Recruitment of Information Security Advisor — Somalia Capacity Advancement Project (SCALED-UP)

REQUEST FOR EXPRESSION OF INTEREST (REOI) |

Country: |

Federal Government of Somalia (FGS) |

Name of the Project: |

Somalia Capacity Advancement, Livelihood and Entrepreneurship, through Digital Uplift Project (SCALED-UP) |

Assignment Title: |

Information Security Consultant for the Data Protection Authority in Somalia, |

Project ID: |

P168115 |

Individual/Firm: |

Individual Selection |

Deadline for submission of EOI |

13th January 2025 4:00PM |

Ref No. |

SO-MOF-458499-CS-INDV 1. Background: The Federal Government of Somalia has recently passed a new data protection law – the Somali Data Protection Law (DPL) 2023 - that requires the establishment of the Somali Data Protection Authority (DPA) to oversee the implementation of the law. The Authority will be the lead Federal Government body mandated to implement and enforce compliance with the DPL and formulate national regulations related to data protection and privacy to finance the Information Security Consultant for the Data Protection Authority in Somalia. The objectives are to assess the DPA's current and future information security needs, develop comprehensive guidelines and policies, build staff and client knowledge through training, provide strategic advisory services, and establish frameworks to monitor and enforce standardized data security practices. 2 Responsibilities: The Information Security consultant shall conduct a rapid review of the DPA's existing information assets including but not limited to local Servers (Active Directory), cloud infrastructure and digital infrastructure, policies, and security controls; Develop a comprehensive information security framework for the DPA, including policies, standards, procedures, and guidelines; Provide guidance on the implementation and operationalization of the information security framework; Provide hands-on guidance and mentorship to DPA staff on the implementation and management of information security controls; Establish a continuous monitoring system to track the effectiveness of implemented security measures; Regularly review and update security policies and procedures, provide periodic information security status reports to DPA leadership, and advise the DPA on emerging threats, technologies, and best practices. All other specific tasks detailed in the Terms of Reference (TOR) for the assignment that can be found at the following website: https://mof.gov.so/publications/terms-reference-tor-information-security-consultant-data-protection-authority-somalia 3. Duration: The proposed duration for the assignment is Twelve Months (12) calendar months from starts date. 4. Selection Criteria: The selection shall be based on qualification, experience and skills of the candidate and followed by an interview. The qualifications, experience and competencies include: • University degree in Information Security, Information Technology, Computer Science, or a related field. • At least 5 years of demonstrated experience in data and information security management. • Proven track record of implementing information security frameworks in public sector organizations. • In-depth knowledge of national and international data protection regulations (e.g. GDPR). • Relevant certifications such as CEH, CCNA, MCSA, MCSE, or equivalent is desired. • Strong analytical, communication, and training skills. • Ability to work independently and collaboratively with diverse stakeholders. • Familiarity with the data protection and privacy landscape in developing countries, particularly in the African region, is preferred. • Fluency in English is required. 5. The Ministry of Ministry of Finance now invites eligible consulting (“Consultants”) to indicate their interest in providing the above-mentioned Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services and furnish the Curriculum Vitae (CV). 6. Attention of interested Consultants is drawn to section III, para 3.14,3.16 & 3.17 of the World Bank’s Procurement Regulations for IPF Borrowers: Procurement in Investment Projects Financing Goods, Works, Non -Consulting and Consulting Services dated in September 2023 (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest. 7. A Consultant will be selected in accordance with the Individual Consultant method set out in the World Bank Procurement Regulations. 8. Interested Consultant may obtain further information (in person or by e-mail) at the address below during office hours from 8.00 a.m.– 4.00 p.m. Saturday to Thursday except on public holidays. 9. Deadline for submission: Expressions of interest should be delivered in a written form to the address below (in person, or by e-mail) by 13th January 2025 4:00PM local Time. Attention Project Coordinator, SCALED-UP Project, Ministry of Finance, Federal Government of Somalia, Shangani District, Mogadishu, Somalia Email Address: bid.scaledup@piu.mof.gov.so