Cyber Security

Tender description

Why the Work is Being Done The key purpose of this role is to manage the security and compliance of all of the IT assets and data held within the Service, and hosted by 3rd party suppliers. Ensure that best practices for IT security and data management is documented, designed and implemented, and that the Services compliance is alignment with the ISO27001 framework. Should we proceed, we would look to start working with the supplier in September/October Problem to Be Solved A service is required to manage the ongoing cyber security concerns Who Are the Users As an Information Security service or consultant, you will ensure all IS investments deliver appropriate security solutions to protect the business now and in the future. You will act as a key player/partner to define IS strategy and lead the vision for the future of security. Providing regular reports on the performance of the IT infrastructure and report on exceptions or breaches of policies and procedures. This is a role, which include hands on activities to deliver and support the IT Strategy. The head of Information Security should hold the following qualifications; CISSP, CISM, CISO, Cyber Security. Early Market Engagement This opportunity is our market testing; currently the service is filled by an interim Work Already Done There is currently an interim filling this role. We are exploring to what extent a service could meet our needs Existing Team Currently an interim who is expected to leave in Autumn Current Phase Live Work Location MAS is based in Holborn. The supplier can be based wherever is appropriate, with meetings at the client site to be expected Working Arrangments Flexible; the focus is on delivery of an output. There will be close contact with all business heads, IT and members of the Executive Leadership team As this is a service, based on outputs, we wouldn't expect to pay expenses Security Clearance Not required Additional T&Cs Skills & Experience Demonstrate previous competence in this field Provide case studies of previous work Be qualified in the field, holding the following qualifications; CISSP, CISM, CISO, Cyber Security. Nice to Haves No. of Suppliers to Evaluate 6 Proposal Criteria Technical Solution Approach and methodology Implementation and handover process Cultural Fit Criteria Demonstrate the approach to understanding the organisation and how they would build relationships Payment Approach Fixed price Assessment Method Written proposal Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers Budget range this opportunity is being published to help us understand options and likely costs. to give an indication, we have employed a cyber security consultant as an interim in an expert management level role