Technical Security Consultant

Tender description

Summary of the work Reporting to the Head of Security and Facilities within the Information Directorate, the successful applicant will provide technical security support to the DBS Modernisation project within the Government Cloud and DBS Internal Government Digital Services Teams for the delivery of new web based products. Specialist role Cyber security consultant Expected Contract Length 31 December 2017 anticipated expiry date Latest start date 22nd May 2017 Who Speclialist Work With The individual will work within the Information Directorate, working directly to Elaine Carlyle. What Specialists Work On The successful applicant will: Deliver accreditation and technical security support for the IT enabled elements (Cloud and Digital) of the Change Programme; Work collaboratively with project, technical, commercial, security and information governance staff; Liaise with project, technical and security staff from multiple suppliers and Home Office; System accreditation support for key projects; Provision of advice and support on technical and procedural security standards; Reviewing and agreeing the scoping of IT Health Checks; Review and assurance of the suppliers proposed decommissioning plan for legacy infrastructure; Independent review and assurance to the supplier set up and implementation of a Security Operating Centre. Skills & Experience • Experience of providing technical security support on Government projects, working to HMG Policy. • Track record in delivering security architecture design, building and deployment of application and infrastructure security. • Knowledge of industry trends, current and emerging security technologies in the area of mobile, networks and cloud services. • Knowledge & understanding of ISO 27001, PCI-DSS, DPA, PSD2, GDPR and other standards or regulatory requirements. • Experience of scoping ITHC activity and remediating ITHC Recommendations. • Demonstrable ability to maintain strong relations with internal and external stakeholders. • Demonstrable experience of working as a technical security SME within a project environment, using both Waterfall and Agile methodologies. • Excellent verbal and written communication skills. Ability to translate technical and security aspects into coherent business terms. • Experience of influencing at a senior management level, including presentations at board level. • CCP SIRA or Ex CLAS Qualification • CISSP or CISM certified • Currently Holds Security Check (SC Clearance) as a minimum Nice to Haves Good level of IT literacy, including MS Office suite. Work Location Disclosure and Barring Service, Shannon Court, 10 Princes Parade, Liverpool, L3 1QY Working Arrangments Four days per week (workload to be reviewed after 3 months). Individual to be on site for all four days. Some scope for limited distance working. Security Clearance Security Check (SC) No. of Specialists to Evaluate 5 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their work • Share knowledge and experience with other team members • Be comfortable standing up for their discipline • Can work with clients with low technical expertise Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers 1. Please could you confirm whether this requirement sits within or outside of IR35. This role will sit within IR35. 2. Does DBS have any day rate in in mind or are you looking towards current market rates for the specialist. DBS has a maximum budget which will accommodate a day rate of up to £750. 3. Is there capacity to clarify expenses within the application, or should this be accounted for as part of the specialist's day rate? Expenses should be accounted for within the specialists day rate.However, there will be limited circumstances in which expenses are payable, specifically if DBS requires the specialist to work outside of the base location - Shannon Court Liverpool. 4. Will this role be inside IR35 legislation? Yes, this will be within IR35 legislation. 5. What budget to you have in mind for this? And what is the IR35 status? DBS have a maximum budget that will allow for up to £750 per day for the specialist.This will fall within IR35 legislation. 6. Is this role inside IR35? Yes, this role is within IR35 legislation. 7. Good Morning, Please can you stipulate the maximum daily charge rate. Is this role 'In Scope' or 'Out of Scope' of IR35? Thanks. DBS has a maximum budget which will allow for a date rate of up to £750.This is within scope of IR35. 8. From 6th April, responsibility for determining if an assignment is within IR35 will shift to the Public Sector organisation. We need to understand the client’s decision on the status of each contract assignment (including extensions) under IR35 and whether a new contractor assignment is deemed ‘Inside’ or ‘Outside’ of IR35 at the beginning of the recruitment process for hiring a contractor. There is an HMRC status portal available to help determine the status but we do require you to post a response as to whether the role is ‘inside’ or ‘outside’. This role is inside of IR35. 9. Can you give any guidance on budget? DBS has a maximum budget which will allow for up to £750 per day. 10. Please would you confirm the IR35 status for this assignment This role will sit within IR35 legislation. 11. Can you please advise whether this role has been assessed as inside or outside IR35? Thanks This role will be within IR35 legislation 12. Is this role deemed to be inside IR35? Would CISA be accepted instead of CISSP or CISM as a certification? This role is within IR35.CISA would not be accepted ad an alternative to CISSP or CISM certification. 13. Would it be possible to package the role up as a service meaning it would be outside of the IR35 legislation? This would mean setting up deliverable's and milestones for a set charge instead of a daily rate. This would not be possible due to the fact that the individual will be required to deliver/support existing projects and new projects as they arise. Therefore, a day rate which can be charged for the period of the contract is required. 14. Is there any potential for flexibility on location/remote working? Or is this purely a Liverpool/office based role? There is limited flexibility on the location of this role. The vast majority of the role will require the individual to be on site 3-4 days a week. There may be some scope for limited distance working, but this would have to be agreed on a case by case basis. 15. It would be helpful if you would break down why this role is inside IR35 using the terminology of the Check Employment Status for Tax tool. DBS have recently had a contractor deliver this role. A recent review from Home Office resulted in the re-classification of the role under IR35. Any replacement of the role will also fall under IR35. 16. Do you require the specialist to have both CCP SIRA and CISSP/CISM certifications? Or will either suffice? The requirement is one of CCP, SIRA or Ex CLAS and one of CISSP or CISM certified. 17. Do we have permission to use subcontractors. If so, at what stage of the application should we outline the percentage of delivery allocated to the subcontractor? The requirement is for the provision of an individual specialist to provide the services and skills outlined. This individual needs to be consistent to ensure an understanding of DBS and its objectives. Therefore, the use of subcontractors would not meet the requirement.