diff --git a/mbed-tls-tf-psa-crypto-restricted-ci-testing.yaml b/mbed-tls-tf-psa-crypto-restricted-ci-testing.yaml
new file mode 100644
index 0000000..1f5285f
--- /dev/null
+++ b/mbed-tls-tf-psa-crypto-restricted-ci-testing.yaml
@@ -0,0 +1,60 @@
+- job:
+    name: mbed-tls-tf-psa-crypto-restricted-ci-testing
+    description: 'Job for testing TF-PSA-Crypto-restricted PRs'
+    project-type: multibranch
+    disabled: false
+    prune-dead-branches: true
+    days-to-keep: 60
+    num-to-keep: 20
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <credentialsId>mbedtls-github-token</credentialsId>
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                      <traits>
+                        <org.jenkinsci.plugins.github__branch__source.SSHCheckoutTrait>
+                          <credentialsId>mbedtls-github-ssh</credentialsId>
+                        </org.jenkinsci.plugins.github__branch__source.SSHCheckoutTrait>
+                      </traits>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>staging/pr-ci-testing</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: TF-PSA-Crypto-restricted
+        branch-discovery: all
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: nobody
+        discover-pr-origin: both
+        head-filter-regex: 'PR-3-(head|merge)'
+        status-checks:
+          skip: true
+          skip-branch-source-notifications: true
+        property-strategies:
+          all-branches:
+          - pipeline-branch-durability-override: performance-optimized
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: true
+        ssh-checkout:
+          credentials: mbedtls-github-ssh
diff --git a/mbed-tls-tf-psa-crypto-restricted-multibranch.yaml b/mbed-tls-tf-psa-crypto-restricted-multibranch.yaml
index c4e90ba..965ea1b 100644
--- a/mbed-tls-tf-psa-crypto-restricted-multibranch.yaml
+++ b/mbed-tls-tf-psa-crypto-restricted-multibranch.yaml
@@ -44,7 +44,7 @@
         discover-pr-forks-strategy: both
         discover-pr-forks-trust: nobody
         discover-pr-origin: both
-        head-filter-regex: 'PR-\d+-(head|merge)|gh-readonly-queue/.*'
+        head-filter-regex: '(?!^PR-3-(head|merge)$)PR-\d+-(head|merge)|gh-readonly-queue/.*'
         status-checks:
           skip: true
           skip-branch-source-notifications: true