CCT544 - Information Assurance (Security) SME

Tender description

Who Speclialist Work With This SME will work within the highly focussed Cryptographic Enabling Services (CES) Information Assurance team to deliver the project to operational use and also to liaise with commercial suppliers, internal assurance, design teams, and other stakeholders as required. What Specialists Work On Provide support/develop the Information Assurance, Cyber and Accreditation evidence in support of Design, Development and Deployment of ISS Cryptographic Enabling Services project. The individual will provide expert advice and input to ensure the system meets all necessary technical and policy security requirements, is assessed for IA/Cyber risks and provides support for risk management/accreditation decisions. Activities will include but not limited to: • Produce/Review/Manage accreditation deliverables and activities in accordance with MOD Policy and in line with Project Plans. • Attendance and input within specialist area at meetings/workshops/working groups. • Provide updates to the Security stakeholders in support of these activities. Where the Work Takes Place ISS, Building 405, Spur F1, Westwells Road, MOD Corsham, SN13 9NR Early Market Engagement Working Arrangements All tasking will take place from MoD Corsham, with the need to travel to stakeholders and Industry partners when required under the direction of the MOD Security Assurance Coordinator. You are required 5 days a week, the working day is 8 hours to include 30 minutes for lunch. Overnight visits will only be permitted if permission is sought in advance. This individual will report to the SyInfra Security Assurance Coordinator. Work Location ISS, Building 405, Spur F1, Westwells Road, MOD Corsham, SN13 9NR Security Clearance SC Clearance must be in place and cover the duration of the contract. Additional T&Cs Skills & Experience Experience of providing technical security support on Government projects, working to HMG/MOD Security Policy and requirements (JSP 440, 604 etc). Evidence of working with MOD security stakeholders and coordination, analysis and management of system security risks. Able to demonstrate the application of contextualised risk management in the application of technical/procedural/physical security controls within the risk/cost/benefit trading space. Understanding of NATO Crypto Key production, movement and use and experience of working within the MOD Cryptography environment and understanding of Cryptography policy and requirements (JSP 490, 491 etc) Experience of scoping ITHC activity and remediating ITHC Recommendations Evidence and proven track record of delivering security assurance, accreditation documentation and activities within a complex MOD IT system/service, to successful outcomes. Including experience of working to MOD accreditation processes Experience of identifying, assessing, recording and managing risk at programme/project level and then producing/maintaining risk documentation for use in system accreditation and Capable of managing compliance against security requirements Nice to Haves Ex-CLAS CISSP (Or industry equivalent) CCP SIRA (Or industry equivalent) Demonstrable experience of working as a technical security SME within a project environment, using Agile methodologies Experience of leading Security Working Groups as a way of managing project security risks No. of Specialists to Evaluate 5 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative when making decisions Take responsibility for their work Share knowledge and experience with other team members Be comfortable with presenting highly technical subjects to non-technical audiences Assessment Method Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers Budget range £800 per day ex vat