Cybersecurity Specialist

Key Responsibilities

• Cyber Threat Monitoring: Examine emerging risks, suspicious activity, technical weaknesses and deficiencies in protective measures across the assigned security function.
• Incident Management: Assist with the full lifecycle of cyber incidents, from initial investigation and threat isolation through system restoration, lessons learned and preventive follow-up.
• Vulnerability Oversight: Where allocated to vulnerability management, confirm identified exposures, assess their urgency, monitor corrective work and verify that weaknesses have been addressed successfully.
• Security Operations: Where assigned to this area, review alerts, investigate event data, examine system logs and conduct proactive searches for signs of malicious activity.
• Security Assessments: Participate in technical reviews, safeguard evaluations, risk examinations and effectiveness testing to determine whether appropriate protection is in place.
• Secure Solution Design: When supporting the architecture function, assess proposed platforms, infrastructure modifications and new technology designs from a cyber-risk perspective.
• Risk Identification: Detect weaknesses in technical designs and security arrangements, recommend proportionate improvements and help stakeholders complete the necessary corrective measures.
• Cross-Functional Collaboration: Work alongside technology, software, infrastructure, cloud, governance, compliance and operational teams to strengthen security throughout the Business.
• Records and Procedures: Prepare and update response guides, working procedures, investigation records, assessment findings, vulnerability registers and proof of completed corrective work.
• Security Technology: Help administer, evaluate and enhance the platforms and solutions used by the assigned cybersecurity team.
• Threat Intelligence: Interpret external intelligence, technical notifications and newly identified attack trends to inform risk ranking and security recommendations.
• Root-Cause Review: Determine the underlying reasons for cyber-related failures and contribute to measures designed to reduce the likelihood of similar issues arising again.
• Management Information: Produce clear updates covering security events, technical exposures, outstanding risks, remedial activity and relevant performance indicators.
• Professional Awareness: Maintain current knowledge of attacker methods, newly disclosed weaknesses, defensive technologies and developments affecting financial institutions.
• Governance and Compliance: Carry out all assigned work in accordance with the Company’s internal governance requirements and the relevant obligations applying to the banking industry.
• Additional Duties: Undertake other responsibilities that reasonably fall within the scope of the position when requested by management.

Qualifications, Skills and Attributes

• Education and Experience: Applicants must meet one of the following eligibility routes:
  • An MQF Level 5 qualification in cybersecurity, computing, information technology or a comparable discipline, together with at least three years of professional exposure to a corporate IT setting; or
  • At least four years of relevant employment within a large-scale organisational technology environment; or
  • An MQF Level 6 Bachelor’s degree in cybersecurity, computing, information technology or a related subject, supported by at least one year of relevant enterprise-level IT experience.
• Professional Certifications: Credentials such as CEH, CompTIA Security+, CISM, CISSP or another recognised information-security certification would be advantageous.
• Specialist Experience: Previous involvement in the particular security discipline to which the successful candidate will be appointed is considered beneficial.
• Language Skills: Excellent command of English is required to succeed in this role. The ability to communicate in Maltese would be an asset.
• Communication Skills: Capable of explaining security findings, technical concerns and proposed action points clearly to both technical specialists and non-technical stakeholders.
• Interpersonal Skills: Able to develop productive working relationships across multiple departments and contribute effectively within multidisciplinary teams.
• Technical Skills: Familiarity with technologies such as security information and event management platforms, network intrusion detection and prevention solutions, firewalls, vulnerability-testing systems and endpoint security tools is desirable.
• Security Knowledge: An understanding of established cyber principles, attack-mapping models such as MITRE ATT&CK and recognised approaches to handling security incidents would be beneficial.
• Organisation: Able to balance several investigations, assessments and corrective actions while maintaining accurate records and meeting agreed deadlines.
• Self-Motivated: Brings a practical mindset, takes ownership of assigned work and operates reliably without requiring continuous direction.
• Professional Responsibility: Demonstrates sound judgement, integrity and a clear appreciation of the sensitivity associated with protecting banking systems and information.
• Continuous Learning: Shows genuine interest in developing knowledge of new threats, attack methods and defensive solutions.
• Problem-Solving: Uses structured analysis to identify the source of security concerns, evaluate their potential effect and recommend workable corrective measures.

What's on Offer

• Compensation: A competitive base salary complemented by performance-related incentives.
• Working Hours: Standard business hours, with reasonable flexibility and access to hybrid working arrangements.
• Health Insurance: Private medical cover.
• Training: Participation in recognised professional learning programmes to support continued development.
• Relocation Assistance: Support may be available to eligible candidates moving to Malta for the position.
• Financial Benefits: Preferential terms on qualifying employee lending facilities.
• Pension: Access to employer-supported retirement contributions.
• Inclusive Workplace: Join an organisation committed to fairness, diversity and equal access to employment opportunities.
• Career Development: Gain exposure to important cybersecurity, technology-risk and strategic initiatives, with opportunities to broaden specialist expertise and progress professionally.

What Heroix Offers

• Confidentiality and Discretion: Your job search will be handled with the utmost confidentiality and professionalism.
• CV Review: Receive candid and constructive feedback to enhance your CV.
• Interview Planning: Get personalised preparation sessions prior to your interviews.
• Cultural Fit Assessment: Understand the Company’s culture to determine whether it is the right environment for you.
• Long Term: Gain insights into the role and the Business to support a stable, long-term career move.
• Exclusive Opportunities: Access a broader range of job opportunities.
• Personalised Candidate Profile: Stand out with a detailed profile highlighting your strengths and skills.
• Ongoing Support and Guidance: Benefit from continuous support throughout your job search process.
• Networking Opportunities: Leverage our extensive network of industry contacts for exclusive positions.
• Time Efficiency: Save time and effort through our efficient and effective recruitment strategies.
• Tailored Job Matching: Find the right fit through customised job matching based on your skills and career goals.
• Feedback Loop: Stay informed and engaged through regular updates and feedback on your application status.