Assistant Manager
As the Financial Services industry experiences a widespread increase in the use of, and reliance on Information and Communications Technology (ICT), and as ICT including emerging technologies, is enabling innovation within the industry including the introduction of new sectors altogether, the relevance of ICT Risk and Cybersecurity continues to persist.
The Supervisory ICT Risk and Cybersecurity Function forms part of the MFSA’s Supervision Directorate, it is cross-sectorial, and has been established to focus on one of the Authority’s outlined key strategic priorities – Address ICT risks and digital finance challenges with a focus on strengthening operational resilience within the framework of the Digital Operational Resilience Act (DORA). As a supervisory function, its portfolio of activities includes effective supervision, which aims to ensure that regulated firms within the industry, are effectively managing their ICT risks, and have a resilient cybersecurity framework in place, in line with Acts, Regulations, rules and sector-specific guidelines. The function participates and contributes in various Working Groups, Task Forces and Committees at local and international levels, and develops policies and guidelines for the industry.
The Supervisory ICT Risk and Cybersecurity Function provides expert advice on ICT and Cybersecurity matters to other functions within the MFSA as required. It is also a contributor on emerging strategies especially those that are technology focused. The function is also the contact point for cyber incident reporting by regulated firms.
The MFSA is seeking to employ an Assistant Manager within the Supervisory ICT Risk and Cybersecurity Function, which plans to grow and further evolve to continue delivering effectively on its mission.
The selected candidate will work in a dynamic team within the Supervisory ICT Risk and Cybersecurity Function. The role encompasses:
- Contributing to the strategic direction, objective setting, capacity building, evolution, and planning of the function;
- Acting on, implementing, and executing the strategy and plans of the function, as directed;
- Managing a team, a work stream, or a project;
- Managing the overall people management lifecycle within the area of responsibility, including workforce planning, talent identification and development, recruitment, and performance management of direct reports;
- Cultivating a positive, learning, knowledge-sharing, and collaborative working environment within the area of responsibility, promoting diversity and inclusion, and aiming at a high degree of employee engagement;
- Participating in, representing the Authority, and closely following up on the activities and developments of Working Groups at organisational, national, and international levels within the respective field, as necessary;
- Producing management reporting, as required;
- Carrying out supervisory activities using a risk-based approach in the field of ICT Risk and Cybersecurity, as the case may be and as required;
You will also undertake any other duties as assigned by the Head and/or as may be required by the MFSA from time to time, based on the exigencies of the Authority.
The role calls for an academic qualification in a relevant field of study at National Qualification Framework Level 6 or better, duly certified by the Malta Qualification Recognition Information Centre (MQRIC).
You will also possess a minimum of six (6) years’ experience working in the area of financial services and/or ICT.
If you do not have the necessary academic or professional qualifications, but you have at least eleven (11) years of relevant experience within a relevant field, we would still be interested in speaking with you.
You will also have the below skill set:
- Strong academic background in ICT Law and/or Computer Information Systems, Information Technology, or Information Security, or in Financial Services and/or FinTech, with the ability and willingness to further develop in ICT Risk and Cybersecurity within Financial Services;
- Proven ability to apply academic knowledge to risk, technology, and cybersecurity contexts, with a clear interest in developing expertise in ICT Risk and Cybersecurity;
- Analytical, detail-oriented, and able to assess technology and cybersecurity risks in a structured and methodical manner;
- High level of integrity, professionalism, and accountability, with industry certifications in ICT Risk and/or Cybersecurity and familiarity with the financial services regulatory framework considered an advantage.
