Consultancy for SecOps Modules inc. Vulnerability Response and Integration with Existing Platform

Tender description

Summary of the work Senior Delivery and Integration Lead ServiceNow for Vulnerability Response and GRC IRM. Working within a focussed internal, blended team, lead the end-to-end discovery, delivery and implementation of ServiceNow Vulnerability Response to mature out our MVP Sec Ops platform (GRC IRM and SIRT). Specialist role Technical Architect Expected Contract Length 6 Months Latest start date Monday 28 November 2022 Who Speclialist Work With The specialist will join an existing DWP team and will lead the end-to-end discovery, delivery and implementation of ServiceNow Vulnerability Response to mature our Sec Ops platform. The specialist will be working with: • Digital Security Secure Place Team • Digital Security Vulnerability Management & Mitigation Team • Digital Security Risk Management Team • Security & Data Protection CRC, TVAT, TIG Teams • Hybrid Cloud Services Delivery Teams • DWP Tooling Teams (ServiceNow and Enterprise Tooling Teams) • Digital Security Deputy Director What Specialists Work On Required for experienced ServiceNow Security Operations (SecOps) Subject Matter Expert (SME) with a background of managing IT projects and successfully delivering Vulnerability Response (VR) on an immature SecOps ServiceNow platform. • Investigation to establish which integrations to other Security modules and tooling will support increased and matured Digital Security capability. • Supplement existing Secure Place and DWP Tooling teams, by working in a blended squad, to build out Secure Place maturity iterating the MVP functionality. • Consult on the build and implementation of GRC IRM Control Indicators to demonstrate the CISv8 Control Compliance position, where scripting or complexity is required. Skills & Experience • Be affiliated with a recognised ServiceNow partner. • Evidence of successful high quality ServiceNow Vulnerability Response, Enterprise Level Licence, design and implementation. • Evidence 3+ years as a senior ServiceNow Sec Ops implementation expert. • Evidence of successful high quantity ServiceNow GRC IRM Control Indicator configuration and deployment across ServiceNow platform. • Strong understanding and experience of NIST including CISv8 Controls. • Evidence enhanced customer experience and added value derived from your ServiceNow Sec Ops design and implementation in a large-scale organisation and/or Public Sector organisation. • Experience of working as a part of a team and leading where necessary. • Evidence successful deployment where Threat Intelligence was delivered in an integrated, automated way consuming ServiceNow CMDB and/or CSDM modules in a large-scale hybrid IT Estate. • Evidence successful deployment of orchestrated patch management in a large-scale hybrid IT Estate. Nice to Haves • 5+ years relationship affiliated with a ServiceNow Elite partner. • Have ServiceNow Certified Master Architect (CMA) status. • Have Certified Implementation Specialist – Risk and Compliance. • Have Certified Implementation Specialist – Vulnerability Response. Work Location Primary locations: • Peel Park, Brunel Way, Blackpool FY4 5ES • 2 St. Peter’s Square, Manchester M2 3AA Secondary location: Work from home Working Arrangments Flexible working arrangements will be offered however it is likely that 60% will be office based and 40% will be home based working on DWP laptop. Security Clearance BPSS Required SC optional but preferred No. of Specialists to Evaluate 3 Cultural Fit Criteria • Inform DWP how you ensure that clients get the highest level of value out of their ServiceNow. • Advise how you ensure you are able to translate a client's compliance and risk requirements into technology deliverables using the power of the ServiceNow platform. • Demonstrate how you have discharged your duty of care to ensure that your ServiceNow Sec Ops platform clients derive added value in the implementations. • Demonstrate how you are able to avoid reliance on small numbers of Subject Matter Experts. • Work as a team with our organisation and other third party suppliers • Be transparent and collaborative when making decisions • Have a no-blame culture and encourage people to learn from their mistakes • Take responsibility for their work • Share knowledge and experience with other team members • Challenge the status quo. Assessment Method Presentation Evaluation Weighting Technical competence 70% Cultural fit 10% Price 20% Questions from Suppliers 1. Is there an incumbent? Also, if you can please confirm the day rate? There is not currently an incumbent for this requirement. There is not currently a fixed day-rate for this specialist – we expect bids to be evaluated on a cost and quality basis based on the requirements set forth. We would expect the specialist to be SFIA Level 6 as an indicator for day-rate. 2. Is there a current or preferred supplier for this piece of work? There is not a current, or preferred, supplier for this piece of work. The chosen supplier will be based on open and fair competition. 3. As this role is inside IR35, it would help to have a guidance on budget, what day rate are you expecting to be charged daily? We do not have an expected day-rate and expect suppliers to bid competitively for evaluation on cost and quality. We would expect the specialist to be SFIA Level 6 as an indicator for day-rate.