Job Vacancy: Analyst within Supervisory ICT Risk and Cybersecurity
Job code: CSI/007/2020
About Supervisory ICT Risk and Cybersecurity:
As the Financial Services industry experiences a widespread increase in the use of and reliance on Information and Communications Technology (ICT), and as ICT including emerging technologies, is enabling innovation within the industry including the introductions of new sectors altogether, the relevance of ICT Risk and Cybersecurity continues to persist. The Supervisory ICT Risk and Cybersecurity Function forms part of the MFSA Supervision Directorate, it is cross-sectorial and has been recently established to focus on one of the Authority outlined key strategic priorities Cybersecurity and Resilience. As a supervisory function, its portfolio of activities includes effective supervision, which aims to ensure that regulated firms within the industry, are effectively managing their ICT risks, and have a resilient cybersecurity framework in place, in line with Acts, Regulations, rules or sector-specific guidelines. The function participates and contributes in various Working Groups, Task Forces and Committees at local and international levels, and develops policies and guidelines for the industry. The Supervisory ICT Risk and Cybersecurity Function provides expert advice on ICT and Cybersecurity matters to other functions within the MFSA as required. It is also a contributor to emerging strategies especially those that are technology-focused. The function is also the contact point for cyber incident reporting by regulated firms.
The selected candidate will work in a dynamic team within a newly established Supervisory function in the areas of ICT Risk and Cybersecurity.
The role encompasses:
- Assisting Supervisory functions during the authorisation stage of prospective Licence Holders;
- Assisting in supervisory activities in line with supervisory priorities and the risk-based supervisory approach established by the Authority;
- The conduct of micro and macro-level analyses arising from the various activities carried out by the function to identify any patterns and/or trends;
- Assisting other functions within the MFSA on ICT Risk and Cybersecurity matters as required;
- The opportunity to participate in various Working Groups, Task Forces and Committees at local and international levels in relation to ICT Risk and Cybersecurity;
- Assistance in the preparation of replies on EU proposals on legislative changes as well as eventual transposition of EU legislation into Maltese law;
- Assisting in the development and amendment of rules and guidelines as necessary to address changes arising from EU Regulation, Directives and other EU legislative acts, national law, European Supervisory Authority policy, guidelines and market developments;
- Assisting in public consultations pertaining to the publication of new or amended rules and guidelines;
- The development and maintenance of operational procedures;
- Assisting in the preparation of reports as required;
- Assisting in cross-functional projects and initiatives as necessary;
- Assisting in the preparation of documents or position papers for submission to the Authority’s decision-making body and/or follow up on decisions taken by the latter in relation to ICT Risk and Cybersecurity;
- Keeping abreast with developments in the areas of ICT Risk and Cybersecurity, including keeping current with technology advancements, emerging technologies especially those in use within the Financial Services sphere, and the persistent threat landscape;
- Keeping abreast with regulatory development and market evolution;
- Other duties that may be assigned by the respective line manager and/or head of the function from time to time.
How to apply or query further information:
- The selected candidate will need to have a solid academic background in ICT law and/or computer information systems, information technology, or information security, as well as a sound knowledge of financial services legislation and familiarity with the financial services regulatory framework. Industry Certifications in ICT Risk and/or Cybersecurity and/or a relevant post-graduate degree would be considered an advantage;
- The role calls for an academic qualification in a relevant field of study at National Qualification Framework Level 6 or better, duly certified by the Malta Qualification Recognition Information Centre (MQRIC) or a widely recognised professional qualification at a comparable level;
- The selected candidate is expected to be a confident individual who is flexible, proactive, dynamic, having a critical and analytical mindset and high attention to detail. The individual is also required to demonstrate good research and have excellent oral, written and presentation skills;
- You will also possess a minimum of three (3) years working in the area of financial services and/or compliance with financial services regulation for a number of years;
- If you do not have the necessary academic or professional qualifications but you have at least seven (7) years of relevant experience within a relevant field, we would still be interested in speaking with you.
Candidates are to forward a copy of their Curriculum Vitae (C.V.) and an accompanying covering letter providing the motivation for the application.
Other Important Information:
The MFSA is an Equal Opportunities Employer as certified by the NCPE (National Commission for the Protection of Equality) and is committed to a policy of equal opportunity in all aspects of employment and will take care to avoid any form of discrimination in its recruitment procedures. The MFSA reserves the right to withdraw this call at any time and not to select any of the Candidates. It is the responsibility of applicants in possession of qualifications awarded by Universities and other similar institutions outside Malta to produce a recognition statement on the comparability of qualifications issued by the Malta Qualifications Recognition Information Centre (MQRIC). Applicants should do so preferably at the application stage or otherwise at the preliminary interview should an applicant be selected for such an interview. Details can be obtained by accessing the National Commission for Further and Higher Education website under MQRIC heading. The MFSA shall ensure that any processing of personal data is in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Data Protection Act (Chapter 586 of the Laws of Malta) and any other relevant European Union and national law. For further details, you may refer to the Data Protection Policy on the MFSA webpage. Candidates are to note that the submission of any false statement/s or omission, even if unintended, may lead to the cancellation of their application and may render the candidate's appointment liable to termination. Furthermore, please note that candidates may be asked to submit any documentation in support of the information provided, including but not limited to, proof of qualifications and Police Conduct Certificates.
Public Call Permit:413/2020
Malta Financial Services Authority:
The Malta Financial Services Authority (MFSA) is the single regulator for financial services in Malta. It was established by law on 23 July 2002 taking over supervisory functions previously carried out by the Central Bank of Malta, the Malta Stock Exchange and the Malta Financial Services Centre. The Authority is a fully autonomous public institution and reports to Parliament on an annual basis.