Cyber Security specialist support

The newly established Data Transformation Directorate, oversees three new programmes, Data Protection Remediation, Securing Customer Data, and Single Customer Record and requires comprehensive cyber security expertise that can undertake assurance of security resilience and treatment strategies underway / planned. We need to look to the private sector for this requirement and build internal capability by skills transfer.

Tasks will include:

Identification: Identify programmes, projects and non-project activity across HMRC that will impact the ICO Accountability Framework Security risk. Outcome: Detailed view of activity impacting the security risk.

Independent Assessment: Assess impact of identified programmes, project and non-project scope activity on the security risk. Outcome: Treatment strategies assessed and totality of risk mitigation is understood

Develop: Produce a clear timeline articulating current and future planned activity across HMRC, assessing delivery confidence of component parts. Outcome: Plan with 'monitoring and control' mechanisms agreed

SME: Providing ongoing Cyber Security subject matter expertise.

Outcome: Knowledge transfer to team.