Security Information Assurance Consultant

Tender description

Summary of the work Security Information Assurance Consultant to support Borders IT. Specialist role Technical Architect Latest start date Monday 3 July 2017 Who Speclialist Work With Key stakeholders within Border Force, Home Office Digital Data and Technology, Home Office and Security Services. The programmes are resourced by a range of specialist resources including Home Office Civil Servants and other government Civil Servants. What Specialists Work On The specialist will work in a central role in Borders IT, performing information assurance work to enable key projects to begin and also assure and advise project teams during development. This will involve creating RMADS style documentation to look at threats/risks/mitigations and residual risk for each project and make a recommendation back to business/technology and influence the architecture design. All expected to be cloud hosted in AzureUK with the mix of IaaS, SaaS and PaaS to be determined (and influenced by the security work). Skills & Experience • Strong experience of security information assurance Methodology. • Experience of formulating Information Security Governance Structure. • Excellent knowledge of government standards and GPGs. • Strong experience with government security policy framework (SPF). • Proven background of compiling information assurance frameworks. • Experience of preparing and reviewing RMADS and associated documents including the provision of Risk Treatment Plans and recommended remedial activities. • Experience of formulating Risk Assessment summaries. • Experience with commercial risk assessment methodology e.g. ISF and IRAM • Experience with ISO27001:2013 and risk assessment methodology. • Ability to manage technical assessments of security related technologies, vulnerability assessments and penetration tools and techniques. • Good understanding of risk based architecture and design. • Good understand of securing applications, databases, networks and infrastructure. • Excellent interpersonal and communication skills. • Ability to form and maintain relationships at all levels of engagement. • Appreciation of development and project life-cycles, including Agile methods. • Experience of formulating and delivering Security Awareness Training. Nice to Haves Experience of working on digital by default service standard compliant government website. Work Location 2 Marsham Street initially then Croydon from summer / autumn 2017 Working Arrangments This role requires being physically on site Monday – Friday. Approximate hours are 09:00 – 18:00. Specialists will work primarily on-site with teams as required and report to management on site. Specialists are expected to work across the multiple sites as required. Expenses will conform to HO internal policies and will not be payable to Westminster, Croydon, or Heathrow. Security Clearance Security clearance of Security Check (SC) is required. No. of Specialists to Evaluate 5 Cultural Fit Criteria • Have a flexible attitude and temperament. • Transparent and collaborative when making decisions. • Work well in a team within our organisation. • Have a no-blame culture and encourage people to learn from their mistakes. • Mentor members of the team. Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. What is the contract duration? The initial work package will be for 6 Months with the option to extend for another 6 Months. 2. Please suggest a budget for this specialist role. We expect this role will attract a range between £650-£850. 3. What is the IR35 status of this role? Following review, this role is likely to be deemed to be outside the scope of IR35 of the Intermediaries legislation. 4. Is the rate inclusive or exclusive of VAT? Exclusive of VAT. 5. Is there any travel involved in this role and will the travel expenses be paid ? We expect that this role would have limited need to travel outside of London/Croydon. Expenses outside of the M25 will be preapproved and paid as per the Home Office T&S policy. 6. What is the total number for positions open for this role? There is one open position. 7. Is occasional remote working allowed? Due to the nature of this role, it is likely that to be effective the majority of time will be spent on site with the respective teams. However some remote working will be acceptable. 8. Any specific format(pdf,doc) in which CVs to be sent Please provide in a common readable format. 9. Any chances of change in start date as the latest date mentioned is Monday 3 July 2017? Availability to start as soon as possible is a key consideration for this role. 10. Can more than one candidate per supplier be submitted for this role? Please submit one candidate per supplier. 11. What is the lead time for feedback once the application is submitted? Internal timeline are still be determined, and will be affected by the number of submissions. However as previously stated, the need for this role is immediate and we expect to evaluate shortly after the advert closes. 12. Will you sponsor SC clearance? (Personal questions of specific suitability for SC clearance is also addressed in this answer.) Yes if needed the Home Office would sponsor candidates for SC clearance. Gaining Security Clearance will normally require you to have been a resident in the UK for a minimum of 5 years. In order to provide an answer to your clarification question, further personal information would be required for a referral to the vetting team. If the candidate is proposed and is short-listed, we will request this further information to clarify the position with the vetting team. 13. Can a candidate with DV clearance be considered for this role? Yes.