Career Opportunity: Senior Cybersecurity Specialist
Prime focus
The Senior Cybersecurity Specialist will strengthen the Malta Communications Authority's technical capacity to implement and operate its supervisory and resilience responsibilities under the Network and Information Security Directive (NIS2) and the Critical Entities Resilience (CER) framework.
The role combines cybersecurity analysis, regulatory supervision and technical assurance. It includes the preparation and application of risk-based supervisory methodologies, participation in audits and inspections, assessment of cybersecurity and resilience measures, incident follow-up and contribution to sector guidance and supervisory intelligence.
The selected candidate will provide technical support to the Authority's Cybersecurity Certification responsibilities, particularly in relation to 5G cybersecurity certification, conformity-assessment oversight, vulnerabilities, non-conformities and market-surveillance activity. The role will also contribute to the Authority's internal cyber-incident preparedness and emerging-technology readiness.
Main Responsibilities
- Lead or contribute to risk-based supervision of entities falling within the Authority's NIS2 remit, including assessment of cybersecurity risk-management measures, governance arrangements, supply-chain security, business continuity and incident-reporting obligations.
- Plan, prepare and conduct desktop reviews, technical assessments, interviews, inspections and audits, and document findings, evidence, proportionality considerations and required follow-up.
- Develop, maintain and apply supervisory methodologies, control catalogues, evidence requirements, sampling approaches, risk-classification tools and annual supervisory-planning criteria.
- Translate applicable legal and regulatory obligations into practical technical controls, assessment criteria, guidance and evidence expectations for supervised entities.
- Assess cybersecurity incidents and notifications, contribute to coordinated regulatory responses, undertake post-incident review and monitor corrective or remediation actions.
- Develop supervisory intelligence and sector-maturity assessments by analysing recurring weaknesses, threat information, vulnerabilities, dependencies and lessons arising from supervisory cases.
- Support the Authority's CER functions for Digital Infrastructure, including essential-service analysis, criticality and resilience assessments, dependency analysis, entity engagement and relevant national coordination.
- Provide technical support to the Authority's NCCA functions for schemes assigned to it, particularly 5G cybersecurity certification, including review of technical evidence, conformity-assessment outputs and scheme-specific security requirements.
- Support NCCA oversight and market-surveillance activity concerning certificate status, vulnerabilities, product or service changes, complaints, suspected non-conformities and corrective measures.
- Contribute to the design and testing of the Authority's internal cyber-incident governance, escalation, evidence-preservation, exercise and operational-resilience arrangements, recognising the assigned responsibilities of MCA’s internal IT team and the guidance issued by MITA.
- Monitor emerging technologies, technical standards, threats and regulatory developments that may affect existing or future MCA responsibilities, including developments in telecommunications and cybersecurity certification.
- Prepare clear technical reports, findings, policy papers, briefings, decision-support material and management information.
- Represent the Authority in relevant national, European and international technical fora, working groups, exercises and coordination structures, as assigned.
- Contribute to Work Programme planning, deliverable tracking, quality assurance, performance indicators, training and continuous improvement across assigned functions.
Qualifications / Skills Required
Either of the following:
- A Bachelor's degree at MQF Level 6 in Computer Science, Information Technology, Information Security, Cybersecurity, Telecommunications, Engineering or another relevant technical field, together with at least four years of relevant experience;
OR - A Master's degree at MQF Level 7 in one of the above or another relevant field, together with at least three years of relevant experience.
- Relevant experience may include cybersecurity assurance, audit, risk management, incident response, regulatory supervision, telecommunications security, critical-infrastructure resilience, conformity assessment or a closely related field.
- Preference will be given to candidates demonstrating knowledge of NIS2, CER, the EU Cybersecurity Act, European cybersecurity certification, 5G security or related EU cybersecurity frameworks.
- Experience in planning or conducting cybersecurity audits, inspections, control assessments or technical investigations will be considered an asset.
- Knowledge of electronic communications networks, cloud or data-centre services, digital infrastructure, submarine cable systems or other critical infrastructure will be considered an asset.
- Professional certifications such as CISSP, CISM, CISA, CRISC, ISO/IEC 27001 Lead Auditor or equivalent will be considered an asset rather than a mandatory requirement.
- Ability to interpret complex technical and regulatory material and translate it into proportionate supervisory requirements, methodologies and written findings.
- Strong research, analytical, problem-solving and evidence-assessment skills, together with sound professional judgement.
- Ability to lead assigned technical workstreams, work collaboratively in a flat multidisciplinary team and manage competing priorities without requiring line-management authority.
- Excellent written and verbal communication skills in English and preferably also in Maltese.
- Proficiency in standard office and collaboration tools and the ability to work effectively with regulatory case-management and evidence systems.
ADDITIONAL NOTES
*A recognized Qualification comparable to the number of credits, as applicable, is only accepted subject to an MQRIC formal recognition statement.*
By the closing time and date of this call for applications, applicants must be:
a) citizens of Malta; or
b) citizens of other Member States of the European Union who are entitled to equal treatment to Maltese citizens in matters of employment by virtue of EU legislation and treaty provisions dealing with the free movement of workers; or
c) citizens of any other country who are entitled to equal treatment to Maltese citizens in matters related to employment by virtue of the application to that country of EU legislation and treaty provisions dealing with the free movement of workers; or
d) any other persons who are entitled to equal treatment to Maltese citizens in matters related to employment in terms of the law or the above-mentioned EU legislation and treaty provisions, on account of their family relationship with persons mentioned in paragraph (a), (b) or (c); or
e) third country nationals who have been granted long-term resident status in Malta under regulation 4 of the ‘Status of Long-Term Residents (Third Country Nationals) Regulations, 2006’ or who have been granted a residence permit under regulation 18(3) thereof, together with family members of such third country nationals who have been granted a residence permit under the ‘Family Reunification Regulations, 2007’; or
f) in possession of a residence document issued in terms of the “Residence Status of United Kingdom Nationals and their Family Members in Malta in accordance with the Agreement on the Withdrawal of the United Kingdom and Northern Ireland from the European Union and the European Atomic Energy Community Regulations”.
The advice of the Citizenship Unit within Community Malta Agency and the Expatriates Unit within Identita` should be sought as necessary in the interpretation of the above provisions.
Remuneration & Benefits
Salary bracket is between €30,750 – 38,994.
In addition, the employment package will also include:
- Up to 15% performance bonus
- Up to 10% Market Corrector
- €1,481 communication allowance
- Health insurance
The MCA is an equal opportunities employer.
Candidates should send their CV and covering letter by post or by email at vacancies@mca.org.mt
For more information, please contact our Human Resources team on +356 21336840
Foreign qualifications need to be supported by the Malta Qualifications Recognition Information Centre (MQRIC). Applications not containing the MQRIC recognition will not be considered.
The MCA reserves the right, as it deems necessary, to verify the authenticity of any academic, professional, or other qualifications submitted in connection with an application. It may, at its sole discretion, request original documentation or seek direct confirmation from the relevant institutions at any stage of the recruitment process. Any false declaration, misrepresentation, or failure to disclose relevant information may result in disqualification from the selection process or withdrawal of any offer of employment, including after an employment offer has been made.