Senior IT Experts on Cybersecurity -- Roster (M/W)
Expertise France
NG
1d ago
  • Expertise France is the public agency of French international technical cooperation.The agency operates around four priorities : - democratic, economic and financial governance;
  • security and stability of countries in crisis / post-crisis situations;- sustainable development;- strengthening health systems, social protection and employment.
  • In these areas, Expertise France carries out engineering and implementation missions for capacity building projects, mobilizes technical expertise and acts as an aggregator of projects involving public expertise and private know-how.

    With an activity volume of 233 million euros, more than 400 projects in portfolio in 80 countries, and 63,000 days of expertise, Expertise France focuses its action towards Frances solidarity policy, influence and economic diplomacy.

    Activity CS1 : Finalization of the assessment of the level of cybersecurity preparedness of beneficiary countries, identify gaps and make recommendationsThe OCWAR-C project team will identify the critical gaps in each country's current situation in relation to a comprehensive baseline of internationally recognized principles and good practices in cybersecurity, fight against cybercrime and protection of critical information infrastructures, as well as the primary options adopted by the Regional Technical Committee (RTC) in these areas.

    The team will make recommendations to address the identified gaps, in order of priority, by seeking all possible national and regional synergies.

    Assignment DescriptionBased on a tight cooperation with the national focal point and member of the Regional Technical Committee, the expert will perform the following activities : - Compile the comments OCWAR-C project team has elaborated on national cybersecurity strategies of beneficiary countries- Compile the comments OCWAR-C project team has elaborated on the current legal framework on cybercrime and electronic evidence in the beneficiary countries- Analyse current situation of beneficiary countries in regard to critical infrastructures protection- Analyse current situation of beneficiary countries in regard to CSIRT- Analyse current situation of beneficiary countries in regard to digital forensic lab- Identify all gaps in the cyber capacity- Spot recommendations to bridge the gapsActivity CS7 : Identify the needs and modalities for the establishment of national CSIRTsIn each country currently without a CSIRT, the OCWAR-C project team will conduct a workshop with high-level officials from the relevant administrations.

    The objective is to engage key players in implementation of the CSIRT. The workshop will cover the modalities (institutional, legal, organisational and financial arrangements complementary to those already provided) and produce a timetable to ensure that a national CSIRT with at least intermediate level status is set up as soon as possible.

    For countries that already have a CSIRT which is not national in scope, the OCWAR-C team will define the capacities and the implementation modalities that are necessary to set up a national CSIRT.

    Assignment DescriptionFollowing consultations and based on descriptions provided by a number of CSIRT teams on their journey to establishing their unit, it is clear that there is no one approach fits all solution.

    Each case is unique, even though there are many commonalities and best practices to adhere to. The objective of this mission is therefore twofold : - Elaborate a common ground, guidelines and best practices for the establishment of a national CSIRT- Target that baseline to the context of West African Countries, and more specifically to each specific country in the need.

    The expert will therefore need to pay thorough attention to the following : - Legal frameworks- Past success or failures of the countries in implementing similar institutions- Current cybersecurity governance within the country and its probable evolution- Possibility of learning from experiences with in the region.

    The contents of the baseline must include : - An estimate of the required capacity relevant for ECOWAS Member States and Mauritania- An estimate of the required solutions, with a focus on the most cost effective solutions from a perspective of recurring costs- Solutions should be provided for staffing, on the job training, media analysis (classic forensic IT) and OSINT (open source, including social media) based investigations.

  • An overview of the hardware and software required to be able to acquire and analyse digital evidence typically incurred in the region.
  • An overview of the budgetary estimates required for the capacity described.The following activities shall be carried out by the expert : - Draft the baseline requirements for CSIRT capacity for the purpose of dissemination to the 16 beneficiary countries and the ECOWAS Commission- Provide insight in the requirements specific to the ECOWAS Member States and Mauritania- Provide insight into staffing requirements and the required expertise- Assist in contacting one or several in-country (ECOWAS-based) experts in order to assess the relevance of the proposals- The contents of the baseline to be drafted should consist of the following chapters : - Introduction- Basic functions of CSIRTs- Required capacities in ECOWAS Member States and Mauritania region- Assessment of market solutions available- Organisational aspects : - Budget- Capacity (staff, management)- Logistical requirements (space and other requirements)- Draft reference design of the CSIRT- Procurement aspects and requirements (TORs)- Localisation (adaptation) of the baseline to the context of West African Countries, and specifically for each country in need : legal framework, stakeholders, capacity building solutions, governance, etc.
  • Activity CS6 : Audit existing CSIRTsThe existing 6 CSIRTs (Benin, Burkina Faso, Cte d'Ivoire, Ghana, Nigeria and Senegal) will all be assessed by an organizational, functional and capacity audit based on an established CSIRT baseline, for three levels of capacity (elementary, intermediate and full) based on internationally recognized standards and good practices in this field.

    An action plan to address the main gaps identified will then be proposed to the representatives of each country concerned during a workshop facilitated by the OCWAR-C project team.

    Description of the assignmentThe mission will start with a benchmarking of known protocols (like the SIM3 audit standard) to run audit of CSIRTs, after which a champion protocol will be selected to be used for this audit mission.

  • The group of experts will perform the following activities : - Initial touch base with the CSIRT to team up with the resource persons assigned by the CSIRT;
  • all the mission will be run by the team, under the leadership of the expert- Request of pertaining documents- Study and analysis of the documents- Preparation of the audit plan : meetings, onsite fieldwork, etc.

  • Drafting the report- Setting up and facilitating a closing meeting The overall objective of the project is to contribute to enhancing cybersecurity and combatting cybercrime, with the following expected results : - The resilience and robustness of the information infrastructure are improved.
  • The capacity of the stakeholders in charge of combating cybercrime is being improved.The main planned activities are to : - Establish a strategic framework that strengthens the technical, operational and analytical expertise of national institutions concerned with cybersecurity;
  • Improve cybersecurity awareness and stakeholder empowerment to secure the Internet at national and regional levels;- Improve the capabilities of handling computer security incidents in two pilot countries;
  • Strengthen respect for human rights and the rule of law in two pilot countries;- Analyze the strategic framework for the implementation of public key infrastructure (PKI) for two pilot countries;
  • Improve the legal framework for citizens to take advantage of the digital dividends of an open, free, secure and resilient cyberspace;
  • Improve response capabilities to cybercrime cases in two pilot countries. Academic Qualifications and Experience : - Masters degree (or equivalent)) in information security, Computer Science, Software Engineering or in a similar discipline from a recognised university.
  • Demonstrated practical experience in conducting assessments in the area of technical and resource capacities- Experience in institutional capacity building and technical assistance projects in the area of cybersecurity is an asset- Demonstrable experience in working on CSIRT environment- Solid knowledge of best internationally recognized principles and good practices in cybersecurity, fight against cybercrime and protection of critical information infrastructures- Experience in working for international organisations or international projects in this field is considered an asset- Experience in working in West Africa, and specifically in countries in the ECOWAS region is considered an assetKey Competence- Ability to perform well in a fast-paced environment- Good interpersonal skills with the ability to facilitate meaningful discussions and build consensus.
  • Ability to undertake new methods / practises to discover solutions- Strong English / French language skills are required
  • Report this job
    checkmark

    Thank you for reporting this job!

    Your feedback will help us improve the quality of our services.

    Apply
    My Email
    By clicking on "Continue", I give neuvoo consent to process my data and to send me email alerts, as detailed in neuvoo's Privacy Policy . I may withdraw my consent or unsubscribe at any time.
    Continue
    Application form