REQUEST FOR EXPRESSION OF INTEREST
CONSULTANCY SERVICES – INDIVIDUAL SELECTION
Improving Equitable Access to High Standard Public Services Through Govtech Project
for
an International Cybersecurity Expert
Ref.No. AL-AKSHI-428918-CS-INDV
ALBANIA
Project: Improving Equitable Access to High Standard Public Services Through Govtech
Job tittle: International Cybersecurity Expert
Reference No : AL-AKSHI-428918-CS-INDV
Given the World Bank’s (WB) longstanding support to the GoA in service delivery and digitalization, the GoA has requested further Bank support of the implementation of its digital transformation agenda. The GoA and WB launched a new Program for Results (PforR), which became effective in July 2023. The Program is called “Improving Equitable Access to High Standard Public Services through GovTech” and its development objective is to increase the equitable access to and quality of selected digital services in Albania.
The Program supports the GoA in achieving selected objectives under its digital transformation agenda in three Results Areas (RAs):
- Enhancing E-Service Quality and User Experience
- Improving Digital Skills and Digital Inclusion
- Strengthening Priority GovTech Enablers.
The objective of the consultancy will be to perform an initial assessment on the current cybersecurity status, and to support the AKSHI with day-to-day questions and tasks on cybersecurity and to perform more detailed assessments on the specific cybersecurity topics as requested by the AKSHI.
The assignment is expected to start in August 2024. The effort level is a maximum of 100 days spread throughout 18 months, with a possibility of extension of the contract beyond the first year, as needed. Out of the 100 days, at least 50 working days will be spent on site at the AKSHI premises.
The Consultant is expected to work closely with the AKSHI, the Program’s Coordination Unit (CU – housed in AKSHI) and will perform the following tasks, during the assignment:
CURRENT SITUATION PHASE
- Reviewing the available cybersecurity documentation for the components covered by the Program.
- Work closely with the beneficiary to collect information on the current cybersecurity status for the components in the Program.
- Consolidate this information in the initial assessment providing a narrative description of the AS-IS cybersecurity situation and potential challenges ahead.
CONSULTANCY PHASE
The task list includes, but is not limited to, the following.
- Supporting detection, investigations and mitigating exploits and compromises;
- Assist in developing or improving incident response plans to effectively address and mitigate cybersecurity incidents.
- Support in the development and implementation of cybersecurity policies, procedures, and best practices to strengthen the government’s overall security posture.
- Advise on policies, tools and equipment to improve incident prevention, detection, and resolution;
- Monitor emerging cybersecurity threats and trends in the world and provide recommendations for proactive defense measures.
- Consultation on normative-legislative framework on cybersecurity and/or roadmap to become a member of international communities;
- Providing advice and consultation in the field of cyber diplomacy and cooperation;
- Performing training for specific topics of interest, e.g. APT, for AKSHI employees;
- Specific support in the detection and mitigation of APT and state sponsored threat actors;
- Recommendations on cybersecurity staffing.
- Providing just-in-time advice and inputs to the AKSHI on other identified and urgent cybersecurity issues, as needed.
More information on the detailed scope of work can be found in the ToRs that are published at AKSHI website Click the link: https://akshi.gov.al/wp-content/uploads/2024/07/TORS_Cyber_Security_Expert-EN.pdf
The Consultant retained for the project shall have an international perspective on cybersecurity, cyber incidents, and crisis management (therefore with a keen understanding in cyber threats but also with a strategic outlook, focused on government systems/services protection) and shall have the following expertise and experience:
- At least Master’s degree in law, political science, international relations, information and cybersecurity technologies or an equivalent combination of academic qualifications, and work experience in the cybersecurity field;
- Previous experience acting as international cybersecurity expert with a focus on policy analysis, cyber diplomacy, and cyber capacity building. At least ten years of professional experience in cybersecurity, with international expert knowledge in research and policy analysis, cyber crisis management, cyber resilience, and cyber diplomacy.
- At least 3 years of experience with compliance on EU cybersecurity and information security-oriented regulations and directives;
- Demonstrated experience in conducting cybersecurity assessments, and EU compliant.
- Proven experience and expert knowledge on digital risks, cyber resilience to support the improvement of national regulatory framework.
- Experience with different security technologies and products, e.g. Microsoft Azure cloud security is considered a plus;
- Excellent oral and written communication skills in English.
Applicants that fulfill the qualification requirements will be further evaluated based on the below criteria:
- General Qualification – 30 points
- Adequacy for the assignment – 60 points
- Language – 10 points
The service will be selected under the provisions of the World Bank Procurement Regulations for Borrowers under Investment Project Financing” dated July 1, 2016, revised on November 2017, August 2018, November 2020 based on the method of Selection of Individual Consultants, Time-based contract.
Further information can be obtained from the address below during business hours from 08:00 to 16:30, Monday to Thursday and from 08:00 to 14:00 on Fridays.
Expressions of interest (CV, cover letter and documentary evidence of obtained qualifications) must be submitted by e-mail at aplikime.govtech@akshi.gov.al within August 14th , 2024.