Technical security consultant and assurance coordinator

Tender description

Who Speclialist Work With The candidate will work within the UKHOs Marine Intelligence Programme and the Defence Maritime Geospatial Intelligence Centre teams. What Specialists Work On 1. Manage the security assurance for a specific Defence related project to deliver an upgraded GIS based system using both a bespoke web front end and COTS products. 2. Manage accreditation and security assurance activities across a range of projects in the wider customer Defence programme. 3. Manage the security assurance activities for a critical ‘Big Data’ digital transformational programme. Involvement in all three pieces of work will require the applicant to work unsupervised and under own initiative also to organise and lead Security Working Groups and conduct security activities in accordance with MOD policies and procedures. Where the Work Takes Place United Kingdom Hydrographic Office, Admiralty Way, Taunton, Somerset, TA1 2DN Early Market Engagement Working Arrangements Full-time, 5 days a week. The specialist will generally be expected to be on site for at least four days a week to attend any relevant meetings and provide briefs/updates as required. There is scope for distance working on the other day. Work Location United Kingdom Hydrographic Office, Admiralty Way, Taunton, Somerset, TA1 2DN Security Clearance Security Check (SC) Additional T&Cs To enable the Authority to comply with the Finance Bill 2017 you will need to confirm whether your business is a Personal Service Company (a PSC is a business that provides services and where the worker delivering the service has control over 5% or more of the share capital of that business). Skills & Experience Experience of providing technical security support on Government projects, working to HMG Policy. Experience of working within MOD Security regime and understanding of security policy and requirements (JSP 440 etc) Experience of advising on the deployment of application and infrastructure security controls. Demonstrable experience of working as a technical security SME within a project environment, using Agile methodologies. Experience of working to MOD accreditation processes and liaising with MOD accreditors. Experience of using DART to register and manage Targets of Accreditation. Experience of identifying, recording and managing risk at programme and project level and then producing and maintaining risk documentation for use in system accreditation. Experience of leading Security Working Groups as a way of managing project security risks. Experience of working with big data platforms, specifically Hadoop (Cloudera distribution). Capable of managing compliance against security requirements. Familiar with using Microsoft TFS for managing work backlogs. Demonstrable ability to maintain strong relations with internal and external stakeholders. Familiarity with the following technologies and specifically security related to them: Docker, Ansible, Apache Hive, Jenkins, NiFi, NginX, Maven, Nexus. An understanding of security of UNIX systems – especially CentOS and RedHat. Familiarity with OWASP top 10. Excellent verbal and written communication skills and an ability to translate technical and security aspects into coherent business terms. Familiarity with SIEM systems. Experience of scoping ITHC activity and remediating ITHC Recommendations. Experience of information management procedures and processes at the very highest levels of UK security classification. Knowledge and exposure to cloud environments (specifically AWS) and ensuring necessary security assurance is in place/obtained to offer assurance for OFFICIAL workloads. Nice to Haves Experience of ‘DevSecOps’ and vulnerability management using Jenkins OWASP dependency checker. Ex-CLAS. Familiarity with GIS products especially ESRI ArcGIS suite, CISSP. CCP SIRA. DevOps experience. No. of Specialists to Evaluate 5 Cultural Fit Criteria Work well with multiple teams. Require minimal supervision and be able to take responsibility for the assigned tasks. Be comfortable with presenting highly technical subjects to non-technical audiences. Assessment Method Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers No questions have been answered yet Budget range