1 Security Architect

Tender description

Summary of the work This is an exciting opportunity to work with National Records Scotland on the Census 2021 programme. The census collects information about the population every 10 years and is widely acknowledged as playing a fundamental and unique role in the provision of comprehensive and robust population statistics. Specialist role Cyber security consultant Expected Contract Length 3 months with the possibility of a 3 month extension. Latest start date 15/12/2016 Who Speclialist Work With The successful candidate will work with Technical Architects, Solutions Architects, Information Security and Risk advisor. The candidate will report to the Head of ICT. What Specialists Work On •Evaluate options for hosting Census data collection and processing environments, provide advice on solution architectures from a security and information-assurance perspective •Propose security design principles for Census programme •Identify/assess information risks relating to architecture solutions. •Design/assess mitigation measures to manage risks to architecture solutions •Provide security advice/guidance relating to architecture solutions •Liaise with suppliers on solutions ensuring risks are managed, gathering/evaluating evidence of compliance with security requirements •Advice on assurance, verification tools/techniques ensuring that supplier solutions meet security/information assurance requirements throughout contracts •Ensure internal/external solutions are configured to meet agreed security architectures •Create security documentation in accordance to agreed standards Skills & Experience • Knowledge and understanding of the internal/external information security risks to digital information • Knowledge and understanding of information security standards with experience interpreting and applying information assurance legislation/policies • Experience/track-record of providing information security advice to corporate programmes and projects • Knowledge of digital architectures and digital solutions and understanding of the risks represented by solutions, with experience of managing security in an environment with frequent change • Experience in the design and implementation of security architecture solutions • Experience in the verification and audit of architecture solutions • Experience of evaluating security compliance of supplier solutions • Experience of providing security advice and guidance relating to cloud based solutions Nice to Haves • Knowledge of the application of security in an Agile environment • Knowledge and understanding of government information security standards and ISO27000 series • Experience of system operations for security network, application, monitoring, incident response and cloud services • Technical knowledge of security engineering, authentication, protocols, cryptography and application security • Certifications for CEH (Certified Ethical Hacking), CISSP (Certified Information Systems Security Professional), SANS GIAC (Global Information Assurance Certification) or CREST • Experience of security implications of configuration management processes and tools • Knowledge of a range of security verification services and their application – see SIRA role • Knowledge of information risk management methodologies - see SIRA role Work Location Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Working Arrangments Full time however 4 days a week can be negotiated. We need the employee to work with the team face to face in order to help with knowledge sharing. Security Clearance It is essential the candidate possesses SC Clearance. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Share knowledge and experience with other team members • Can work with clients with low technical expertise Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. Can the Authority please confirm whether the successful bidder for this opportunity will be precluded from bidding for any further Census 2021 opportunities with National Records of Scotland? I can confirm the successful bidder for this opportunity will not be precluded from bidding for any further Census 2021 opportunities with National Records of Scotland. 2. If we have a candidate who is immediately available, subject to being awarded, what is the earliest start date you could accept them to be on site? The earliest we can accept them on site is week commencing the 28/11/2016.