Cyber Security Consultant - Red on Blue Strategy

Tender description

Summary of the work There is a requirement for the Home Office to develop a red on blue capability to support its cyber security initiative. We are looking for an individual who can work with the new Cyber Programme and develop a strategy to bring this capability online. Specialist role Cyber security consultant Expected Contract Length 6 weeks Latest start date Wednesday 31 May 2017 Maximum Day Rate £800.00 Early Market Engagement None. The role has previously been advertised (DOS 1896) but did not result in an appointment. Who Speclialist Work With The candidate will be joining the Home Office Cyber Programme and will integrate into the existing strategy team already in place. What Specialists Work On Develop a Red on Blue Strategy. The strategy should support: 1. Vision - how will red teaming reduce risk to the organisation? 2. Volumetrics - advice on frequency / volume of exercising required to achieve the vision e.g. 4 exercises a year (most of the banks would do 4 per annum). 3. Exercising - how do you run the exercises, inputs / outputs , how does this link to related processes e.g. controls testing. Skills & Experience • A deep understanding of red on blue strategy development and execution. • Experience of strategy development and interacting with senior staff. • Experience of cyber security policy and process development • Good communication skills, verbal and written, and a good understanding of the use of different channels and formats for different audiences. • A deep understanding of cyber-security operations and risk-management in the delivery of IT services. • Very good spoken and written English. Nice to Haves • Experience of working on related projects in large government departments. • Experience of working in a challenging and complex public sector environment with regularly changing priorities. • Certified Information Services Professional (CISSP) or similar accreditation. • A strong degree in a technical discipline, ideally in IT security, or equivalent industry training and experience Work Location Home Office, 2 Marsham Street (2MS), London, SW1P 4DF. Desk space will also be available in Soap Works, Salford and Apollo, Building Croydon Working Arrangments Full-time, 5 days a week, co-located with the delivery team initially to gain an understanding of the work in 2 Marsham Street. Security Clearance SC Additional T&Cs None No. of Specialists to Evaluate 4 Cultural Fit Criteria • Committed to excellence • Open and collaborative team approach • Flexible working • Committed to team working • Willing to share skills and knowledge • Ability to operate in an agile environment and to provide reasoned arguments in support of shifting requirements. Evaluation Weighting Technical competence 65% Cultural fit 15% Price 20% Questions from Suppliers 1. Will it be acceptable to provide a fixed price submission, where the fixed price does not exceed the budget allocated in the specification? The DOS Specialist contract and the requirements for this work do not accommodate a fixed price approach, however, a logical plan of work and work profile will be agreed with the successful candidate. 2. A 6 week duration is not as attractive as other contracts in this small specialist market. What is the longest this contract could be offered for? Target duration is 6 months +. This initial work is estimated to involve 6 weeks of effort. Any extension will be dependent on the outcomes of the work, quality of the output and necessary follow on actions. 3. Would expenses be payable for travel around the 3 sites? Expenses for travel outside of the M25 will be payable in accordance with Home Office expenses policy where they are necessarily incurred, supported by receipts where required and authorised in advance by a Home Office Manager. 4. Will Home Office IT be available for the chosen consultant on day 1, or will the work be conducted on the consultant's own IT? The work will be conducted on Home Office IT, which will be provided at the start of the engagement. 5. Is the role within IR35 or outside? The role is currently considered to be outside IR35 on the grounds that it is short term, has a clear deliverable and requires a specialist working independently to complete the work. However, we await an authoritative determination. Please bid on the basis of OUTSIDE IR35.