Cyber Security Expert at Rwanda Information Society Autority (RISA) :Deadline :11-12-2020

Job Profiles for the Rwanda Digital Acceleration Project

S/N

Job title

Job profile (Needed Qualifications, Skills and Experience)

Duties and Responsibilities

Number of Positions

8

Cyber Security Expert

Selection Criteria:

Bachelor’s Degree in Computer Science, Computer / Software Engineering, Information, and Communication Technology (ICT), Information Systems or equivalent, with a minimum 8 years of relevant work experience; or

Master’s Degree (preferred) in Computer Science, Computer / Software Engineering, ICT, Information Systems, or equivalent, with a minimum of 7 years of relevant work experience.

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP), SANS GIAC, SSCP, GISF, CEH, OSCP, CISM, CCNA Security, CCNA CyberOps, etc;

Possession of Prince2 or PMP certification is an added advantage

Technical competencies:

• Advanced level knowledge of cyber intelligence fundamentals and key security concepts; vulnerability assessment and penetration testing, IDS/IPS, security operations, network monitoring, incident response, email security, security analytics, and deployment or management of security tools such as SIEM, NAC, DAM, WAF, NGFW, UTM, etc.
• security and risk management, asset security, security engineering, communication and network security, identity and access management, security assessment and testing, security operations, and software development security, including experience with the requirements of Risk Management Framework (RMF) requirements
• Ability to assess risks in line with information security objectives and risk tolerance of the institution.
• Proven conceptual, analytical, and evaluation skills;

Professional experience in information security threat and intrusion analysis; Good technical knowledge and understanding of endpoint and network security threats and mitigation techniques; Proven ability to analyze threats and engineer mitigating controls, preventive or detective, leveraging all available tools and resources;

Experience with global standards and directives

• Knowledge of methods and technologies for encrypting data in transit and at rest, encryption key management/rotation, Geolocation filtering, GDPR controls
• Experience with DR/BC planning and testing
• Blockchain experience is an added advantage.

General Competencies (management, leadership, communication, problem-solving, monitoring, coordination, stakeholder management, etc.)

• Ability to work effectively across multiple cross-functional teams to proactively resolve problems, support and engage key stakeholders; as well as work effectively across boundaries even without active guidance from the management;
• Demonstrate excellent interpersonal skills; including the ability to work independently, effectively in a team/task force as a team member or leader, and with senior staff and managers;
• Demonstrated ability to listen and integrate ideas from diverse views, create partnerships and collaborate with others, advocate and influence, resolve conflicts constructively,
• Proven ability to conduct research independently and present results effectively;
• Impeccable planning, organization, and time management skill; Ability to work well under pressure and to meet tight deadlines;
• Demonstrates a high level of motivation, confidence, integrity, and responsibility;
• Strong problem-solving skills with the ability to provide solutions to emerging challenges;
• Experience leading change, taking initiative, and driving results;
• Computer literacy including Microsoft packages;
• Excellent communication skills – both written and verbal, including the capacity to communicate complex and technical issues in simple terms;
• Proven ability to clearly and concisely prepare, present, and discuss recommendations at senior levels and to produce deliverables such as memoranda, recommendations, requirements documents, and status reports;
• Fluency in English is essential;

Should demonstrate a high degree of professionalism and integrity.

1. Lead Cybersecurity and information security implementation under the project, support the design and effective implementation of cybersecurity-related activities;

2. Actively monitor and assess new and emerging threats posing risk to the ecosystem and its information assets. Recommend tactical and strategic ways to eliminate or mitigate these risks under the implementation plan of the project;
3. Ensure best practices in Cybersecurity are followed in the design and implementation of the project;
4. Interface effectively with ecosystem partners, to provide security oversight and guidance for cybersecurity standards and protocols.
5. Using best practice project management tools, follow a Cybersecurity Program project management and implementation plan with timelines, roles, and accountabilities
6. Working as a team with the procurement specialist, coordinate the procurement process for the Cybersecurity goods and services to be financed under the project, including writing substantive sections of Terms of Reference, writing technical and functional specifications, integrating comments from stakeholders and decision-makers, launching tenders according to the procurement plan, coordinating the evaluation committees and bringing contracts to signature while following World Bank procurement rules.
7. Supervise the implementation of Cybersecurity contracts under the project, including monitoring and guiding quality and efficiency of vendor work, providing comments on vendor deliverables, coordinating reviews from stakeholders of deliverables, and bringing contracts to successful closure with the delivery of goods and services on budget and on time.
8. Keep stakeholders fully abreast of developments, implementation and results
9. Maintain a Cybersecurity component monitoring and evaluation table with output, outcome, and impact indicators associated with the project implementation activities. Update the table for each World Bank supervision mission and as needed in the interim.
10. Produce well-written reports on the implementation progress of the Cybersecurity program as required by NIMC, OVP, World Bank, or other stakeholders. Such reports will be required at a minimum prior to each World Bank supervision mission.
11. Maintain cordial and productive working relationships with counterparts, focal points, and stakeholders in the national identification ecosystem

Reporting:

12. The Cybersecurity Expert will report to the SPIU Coordinator

Deliverables

• Support procurement and delivery of PPA activities linked to digital _(Within the first three months of contract signature)

Progress report (monthly)

01