care to avoid any form of discrimination in its recruitment procedures. The MFSA reserves the right to withdraw this call at any time and not to select any of the Candidates.

It is the responsibility of applicants in possession of qualifications awarded by Universities and other similar institutions outside Malta to produce a recognition statement on comparability of qualifications issued by the Malta Qualifications Recognition Information Centre (MQRIC). Applicants should do so preferably at application stage or otherwise at the preliminary interview should an applicant be selected for such interview. Details can be obtained by accessing the National Commission for Further and Higher Education website on www.ncfhe.gov.mt under MQRIC heading.

The MFSA shall ensure that any processing of personal data is in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Data Protection Act (Chapter 586 of the Laws of Malta) and any other relevant European Union and national law. For further details, you may refer to the Data Protection Policy on the MFSA webpage www.mfsa.mt. Candidates are to note that the submission of any false statement/s or omission, even if unintended, may lead to the cancellation of their application and may render the candidate's appointment liable to termination.

Furthermore, please note that candidates may be asked to submit any documentation in support of the information provided, including but not limited to, proof of qualifications and Police Conduct Certificates.

Public Call Permit: 768/2026

Deputy Head (Supervisory ICT Risk and Cybersecurity)

Job Description