About the Department

The Supervisory ICT Risk and Cybersecurity Function, within the Malta Financial Services Authority Supervision Directorate, is a cross-sector function focused on strengthening operational resilience and addressing ICT and digital finance risks in line with the Digital Operational Resilience Act (DORA). It supervises regulated firms to ensure ICT risks are properly managed and cybersecurity frameworks meet regulatory and sector standards. The function contributes to local and international working groups and helps shape industry policy and guidance. It also provides internal expert advice on ICT and cybersecurity matters, supports technology-driven strategic initiatives, and serves as the central contact point for cyber incident reporting by regulated firms.

About the Role

The selected candidate will work in a dynamic team within the Supervisory ICT Risk and Cybersecurity function. The role encompasses:

· The conduct of analyses arising from the various activities carried out by the function to identify any patterns and/or trends;

· Assisting in the development and amendment of rules and guidelines as necessary to address changes arising from EU Regulation, Directives and other EU legislative acts, national law, European Supervisory Authority policy, guidelines and market developments;

· The development and maintenance of operational procedures;

· Assisting in the preparation of reports as required;

· Assisting in cross-functional projects and initiatives as necessary;

· Assisting in the preparation of documents or position papers for submission to the Authority’s decision-making body and/or follow up on decisions taken by the latter in relation to ICT Risk and Cybersecurity;

· Other duties that may be assigned by the respective line manager and/or head of function from time to time.

About you

The selected candidate will need to have embarked on an academic journey in ICT law and/or computer information systems, information technology, or information security, OR in Financial Services and/or FinTech with a view to develop further in the ICT Risk and

Cybersecurity aspects of Financial Services. Industry Certifications in ICT, ICT Risk and/or Cybersecurity would be considered an advantage.

The selected candidate is expected to be a confident individual who is flexible, proactive, dynamic, having a critical and analytical mind-set and attention to detail. The individual is also required to demonstrate good research and have excellent oral, written and presentation skills.

Other Important Information

The MFSA is an Equal Opportunities Employer as certified by the NCPE (National Commission for the Protection of Equality) and is committed to a policy of equal opportunity in all aspects of employment and will take care to avoid any form of discrimination in its recruitment procedures. The MFSA reserves the right to withdraw this call at any time and not to select any of the Candidates.

It is the responsibility of applicants in possession of qualifications awarded by Universities and other similar institutions outside Malta to produce a recognition statement on comparability of qualifications issued by the Malta Qualifications Recognition Information Centre (MQRIC). Applicants should do so preferably at application stage or otherwise at the preliminary interview should an applicant be selected for such interview. Details can be obtained by accessing the National Commission for Further and Higher Education website on www.ncfhe.gov.mt under MQRIC heading.

The MFSA shall ensure that any processing of personal data is in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Data Protection Act (Chapter 586 of the Laws of Malta) and any other relevant European Union and national law. For further details, you may refer to the Data Protection Policy on the MFSA webpage www.mfsa.mt. Candidates are to note that the submission of any false statement/s or omission, even if unintended, may lead to the cancellation of their application and may render the candidate's appointment liable to termination.

Furthermore, please note that candidates may be asked to submit any documentation in support of the information provided, including but not limited to, proof of qualifications and Police Conduct Certificates.

Public Call Permit: 355/2026

Pre-Graduate Officer (Supervisory ICT Risk and Cybersecurity)

Job Description