Secure in Depth Cyber Business Analyst

Tender description

Summary of the work The MOD procures products and services from across industry to deliver against its objectives. The policies, processes and tools with which the supply chain is procured have a number of cyber security recommendations that need to be investigated further and implemented to mitigate Cyber risk to the MOD. Specialist role Business analyst Expected Contract Length The resource is required until the 30th June 2022 with the option to extend to 30th September 2022. Latest start date Monday 21 March 2022 Maximum Day Rate Onsite: £750 per day MAX. (excluding VAT and inclusive of T&S). Remote: £700 per day MAX (exluding VAT) Standard 8 hour working day. Who Speclialist Work With The Cyber Business Analyst will take guidance from the Senior Cyber Business Analyst and work with the Secure in Depth Solution Architect, DCPP Team, Commercial, Legal, Policy and other CRP teams to analyse and improve the existing policies, processes, tools, controls and information used in the supply chain with an aim to improve cyber resilience within the MoD supply chain. The Cyber Business Analyst will work within the Secure in Depth team as part of the Cyber Resilience Programme. What Specialists Work On - Analyse contractual and policy documents - Review supply chain processes incl. DCPP Process - Review feedback on supply chain cyber security - Engage with supply chain stakeholders to identify areas of cyber weakness and explore options for improvement - Support Senior Cyber Business Analyst in designing, developing and implementing improvement options to the supply chain processes, policies, standards and controls - Verify that supply chain guidance and collateral is robust and fit for purpose - Contribute to the development of artefacts as directed by the Senior Cyber Business Analyst / Project Manager to document above activities Skills & Experience • Have proven experience as a Business Analyst in cyber security space • Have a BSc/BA in a relevant field • Have proven experience in analysing contractual and policy documents and processes • Have proven experience in the analysis business processes particularly relating to supply chain • Have proven experience of end to end supply chain business process mapping • Have knowledge of MOD and Cyber Security NIST Framework • Have excellent communication and presentation skills and ability to communicate effectively to both technical and non-technical audiences • Have the ability to work to a plan and feed progress into the overarching project Nice to Haves • Have proven experience of design and implementation of cyber security improvements • Have proven experience in process streamlining and improvements • Have proven experience of Agile development and methodologies • Have proven experience of working within a Project and Programme environment Work Location MOD Corsham MOD London Main Building There will be opportunity to work remotely and need to be agreed with the Secure in Depth Project Manager Working Arrangments The specialist will need to work at the primary site of MOD Corsham 1-2 times per week, however the remainder shall be remote as advised by the SiD PM. The day rate will vary depending on whether working from the primary location and working remotely but will take into account expenses. Additional travel expenses will be available should you need to travel to other sites beyond those detailed above. The MOD also supports flexible working (when possible), at the discretion of the Secure in Depth Project Manager. Security Clearance Have SC clearance, or will have SC clearance before the contract start date. Additional T&Cs All expenses must be pre-agreed between the parties and must comply with the MOD Travel and Subsistence (T&S) Policy. No. of Specialists to Evaluate 3 Cultural Fit Criteria • Work as a team with our organisation and other suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their own work • Share knowledge and experience with other team members Assessment Method • Reference • Interview Evaluation Weighting Technical competence 50% Cultural fit 15% Price 35% Questions from Suppliers 1. Will you sponsor SC clearance if a specialist is eligible? The Authority will not sponsor SC clearance. 2. Is the contract inside IR35? The off-payroll rules will apply to any workers engaged through a qualifying intermediary. This can be found in the overview of the advert. 3. Is there an incumbent? There is no incumbent.