Manager (Cybersecurity)

Jobsplus Permit No. 1102/2024

Overall Purpose of the position

The Manager (Cybersecurity) holds a pivotal position at the forefront of the implementation of the pertinent legislation such as the Cybersecurity Act and Cyber Resilience Act.

Main duties & responsibilities

The Manager shall be responsible for the following duties and responsibilities, but not limited to:

• Drafting, implementing and maintaining documentation, systems, procedures, certification schemes and strategies to ensure effective implementation of pertinent EU legislation related to cybersecurity, including the Cybersecurity Act, Cyber Resilience Act, pertinent implementing regulations, as may be revised periodically, and other assigned areas as prioritised by the MDIA.
• Managing, devising and implementing the required frameworks for the market surveillance and notifying authority function within the Cyber Resilience Act and for supervision, approvals, and certification pursuant to the Cybersecurity Act, and in line with other upcoming pertinent legislation and guidelines, as applicable.
• Ensuring effective information flow, timely follow-up, and appropriate escalation where required, including coordinating across relevant internal functions such as enforcement.
• Managing and mentoring Officers within the team, including performance evaluations and professional development.
• Building and maintaining strong relationships with internal and external stakeholders, including other competent authorities, EU institutions, ENISA, industry representatives, academia, and civil society groups.
• Enhancing the visibility of the MDIA through active engagement in national and international fora and the implementation of targeted stakeholder outreach activities.
• Drafting and reviewing comprehensive strategies, reports and expert advice provided to MDIA, the European Commission, and other relevant bodies.
• Staying at the forefront of technology and regulations to inform strategic decision-making, through continuous development.
• Representing the MDIA in national, international and EU forums, contributing to policy development, and shaping the organisation’s position.
• Driving continuous improvement initiatives within the assigned field.
• Managing other areas in line with the direction of the organisation.
• Participating in quality improvement and internal processes, including participating in internal audits as carried out by the Authority in line with ISO 9001:2015 and other standards as may be applicable. Additionally, managing and participating in external audits and EU peer reviews.
• Carrying out any other duty as requested by the Chief Officer or designated Reporting Officer.

Authority Levels (decisions & discretion)

• Managing Unit and developing, implementing, reviewing and evaluating relevant policies, procedures, forms, strategies and practices, under the guidance of the Reporting Officer.
• Delegating responsibility to staff as may be required.
• Making recommendations to the Reporting Officer.

Working Conditions

• Attendance outside normal office hours may be required.
• Undertaking duties abroad when required in line with the exigencies of the Authority.

Main communication channels (key working relationships)

• Liaison with Offices and Departments of the Authority and with other bodies.
• Liaison with the Public Administration, ENISA and other competent authorities.
• Dealing with prospective and recognised economic operators.

Qualifications and Experience Required

By the closing time and date of this call for applications, applicants must be:
(1)

a) citizens of Malta; or

b) citizens of other Member States of the European Union who are entitled to equal treatment to Maltese citizens in matters of employment by virtue of EU legislation and treaty provisions dealing with the free movement of workers; or

c)
citizens of any other country who are entitled to equal treatment to Maltese citizens in matters related to employment by virtue of the application to that country of EU legislation and treaty provisions dealing with the free movement of workers; or

d) any other persons who are entitled to equal treatment to Maltese citizens in matters related to employment in terms of the law or the above-mentioned EU legislation and treaty provisions, on account of their family relationship with persons mentioned in paragraph (a), (b) or (c); or

e) third country nationals who have been granted long-term resident status in Malta under regulation 4 of the “Status of Long-Term Residents (Third Country Nationals) Regulations, 2006” or who have been granted a residence permit under regulation 18(3) thereof, together with family members of such third country nationals who have been granted a residence permit under the “Family Reunification Regulations, 2007”; or

f) in possession of a residence document issued in terms of the “Residence Status of United Kingdom Nationals and their Family Members in Malta in accordance with the Agreement on the Withdrawal of the United Kingdom and Northern Ireland from the European Union and the European Atomic Energy Community Regulations”.

The advice of the Citizenship Unit within Community Malta Agency and the Expatriates Unit within Identity Malta Agency should be sought as necessary in the interpretation of the above provisions.

The appointment of candidates referred to at (b), (c), (d) and (e) above would necessitate the issue of an employment licence in so far as this is required by the Immigration Act and subsidiary legislation. JobsPlus should be consulted as necessary on this issue.

And

(2)

a) A recognised Master’s degree at MQF Level 7* (subject to a minimum of 60 ECTS/ECVET credits or equivalent**) in ICT, computer information systems, information technology, or information security or in a pertinent and relevant area of study, plus one (1) year proven relevant work experience in ICT risk, compliance, or Cybersecurity; or

b) A recognised Bachelor’s degree at MQF Level 6* (subject to a minimum of 180 ECTS/ECVET credits or equivalent**) in ICT, computer information systems, information technology, or information security or in a pertinent and relevant area of study at MQF Level 6, plus three (3) years proven relevant work experience in ICT risk, compliance or Cybersecurity; or

c) Candidates who do not have the necessary academic or professional qualifications but have at least ten (10) years of relevant senior managerial experience in regulatory affairs in the sector of cybersecurity, may still apply as the MDIA may still be interested in speaking with them.

*It is the responsibility of applicants in possession of qualifications awarded by Universities and other similar institutions outside Malta to produce a recognition statement at application stage on comparability of qualifications issued by the Malta Qualifications Recognition Information Centre (MQRIC). The MQRIC is the competent body within the MFHEA that recognizes qualifications against the Malta Qualifications Framework (MQF). More information is available in the following URL: https://mfhea.mt/academic-qualifications/.

(3) Ability to communicate fluently in English and preferably in Maltese.

And

(4) Soft skills required:

a) Quality-driven: Ability to continuously strive to deliver high-quality service by adding value to stakeholders, fostering an entrepreneurial culture, as well as by having the flexibility to respond to shifts in the industry.

b) Knowledgeable: Commitment to continuous professional development and industry training.

c) Transparent: Ability to carry out all activities with openness, integrity, diligence, expertise, trustworthiness and objectivity, while maintaining the highest professional standards.

d) Collaborative: Capacity to share ideas and disseminate information with stakeholders, work in a team and be responsive to queries from other entities and the public.

e) Reliable: Ability to be productive to pave the way for new opportunities. In so doing, it seeks to be a reliable body for the various internal and external stakeholders that require the Authority’s services in any capacity.

Interested candidates are required to send a motivational letter and CV on [email protected] by not later than Tuesday, 8th September 2026.