RM1043/CCT826 – Information Assurance Specialist Data Centre Rationalisation

Tender description

Who Speclialist Work With The specialist will be required to work with the Crown Servant Security Assurance Coordinator in addition to the ASDT (Application Service Development Team) agile teams and Project Stakeholders. One specialist will be working with hosting teams. One will focus on applications and on-boarding onto platforms and one will be concentrating on Data Centre rationalisation and migration of systems. What Specialists Work On Review of HLD/LLD Completion and maintenance of DART Define CTAS scope Production of Security Requirements Statements and Risk Balance Cases Production and Review of RMADS and OSMP and other associated documentation to achieve accreditation Review ITHC Testing and remediation plans Audit supplier for correct level of due diligence Production of Pre-PIA and PIA, MOD Code of Connection and MOD Statement of Connection Conformity Chair of SWG and Security Surgeries and production/distribution of outputs Audit of live operations and Inspection of Protective Monitoring System Regular meetings with Accreditor and NCSC Witness system performance post changes in the design Where the Work Takes Place ISS (Information Systems and Services), Mustang Building, Rudloe Site, MoD Corsham, Westwells Road, Corsham, Wiltshire, SN13 9NR. Early Market Engagement Working Arrangements All tasking will take place from MoD Corsham and the specialist is required 5 days a week. The working day is 8 hours including 30 minutes for lunch. Travel may be required within the UK with Travel and Subsistence costs away from MoD Corsham recoverable in correspondence with MoD Departmental/Policy rates. Work Location ISS (Information Systems and Services), Mustang Building, Rudloe Site, MoD Corsham, Westwells Road, Corsham, Wiltshire, SN13 9NR. Security Clearance Developed Vetting Clearance must be in place prior to and for the duration of the contract starting due to the projects the individual is required to work with. Additional T&Cs Skills & Experience Holds CCP Practictioner Status - 25 Points Evidence of Information Risk Management in the HMG and/or Defence context - 20 Points Evidence of security knowledge associated with Data Centre Rationalisation - 20 Points Nice to Haves Holds CCP - Certified Cyber Professional Senior Practitioner status - 10 points Holds CISSP - Certified Information Systems Security Professional status - 10 Points Holds CISM - Certified Information Security Manager status - 10 Points Knowledge and understanding of agile ways of working - 5 Points No. of Specialists to Evaluate 3 Cultural Fit Criteria Work as a team with our organisation and other suppliers Be transparent and collaborative when making decisions Have a no-blame culture and encourage people to learn from their mistakes Take responsibility for their work Share knowledge and experience with other team members Assessment Method Interview Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers Budget range £900.00 (inc vat) or £750.00 (ex vat) maximum budget per day.