Career Opportunity: Cybersecurity Certification Operations Specialist

Prime focus of position

The Cybersecurity Certification Operations Specialist will support the Authority's National Cybersecurity Certification Authority and certification responsibilities for the European Digital Identity Wallet, 5G cybersecurity certification and other cybersecurity certification schemes expressly assigned to the Authority.

The role will operate the governance and administrative processes surrounding certification, including case intake, conformity-assessment interfaces, certificate-lifecycle records, complaints, vulnerabilities, non-conformities, peer-review evidence and national and European coordination.

The selected candidate will also support closely related regulatory operations required across the Cybersecurity Unit, including regulatory registers and trusted lists, Integrated Regulatory Management Platform workflows, secure case and evidence records, controlled procedures, performance information and Work Programme reporting.
 

Main Responsibilities

• Develop, maintain and apply documented NCCA and certification operating procedures, workflows, checklists, templates, registers and control records for schemes assigned to the Authority.
• Receive, register and undertake administrative completeness checks of certification applications, notifications, conformity-assessment reports and related submissions.
• Coordinate certification case workflows, obtain required technical, supervisory and legal input, track outstanding information and prepare complete files for the authorised decision route.
• Maintain accurate records of certificates, decisions, conditions, limitations, renewals, modifications, suspensions, withdrawals and other certificate-lifecycle events.
• Administer certification-related complaints, vulnerability notifications, significant changes and suspected non-conformities, ensuring timely registration, allocation, escalation and follow-up.
• Maintain evidence that certification, scheme-owner, conformity-assessment, supervisory and decision-making activities have followed documented delegation, review and functional-separation arrangements.
• Support the establishment and maintenance of the Authority's NCCA operating model, competence records, conflict-of-interest controls, cooperation arrangements and peer-review readiness.
• Coordinate information requests, questionnaires, evidence and follow-up relating to ENISA, the European Cybersecurity Certification Group, peer NCCAs, eIDAS cooperation structures and other relevant national or European bodies.
• Support NCCA oversight and market-surveillance case administration, including controlled records concerning CAB oversight, certificates, vulnerabilities, complaints, non-conformities and corrective actions.
• Coordinate the controlled maintenance of national trusted lists and related regulatory registers in accordance with approved supervisory or certification decisions, including publication, change records, approval evidence and continuity arrangements.
• Act as the Cybersecurity Unit's regulatory workflow coordinator for the Integrated Regulatory Management Platform by documenting business requirements, supporting configuration and testing, maintaining workflow documentation and coordinating issues with the relevant supplier and MCA functions.
• Support secure evidence management by maintaining case-file structures, classification, access, retention, transfer, audit-trail and disposal requirements in coordination with the relevant MCA functions.
• Coordinate the collection and validation of supervisory, certification and programme performance information and support dashboards, management reports and statutory or European reporting.
• Undertake legal, policy and regulatory research relevant to cybersecurity certification, eIDAS, trust services, NCCA functions, information governance and related Cybersecurity Unit responsibilities.
• Prepare draft procedures, correspondence, briefings, meeting records, decision-support documents, regulatory reports and stakeholder material for review and approval.
• Contribute to continuous improvement of regulatory processes and identify opportunities to simplify, standardise or automate recurring workflows without compromising legal or evidential requirements.
   

Qualifications / Skills Required

• Either of the following:
  • A Bachelor's degree at MQF Level 6 in Cybersecurity, Information Technology, Law, Public Policy, European Studies, Regulatory Affairs, Governance, Information Management or another relevant field, together with at least two years of relevant experience;
    OR
  • A Master's degree at MQF Level 7 in one of the above or another relevant field.
• Relevant experience may include regulatory affairs, compliance, certification, conformity assessment, public administration, case management, information governance, records management, programme support or a closely related field.
• Preference will be given to candidates demonstrating an understanding of EU cybersecurity or digital-trust frameworks, including the EU Cybersecurity Act, eIDAS, cybersecurity certification or related regulatory arrangements.
• Experience within a regulator, public authority, conformity assessment body, certification organisation, regulated entity or standards-based environment will be considered an asset.
• Exposure to ISO-based management systems, audit or certification processes, structured case management, quality assurance or regulatory records will be considered an asset.
• Relevant foundation or practitioner certifications in information security, audit, compliance, project delivery, information management or quality management will be considered an asset rather than a mandatory requirement.
• Ability to understand and organise technical, legal and regulatory information and convert it into clear procedures, workflows, registers and decision-support documentation.
• Excellent organisational skills, attention to detail and ability to maintain complete, accurate and auditable records across multiple workstreams.
• Strong research, analytical and problem-solving skills and the ability to recognise when technical, supervisory or legal escalation is required.
• Strong written and verbal communication skills in English and preferably also in Maltese.
• Proficiency in standard office and collaboration tools and confidence in using case-management, document-management, workflow and reporting systems.
   

Additional Notes

*A recognized Qualification comparable to the number of credits, as applicable, is only accepted subject to an MQRIC formal recognition statement.*

By the closing time and date of this call for applications, applicants must be:

1. citizens of Malta; or
2. citizens of other Member States of the European Union who are entitled to equal treatment to Maltese citizens in matters of employment by virtue of EU legislation and treaty provisions dealing with the free movement of workers; or
3. citizens of any other country who are entitled to equal treatment to Maltese citizens in matters related to employment by virtue of the application to that country of EU legislation and treaty provisions dealing with the free movement of workers; or
4. any other persons who are entitled to equal treatment to Maltese citizens in matters related to employment in terms of the law or the above-mentioned EU legislation and treaty provisions, on account of their family relationship with persons mentioned in paragraph (a), (b) or (c); or
5. third country nationals who have been granted long-term resident status in Malta under regulation 4 of the ‘Status of Long-Term Residents (Third Country Nationals) Regulations, 2006’ or who have been granted a residence permit under regulation 18(3) thereof, together with family members of such third country nationals who have been granted a residence permit under the ‘Family Reunification Regulations, 2007’; or
6. in possession of a residence document issued in terms of the “Residence Status of United Kingdom Nationals and their Family Members in Malta in accordance with the Agreement on the Withdrawal of the United Kingdom and Northern Ireland from the European Union and the European Atomic Energy Community Regulations”.

The advice of the Citizenship Unit within Community Malta Agency and the Expatriates Unit within Identità should be sought as necessary in the interpretation of the above provisions.
 

Remuneration & Benefits

Salary bracket is between €23,575 – €35,598. 

In addition, the employment package will also include:

• Up to 15% performance bonus
• €1,480 communication allowance
• Health insurance

 

---

 

The MCA is an equal opportunities employer.

Candidates should send their CV and covering letter by post or by email at vacancies@mca.org.mt
For more information, please contact our Human Resources team on +356 21336840

Foreign qualifications need to be supported by the Malta Qualifications Recognition Information Centre (MQRIC). Applications not containing the MQRIC recognition will not be considered.

The MCA reserves the right, as it deems necessary, to verify the authenticity of any academic, professional, or other qualifications submitted in connection with an application. It may, at its sole discretion, request original documentation or seek direct confirmation from the relevant institutions at any stage of the recruitment process. Any false declaration, misrepresentation, or failure to disclose relevant information may result in disqualification from the selection process or withdrawal of any offer of employment, including after an employment offer has been made.

Closing On: Friday 13th November 2026