Security and Information Risk Advisor

Tender description

Summary of the work This is an exciting opportunity to work with National Records Scotland on the Census 2021 programme. The census collects information about the population every 10 years and is widely acknowledged as playing a fundamental and unique role in the provision of comprehensive and robust population statistics. Specialist role Cyber security consultant Expected Contract Length 3 months with the possibility of a 3 month extension. Latest start date 15/12/2016 Who Speclialist Work With You will work with Technical Architects, Solutions Architects and Data Architects. You will report to the Head of ICT. What Specialists Work On The tasks include: • conducting an information risk assessment of data hosting solution • participation in the development of Census information risk management approach, including: o Census information risk appetite o Census information security risk policy o development of recommended Census governance structure and roles and responsibilities for information risk management • development of security procurement guidance for a range of services, including cloud services • development of contract management approach for Census contracts • provision of advice and guidance on information security and information risk management to Census programme and projects • Knowledge and skills transfer to internal staff Skills & Experience • Knowledge and experience of 5x5 Matrix risk management • Knowledge and experience of Attack Tree – Threat Modelling • Knowledge and experience of Risk discovery/SSM/SWIFT Methodology • Knowledge and experience of ISO27005 • Knowledge and experience of commercial methodologies • Knowledge and experience of CESG Technical Risk Assessment and Risk Treatment – IS1/IS2 Nice to Haves • Knowledge of a range of security verification services such as IT Health checks • Knowledge of a range of security verification services such as protective monitoring • Knowledge of a range of security verification services such as web application assessment • Knowledge of a range of security verification services such as Cyber Essentials • Knowledge of a range of security verification services such as source code reviews • Knowledge of a range of security verification services such as mobile device testing • Knowledge of a range of security verification services such as build reviews • Knowledge of a range of security verification services such as VPN assessment • Knowledge of a range of security verification services such as network device assessment • Knowledge of a range of security verification services such as Wireless assessment • Knowledge of a range of security verification services such as Firewall testing • Knowledge of a range of security verification services such as physical security and access control Work Location Ladywell House, Ladywell Road, Edinburgh, EH12 7TF Working Arrangments The candidate will work 5 days a week however there may be room for negotiation to 4 days. We need a candidate who will work face to face with team members in order to promote the knowledge sharing. Security Clearance It is essential that the candidate has SC clearance. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Can work with clients with low technical expertise • Share knowledge and experience with other team members Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers No questions have been answered yet.