CSOC Programme Plan Manager

Tender description

Summary of the work Develop the MOD’s Cyber Security Operations Centre (CSOC) FY 18/19 Programme Plan and gain the approvals required for implementation Specialist role Cyber security consultant Expected Contract Length Until 31st Dec 17 Latest start date Wednesday 17 May 2017 Who Speclialist Work With Civilian, Military and Contractor personnel within the Defence Cyber Programme (DCP) and the wider MOD What Specialists Work On 1. Build on existing work to establish the requirements framework for the Cyber Security Operations Centre (CSOC) and mature this framework in support of developing a Programme Plan 2. Develop a Programme Plan detailing capability requirements to support development of the CSOC in FY 18/19 3. Develop the documentation required in support of gaining approval for the Programme Plan 4. Managing the staffing of the Programme Plan through the necessary boards and committees to gain approval for the plan Skills & Experience • Extensive understanding of cyber threats especially in the context of a large governmental department (15%) • Extensive understanding of defensive cyber capabilities and the interactions between them (15%) • The ability to work with stakeholders to identify requirements and document these in a clear and concise manner (10%) • Experience of identifying, recording and managing risk at programme and project level (10%) • Experience of assessing governance procedures and recommending/implementing improvements (5%) • Intimate knowledge of MOD’s Capability Directorate, Joint User construct, Cyber Operations and the acquisition/scrutiny process (25%) • Proven ability to work within a team of individuals with varying backgrounds (5%) Nice to Haves • Experience of staffing work through military and civilian channels (5%) • Experience of working in MOD/Defence organisations (5%) • Experience of working in cyber security (5%) Work Location The DCP is based in MOD Main Building in London and the specialist will generally be expected to base themselves here at least three days a week. Occasional travel to other MOD locations is expected Working Arrangments The specialist will generally be expected to base themselves in Main Building at least three days a week to attend any relevant meetings and provide briefs/updates as required by the DCP. The other days may be used by the specialist to progress the task as they see fit. No expenses will be paid and bidders should consider this when making a bid Security Clearance Individuals will be required to hold a minimum DV clearance No. of Specialists to Evaluate 3 Cultural Fit Criteria • Must be able to work in a mixed team of Military, MOD Civil Service and industry partners • Must be willing to embrace a just culture • Able to understand role in the wide context of 'Defence' and national security Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers 1. Could you please confirm the IR35 status of this role? The HMRC tool has deemed this role to be outside of IR35 2. Would you consider someone with 'SC Enhanced' clearance? Due to the nature of the role, DV clearance is required 3. Is there now, or has there recently been, an incumbent doing similar work for the Authority? Yes, there was an individual doing preliminary work for this package of work. That contract has now come to an end and this role is for follow on work 4. Would you take candidates with SC clearance who are eligible to be put through DV Clearance? The tight time-scale for the project would make obtaining DV clearance infeasible 5. Please confirm IR35 Status for this role. Please see the response to Q1 6. Does this role fall within or outside the scope of IR35? Please see the response to Q1 7. Is this role judged to fall within the IR35 regulations? Please see the response to Q1 8. Is this role inside or outside of IR35? Please see the response to Q1 9. Does this role fall inside IR35 Please see the response to Q1 10. Does this role fall inside IR35 Please see the response to Q1 11. Can the authority confirm the status of this role with regards to IR 35 Legislation Please see the response to Q1 12. Is this role in or out of scope for IR35? Please see the response to Q1 13. Will this role fall Outside of IR35? Please see the response to Q1 14. You say "3 days on site". Does that mean the other 2 days could be working at home? No, the 3 days refers to Main Building in London. The other 2 days will be spent visiting other sites, such as MOD Corsham 15. Please can you confirm the maximum day rate, and, if this role is In or Out of scope of IR35 Thanks There is no maximum day rate for the role. The advert gives an indication of the calibre of person required for the role and applicants should price their bid accordingly. For the IR35 scope, please the response to Q1. 16. We spotted throughout the requirement that there will be occasional travel to other sites, can you provide the site list and will there be any expenses or is this to be included in the daily rate? Please can you also confirm feedback date as I see the start date is next week? The main site will be MOD Corsham although others may be required as the task progresses. No expenses will be paid and this should be considered when making a bid. We will endeavour to provide feedback to applicants by the 19th May. 17. To follow on from the above question RE whether there is someone already doing this or has been recently- Is this same person applying/ being considered for this particular new contract? As an open competition the advert is available to all on DOS and until the bids are received, we will remain unaware of the tenders submitted. 18. 1. Is there any flexibility with the start date for this requirement as the latest start date listed (17th May) only allows 2 days for reviewing evidence, interviewing and onboarding 2. How much travel will be required and how many other sites will the specialist be expected to travel to? The latest start date for the role should be the 1st June 17 - I am unable to change this on the system. It is envisaged that 2 days of travelling will be required a week with MOD Corsham being the most likely destination but other destinations may be required as the task progresses. No overseas travel will be required. 19. • Is clearance essential or can they be working towards? • Will the position be extended- for how long? • Re :Intimate knowledge of MOD’s Capability Directorate, Joint User construct, Cyber Operations and the acquisition/scrutiny process (25%) is this essential? Current DV clearance is required due to the nature of the role. Time-scales for the task mean waiting for a clearance to be granted is not possible. The stated deliverables are required by the end of 2017 in order to obtain necessary approvals - there remains a possibility that follow on activity will be required although this is by no means certain. Yes, due to the nature of the task, intimate knowledge of these areas is essential to progressing the programme plan through the necessary approval boards and committees within the challenging time-scales. 20. • What is the interview process, length and type. • Can we submit CV’s on the digital portal or is there a separate address that these can be sent to? Do you like CV’s to be pasted onto the answers • Is there a contact that we can qualify further details with after the initial queries and before submitting The interview will be face to face and last roughly 45 minutes – it will delve deeper into the evidence supplied in the application. There is no requirement to submit a separate CV - any relevant information should be included in your submission. Under the rules of the framework, all questions/queries must be submitted through the portal.