Cyber Security Specialist

Tender description

Summary of the work A Cyber Security Specialist is required to support Land Registry in assessing the vulnerabilities of new services and to assess implementation of controls for those vulnerabilities. Specialist role Cyber security consultant Expected Contract Length Onsite 3 days per week for 3 months (Total of 36 days) Latest start date 31/10/2016 Maximum Day Rate £700 inclusive of T&S Who Speclialist Work With Working into the Cyber Security & Resilience Team and Infrastructure Office Service Team as a Cyber Security Specialist Manager on the Strategic SOC project. Accountable to the IS Assurance Manager - who will act as escalation route for concerns or issues that cannot immediately be resolved, overall information assurance and security guidance. Working directly with agile development teams to assess new services for vulnerabilities and to assess implementation of controls for those vulnerabilities. What Specialists Work On 1. Undertake ongoing ISO27001 centred risk assessments on behalf of IS Assurance Manager in line with ensuring continued compliance to government standards. 2. Undertake investigative and research activities through liaison with IS architecture community, members of Corporate Legal Assurance Services and HR Services on behalf of the Head of IS Assurance As Land Registry are part of the Critical National Infrastructure we are required to ensure all "ICT Solutions" which connect to our corporate network have been independently assessed against the full range of security threats to information. Skills & Experience • Extensive knowledge of UK Government SAecurity Information Assurance practices • Qualified to one or more of the following CESG Certified levels: Accreditor, IA Auditor, Security and Information Risk Advisor to Practicioner level or higher • Knowledge of ISO27002 controls • Experience of risk analysis and reporting methodologies. Nice to Haves Hold the CISSP certification Work Location Seaton Court 2 William Prance Road Plymouth PL6 5WS Working Arrangments Working onsite for 3 days per week alongside the Cyber Security & resilience Team, and IS Assurance Manager Security Clearance SC Cleared No. of Specialists to Evaluate 6 Cultural Fit Criteria • Work as a team with our organisation • Be transparent and collaborative when making decisions • Share knowldge and experience with other team members • Be able to define best practice and share knowledge withe agile team members • Be comfortable standing up for their discipline • Able to advise less experienced Assurance staff on security best practices Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Could you clarify if there is flexibility with regards to days worked? Will the candidate be able to decide or do you have specific days in mind? Ideally we would look for mid-week(Tuesday-Thursday) but week to week we could manage some flexibility. We would want to avoid Fridays due to limited availability of the onsite teams on that day. 2. Is this request additional to or a replacement for https://www.digitalmarketplace.service.gov.uk/digital-outcomes-and-specialists/opportunities/1109? This is a replacement advertisement as the original was incorrectly listed as an outcome and not specialist. 3. Do you expect this opportunity to fall under the proposed changes to off payroll working within the Public Sector, and will you be deducting tax at source? https://www.gov.uk/government/consultations/off-payroll-working-in-the-public-sector-reform-of-the-intermediaries-legislation We will be contracting with the selected organisation to deliver this service and not the individual therefore IR35 should not apply and the responsibility should sit with the contracting organisation. 4. I have entered the day rate and the system is saying "there is a problem with the day rate, this can not be higher than the rate you have already provided" Could you advise? This question should be directed to at enquiries@digitalmarketplace.service.gov.uk who will be able to talk through changing the day rates if necessary