Interoperability Deployed Security Assurance Coordinator

Tender description

Summary of the work Act as principal SA professional working closely with Service Manager/Service Stakeholders. MSP/Authority SA governance to achieve accreditation and through life management of all live services. Establish/Chair Security Working Groups. Review/assess/address/evidence security controls. Support live services with production of a formal document (maintained in line with policy standards and reviewed annually). Specialist role Cyber security consultant Expected Contract Length 16 months Latest start date Monday 6 February 2023 Maximum Day Rate £700 per day (Ex VAT) Who Speclialist Work With Civilian, Military and contractors within the MOD and wider Defence industry. There is no incumbent currently in post. What Specialists Work On The Security Assurance Co-Ordinator (SAC)/ Security Lead (SL) will be the main focal point for all Security Assurance related support tasks; dependent on the business needs. Checks and balances must be maintained and monitored in accordance with policy and standards; supported by the production of a formal document set to achieve accreditation or Safe by Design and adhere to the MoD Secure By Design principles. ‘An approach that enables a culture of proactive risk management and appropriate security consideration throughout a capabilities’ lifecycle by connecting cyber security principles, roles, processes, tools and techniques to achieve secure systems.’ Skills & Experience • Provide evidence of a minimum of three years’ experience within the last five years in an Information Assurance (IA) role in a similar sized complex organisation (e.g., MOD) (5%) • Provide an example of a high- level plan to your approach for identifying/managing Security Risks, Issues and Dependencies in a mature business/project area (20%) • Provide an example of how you have provided Security Assurance documentation to enable an organisation to continue the route to full rollout and adoption of policies/templates within delivery areas (5%) • Demonstrate experience of conducting Technical security reviews / approvals of Supplier Design and Test documentation to ensure that it is compliant with Security policy (20%) • Can you demonstrate experience of Security Accreditation and Security Assurance processes within a similar sized complex organisation (e.g., MOD) (5%) • Can you demonstrate previous working experience of Coordinating Technical security documentation to support the route to accreditation/accepting risks (10%) • Can you provide evidence of certified Cyber Professional (CCP) – at least SIRA Practitioner level before advert end date. Evidence to be sent to: UKStratComDD-CM-CCT-Group@mod.gov.uk (5%) Nice to Haves • Provide evidence of certified Information Systems Security Professional (CISSP) Qualification or Certificate in Security Management (CISM) before advert end date. Evidence to be sent to: UKStratComDD-CM-CCT-Group@mod.gov.uk (5%) • Provide evidence of being an Associate Member of the Chartered Institute of Information Security (CIISEC) before advert end date. Evidence to be sent to: UKStratComDD-CM-CCT-Group@mod.gov.uk (5%) • Provide evidence of being a Member of the British Computer Society. Evidence to be sent to: UKStratComDD-CM-CCT-Group@mod.gov.uk (5%) • Provide evidence of experience of ICT Projects in a similar sized organisation (5%) • Provide evidence of experience of knowledge of JSP440 & JSP604 (5%) • Provide evidence of specific project experience such as cloud security, apps security (5%) Work Location Defence Digital – Ministry of Defence Corsham, Westwells Road, Corsham, Wiltshire, SN13 9NR Working Arrangments A mixture of onsite and working from home at 7.5hr days, 4 to 5 day weeks – maximum 220 days per calendar year in order to support project teams or 110 days per 6 months. Security Clearance Valid SC clearance as a minimum must be in place prior to the contract starting and for the duration of the contract due to the projects the individual is required to work with. No. of Specialists to Evaluate 3 Cultural Fit Criteria • Provide evidence of experience of delivery in a similar sized complex IT environment, understanding the challenges and approaches to delivery (25%) • Give an example of a time you have worked as a team with our organisation and other suppliers, including knowledge & experience of scaled Agile ways of working (25%) • Give an example of a time you have remained transparent and collaborative when making decisions (25%) • Give an example of excellent communication, presentation, collaboration and client/stakeholder engagement skills with a wide variety of grades/positions (25%) Assessment Method Interview Evaluation Weighting Technical competence 50% Cultural fit 5% Price 45% Questions from Suppliers 1. Can you please confirm if there is an incumbent and who the supplier is? There is currently no incumbent in post. 2. Is this role full time or is it expected to be some weeks 4 days a week? The role is expected to be a mix of 4 to 5 day weeks. 3. Is this inside IR35 or outside IR35? Off payroll working rules apply - Inside IR35. 4. Will Defence Digital hold the SC for the duration of the contract? If you are a list X company, you will hold your own SC. Otherwise, Defence Digital will hold the SC.