IT Security Manager

Tender description

Summary of the work The main purpose of this role is to be the security expert for ARP to ensure security controls and protection is in place on the communication infrastructures relating to the Ambulance Service in England and support for the Welsh and Scottish Ambulance Services where appropriate. Specialist role Cyber security consultant Expected Contract Length 6 months Latest start date Monday 9 April 2018 Maximum Day Rate £650 per day Who Speclialist Work With ARP delivers critical communications to the Ambulance Service. The role requires relationships to be built and maintained with a range of security specialist suppliers, Ambulance Trusts, the Cabinet Office, Government Digital Services, the wider NHS and other emergency services. What Specialists Work On 1. Be the security specialist for Ambulance control room and mobile data solutions nationally and manage the following aspects: security management, availability management, risk and issue management; 2. Contribute in the design, implementation and administration of policies, controls, guidance etc that have an impact on the security of the systems provided; 3. Lead and drive the full suite of testing including conformance, performance, integration and full end-to-end testing; and 4. Lead training of user groups in relation to security. Skills & Experience • have degree education, underpinned by experience in security management; IMT service management and/or IMT security management • experience of Government Digital Service/ public sector security management • current clean driving licence Nice to Haves • evidence Diploma in Security Management • evidence ITIL Service Manager • evidence PRINCE2 Practitioner • evidence a proven track record in security management within a communications field environment • evidence experience in testing communication technologies in operational environments • evidence extensive knowledge of communications solutions including Tetra, Mobile Data and 2G/3G/4G. Work Location Central London office base plus regular travel to Ambulance Trusts and suppliers across England. Working Arrangments Full-time (core hours of Mon-Fri 9-5) onsite for face-to-face and skype meetings. Travel and subsistence expenses are at NHS Agenda for Change rates: train and accommodation will be booked and paid for by the ARP PMO. Security Clearance Security Clearance required. Additional T&Cs Standard DOS2 Call-off Contract No. of Specialists to Evaluate 15 Cultural Fit Criteria • work as a team with our organisation • be transparent and collaborative when making decisions • take responsibility for their work • share knowledge and experience with other team members • be prepared to draft and embed security policies Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers 1. What is the IR35 status? The Ambulance Radio Programme plan to agree outcomes-based work packages with the Provider. We do not, therefore, anticipate this requirement falling within IR35, as a substitute could be offered during the duration of the agreement. However, any Provider being awarded this opportunity would need to take the IR35 test and determine for themselves whether this requirement is inside IR35 or not. 2. This ITT does not appear to require an in date Cyber Security certification, such as the National Cyber Security Centre Security and Information Risk Advisor (NCSC SIRA). Is this correct? Whilst a diploma in Security Management implies a level of knowledge, depending on when it was achieved, it does not guarantee up to date security knowledge. This Digital Marketplace tool serves to sift suitable Providers for a requirement and may need to be followed by a competitive process, depending on the responses received. A Provider able to supply staff with NCSC SIRA should state this in their response. 3. Can the Authority confirm that they will be calling forward 15 for interview? The Authority intends to call forward to the further competition/ interview stage as many Providers as are suitable, up to a maximum of 15. 4. Does the Project Manager qualification have to be PRINCE2 or will another recognised Project Manager qualification be acceptable? Yes, an equivalent is acceptable. 5. Can you confirm that the degree requirement is for a technical degree? The degree requirement is for a level of education. Suitable staff are likely to have a relevant technical degree, but this is not necessarily a requirement. 6. Is there currently, or has there recently been, an incumbent carrying out similar work for the Authority? No, the Ambulance Radio Programme (ARP) do not and have not had an incumbent carrying out similar work. There is some knowledge within the team and there is a scoping of audits in place under the current managed service. The future disaggregated model requires ARP to have this knowledge. 7. What level of security clearance is required?Will the ARP sponsor the security clearance process? Security Clearance to SC level is required. This process will not be sponsored by ARP for this requirement. 8. Is the candidate required to have clearance on Start Date? If a candidate has no clearance, will the Authority support the clearance process? The role requires Security Clearance, although not necessarily in time for the Start Date. The ARP will not be able to support the clearance process for this requirement. 9. Will the security clearance need to be already in place or will the specialist be supported through this application? The security clearance will need to be in place before or soon after the start date. The ARP are unable to support an individual under this requirement through the application process.