Security and Information Risk Advisor

Tender description

Who Speclialist Work With You will work with Technical Architects, Solutions Architects and Data Architects. You will report to the Head of ICT. What Specialists Work On The tasks include: • conducting an information risk assessment of data hosting solution • participation in the development of Census information risk management approach, including: o Census information risk appetite o Census information security risk policy o development of recommended Census governance structure and roles and responsibilities for information risk management • development of security procurement guidance for a range of services, including cloud services • development of contract management approach for Census contracts • provision of advice and guidance on information security and information risk management to Census programme and projects • Knowledge and skills transfer to internal staff Where the Work Takes Place Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Early Market Engagement Working Arrangements The candidate will work 5 days a week however there may be room for negotiation to 4 days. We need a candidate who will work face to face with team members in order to promote the knowledge sharing. Work Location Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Security Clearance It is essential that the candidate has SC clearance. Additional T&Cs Skills & Experience Knowledge and experience of 5x5 Matrix risk management Knowledge and experience of Attack Tree – Threat Modelling Knowledge and experience of Risk discovery/SSM/SWIFT Methodology Knowledge and experience of ISO27005 Knowledge and experience of commercial methodologies Knowledge and experience of CESG Technical Risk Assessment and Risk Treatment – IS1/IS2 Nice to Haves Knowledge of a range of security verification services such as IT Health checks Knowledge of a range of security verification services such as protective monitoring Knowledge of a range of security verification services such as web application assessment Knowledge of a range of security verification services such as Cyber Essentials Knowledge of a range of security verification services such as source code reviews Knowledge of a range of security verification services such as mobile device testing Knowledge of a range of security verification services such as build reviews Knowledge of a range of security verification services such as VPN assessment Knowledge of a range of security verification services such as network device assessment Knowledge of a range of security verification services such as Wireless assessment Knowledge of a range of security verification services such as Firewall testing Knowledge of a range of security verification services such as physical security and access control No. of Specialists to Evaluate 5 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative when making decisions Can work with clients with low technical expertise Share knowledge and experience with other team members Assessment Method Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers No questions have been answered yet Budget range