SELECTION OF SENIOR CYBERSECURITY EXPERT FOR NID

Source: World Bank — Ethiopia Digital Foundations Project

Request for Expression of Interest

(Consulting Services – Individual Selection)

Recruitment of Senior Cybersecurity Expert at Ethiopian National ID Program

Country: Ethiopia

Project: Ethiopia Digital Foundations Project

Project ID: P171034

Credit No.  IDA - 68560

Assignment Title:  Recruitment of Senior Cybersecurity Expert at Ethiopian National ID Program

Reference No.: ET-MINT-377064-CS-INDV

The Federal Democratic Republic of Ethiopia, Ministry of Finance (MoF), has received financing from the World Bank toward the cost of the Ethiopia Digital Foundations Project (“Digital Foundations”).  The Ethiopian National ID Program is one of the beneficiaries of the project and intends to apply part of the proceeds for selecting of individual consultants.

National ID Program as part of the project is looking for an Individual Consultant to provide technical assistance that supports the program.  Experienced individual consultants who have experience, passionate and innovative ideas for the position of Senior Cybersecurity Expert are invited to express their interest for the assignment.

The Senior Cybersecurity Expert expected to play a crucial role in ensuring the security of the overall services of the National ID Program in Ethiopia. He/ She will collaborate closely with cross-functional teams, including program officers, software engineers, designers, data analysts, and program stakeholders to deliver the required efficiency as well as accountability.

The Senior Cybersecurity Expert is responsible for monitoring, analyzing, and responding to security events and incidents within an organization. You NIDP information assets by identifying vulnerabilities, investigating security incidents, and implementing security controls. The Senior Cybersecurity Expert works closely with the IT team, incident response team, and other stakeholders to detect and mitigate security threats and risks. You will also be involved in the overall cybersecurity risk management activities of NIDP.

Specific responsibilities for the Senior Cybersecurity Expert will include, but are not limited to, the following core activities:

• Ensuring the confidentiality, integrity, and availability of information assets by identifying vulnerabilities, investigating security incidents, and implementing security controls
• Implement and monitor identity and access management for NIDP platform users and services, Manage access control and security for micro-services
• design and implementation of PKI and cryptographic and key management solution for NIDP Platform ie. HSM / Hardware Security Modules Perform security testing of web and desktop applications and recommend improvements
• Collaborate in the design, implementation of Secure software
•  Participate in the design and implementation of cyber security governance and management activities of NIDP
• Monitoring, analyzing, and responding to security events and incidents within NIDP.
• Works closely with the IT team, incident response team, and other stakeholders to detect and mitigate security threats and risks

MinT on behalf of National ID Program now invites eligible Individual Consultants to indicate their interest to provide the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the services for a period of one year with possibility of extension for additional period subject to outstanding performance of the consultant and availability of budget. The shortlisting criteria include the following;

• Bachelor's degree in Computer Science, Information Security, or a related field with 7 years’ experience (or Master’s degree and 5 years’ equivalent experience).
• Strong knowledge of information security principles, concepts, and technologies.
• Experience in security monitoring, incident response, or related fields.
• Familiarity with security information and event management (SIEM) systems and other security tools.
• Proficient in incident handling methodologies, including incident triage, containment, eradication, and recovery.
• Knowledge of vulnerability assessment tools and techniques.
• Understanding of compliance requirements and frameworks (e.g., PCI DSS, HIPAA).
• Strong analytical and problem-solving skills, with the ability to investigate and resolve security incidents.
• Excellent communication skills, both verbal and written, with the ability to convey technical information to non-technical stakeholders.
• Relevant certifications such as CompTIA Security+, Certified Incident Handler (GCIH), or Certified Ethical Hacker (CEH) are a plus

The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” July 2016 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest. A Consultant will be selected in accordance with the Selection of Individual Consultant (Section V) method set out in the Procurement Regulations.

Expressions of interest (CV, cover letter specifically indicating the position and reference number of the position and documentary evidence for fulfilling the qualifications must be delivered by email through the addresses indicated below (all emails should be addressed) on or before October 12th, 2023. Further information can be obtained by email at the below address during office hours from 8:30 AM to 5:30 PM Addis Ababa time: 

Federal Democratic Republic of Ethiopia,

Ministry of Innovation and Technology (MInT)

Ethiopia Digital Foundations Project

Attn: Focal Person, Project Implementation Unit (PIU)

Address: Arada Sub-city, off Churchill Road, behind Lycée Guebre-Mariam,

E-mail: tessedf@gmail.com,  jermiyasy@gmail.com, blen@id.gov.et, info@id.gov.et

Addis Ababa, Ethiopia