Cyber Security Operations Centre Manager

Tender description

Summary of the work The Home Office are setting up a Cyber Security Operating Centre (CSOC) in Manchester. This will provide Security monitoring and security response across the Home Office Estate. As part of this build the CSOC require a CSOC manager from industry who has fresh experience of running a CSOC. Specialist role Cyber security consultant Expected Contract Length 6 months initially with possible extension to 12 months. Latest start date 23/01/2017 Maximum Day Rate £800.00 a day Early Market Engagement None Who Speclialist Work With The Home Office needs to move quickly to stand-up the CSOC. The organisation has staff in training but is looking at an interim head to lead the organisation from industry. What Specialists Work On The candidate should be able to support: Recruiting, training and mobilising a Cyber-Security Operations team. Working with current security service providers (internal and external) to integrate their security operations capability with the overarching CSOC Developing relationships with CSOC development activities in other government departments and with the National Cyber Security Centre to share best practices and interoperability. Skills & Experience • Experience of managing a CSOC. • Setting the scope and coverage of the CSOC and ensuring the necessary architecture, design, operations and integration plans are prepared and approved. • Experience of cyber security policy and process development • Extensive experience of outsourcing of IT services, and of working with 3rd party suppliers. • Good communication skills, verbal and written, and a good understanding of the use of different channels and formats for different audiences. • A deep understanding of cyber-security operations and risk-management in the delivery of IT services. • Strong leadership qualities and the ability to inspire a new approach to security operations as a fundamental component of Service Management. • Ability to build strong effective partnerships with peers across the technology organisation and beyond to security professionals and business risk owners. • Very good spoken and written English. Nice to Haves • Experience of working in a challenging and complex public sector environment with regularly changing priorities. • Certified Information Services Professional (CISSP) or similar accreditation • A strong degree in a technical discipline, ideally in IT security, or equivalent industry training and experience Work Location Home Office, Colgate Ln, Salford M5 3EB and 2 Marsham Street (2MS), London, SW1P 4DF Working Arrangments Full-time, 5 days a week, co-located with the delivery team initially to gain an understanding of the work in 2 Marsham Street Security Clearance All staff must hold or be prepared to undergo SC Security Clearance to operate on this project. Additional T&Cs Standard DOS Terms and Conditions. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Committed to excellence • Open and collaborative team approach • Flexible working • Committed to team working • Willing to share skills and knowledge • Ability to operate in an agile environment and to provide reasoned arguments in support of shifting requirements. Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. When will interviews for this role take place? Interviews are planned to take place at 2 Marsham St, London on 21st and 22nd December. 2. Can the role be located in London with travel to Manchester? No. The role is based out of Soap Works Manchester with occasional travel to 2 Marsham Street London and other HO locations. 3. Who does this individual report into? The CSOC Manager reports into the Live Services Programme Manager 4. Would you consider someone with a lot of relevant CSIRT management experience rather than specifically titled “CSOC” experience? Yes – If they are CSIRT that we would be keen to review their CV. Candidates with a CIRT or SOC background will be preferred to those who have a general security background. 5. Is the SOC intended to operate 24x7x365 and would the SOC manager be expected to be on call 24x7x365? The SOC will operate around the clock, however, the CSOC Manager would only be required to work office hours unless a there was a major incident. There is no requirement to be formally available "on call". 6. Would resources be available to the SOC manager as part of the initiation phase so that architects and project managers can be utilised as part of the SOC design? There is a build team in place – the requirement is for someone to manage BAU. 7. Is there an opportunity to develop a threat intelligence service as part of the SOC design and / or work with an existing Home Office framework? No – this is an "in house" build. 8. Is information sharing encouraged with other government departments such as the National Cyber Security Centre for threat intelligence and information sharing purposes? Information sharing is encouraged and we have relationships in place.