Source document: https://docs-lawep.s3.us-east-2.amazonaws.com/1697640107299.pdf (Bahamas)
REQUEST FOR EXPRESSIONS OF INTEREST CYBERSECURITY ANALYST CONSULTANT Country: The Commonwealth of The Bahamas Supporting Institution: Inter-American Development Bank Programmes: Program to Support the Health Sector to Contain and Control Coronavirus and to Mitigate its Effects in Service Provision & Programme to Support the Health System Strengthening of The Bahamas Project Number: BH-L1053 & BH-L1055 Loan Number: 5179/OC-BH & 5296/OC-BH Sector: Health Deadline: 30 November 2022 Consultancy: Cybersecurity Analyst Consultant Consultancy Location: Nassau, The Bahamas Reports to: Chief Medical Officer – Ministry of Health & Wellness The Ministry of Health and Wellness (MOHW) of The Bahamas has received financing from the Inter-American Development Bank (IDB), toward the cost of the Program to Support the Health Sector to Contain and Control Coronavirus and to Mitigate its Effects in Service Provision & the Programme to Support the Health System Strengthening of The Bahamas and intends to apply part of the proceeds for the consulting services of a Cybersecurity Analyst Consultant.
The successful individual will work as a part of the MOHW on a contractual basis and report to the Chief Medical Officer (or other designated alternate).

The successful individual will also work collaboratively with other leaders from across the Ministry of Health and national health system stakeholders, as well as with other ministries and international partners.
The successful individual will support the Ministry with the implementation, testing and maintenance of a Cybersecurity framework inclusive of standards and policies, across the Health Information Exchange (HIE) and other digital health tools to ensure protection of data; as well as a security assessment (Threat Risk Assessment; Penetration Testing, etc.)

of the digital health application, infrastructure and HIE architecture to ensure data is protected.
This contract is expected to be completed in a two-year period starting in December 2022.

Main responsibilities: The main objective of this consultancy is implementation and support of a cybersecurity framework with the level of robustness required to protect sensitive personal data captured, processed, transmitted, and stored by digital health solutions (e.g., EMR, surveillance, telehealth).
The Consultant will: • As directed, design, develop, implement, and maintain processes, procedures, and guidelines to improve and increase the effectiveness of the cybersecurity initiatives and operations • Review current product detections to ensure they are performing to the standard • Develop scripts to analyse and automate cybersecurity activities.

• Perform tasks to enable reduction of false positive detection.

• Analyse binary files to determine if they are legitimate or malicious.
• Address customer questions and concerns as it relates to detections.
• Assist with the design and execution of a cybersecurity awareness program • Assist with the establishment of meaningful measures & metrics for team performance and SLAs/OLAs • Support, and in some circumstances, lead planning for business continuity and disaster recovery of operations • Produce reports on progress as required • Develop a representative inventory of critical incidents • Develop procedures to follow during an incident response • Recommend updates to the incident response plan • Maintain systems for discovering security incidents involving information resources • Document security incidents in a tracking system • Continuously improve the incident response program • Identify and execute projects that improve our intrusion detection and incident response capabilities • Perform vulnerability assessments and Penetration testing for Critical Information Infrastructure (CII) • Develop and implement an ongoing risk assessment program targeting CII; recommend mitigation methods • Work a flexible shift, which may include either working on a weekend, on a public holiday or at night.
• Other duties as assigned The successful candidate should have the following skills: • Education: Bachelor’s Degree in Information and Communications Technologies, Computer Science, Engineering or related field.

Candidates with learning and professional certifications in security such as CISA / CISSP / CISM / GCIA / GCFA / CEH shall have an added advantage.

• Experience: Minimum of 3 years of experience as a Cybersecurity Specialist.

Experience working in Caribbean/Latin American Region is an advantage.
• Languages: Advanced writing, communication, and presentation skills in English • Core and technical competencies: Excellent professional interpersonal skills.

Results- driven, self-motivated, self-directed.

Flexibility to adjust pre-agreed schedules.

Ability to function well in a team-oriented work environment and on projects at various levels within organization.
Deep understanding of cyber-security threats, vulnerabilities, controls and remediation strategies in mobile devices and telecommunications infrastructure enterprise environments.

Knowledge of cybersecurity policies and regulatory controls, and overall risk profile of The Bahamas.

Deep understanding of one or more cyber security frameworks (eg ISO27001, NIST CSF) and security related directives, regulations and international laws and information security risk assessments.
Knowledge of risk assessments and cryptographic technologies.

Knowledge of a range of IT platforms and technologies, systems and networks as well as typical gaps that could impact the ability of an organization to effectively detect and respond to cyber-attacks.

Experience with large scale and complex incidents of all types to include Advanced Persistent Threats, DDoS, insider, web and mobile applications, data ex-filtration etc.
Ability to communicate complex and technical issues to diverse audiences, verbally and in writing, in an easily understood, authoritative, and actionable manner.

Flexible, exhibit initiative and have the ability to think strategically and innovatively.

The Ministry of Health & Wellness now invites eligible Consultants to indicate their interest in providing the Services.
Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services.

A Consultant will be selected under the National Competitive Bidding Selection procedures set out in the IDB’s: Policies for the Selection and Contracting of Consultants financed by the IDB and it is open to all eligible bidders as defined in these policies.

Only Short-Listed Individuals will be contacted.


Further information can be obtained by e-mail: MOHWPEU@BAHAMAS.GOV.BS.

Submit all CVs and qualification documents must be submitted Re: Cybersecurity Analyst Consultant to E-mail: MOHWPEU@BAHAMAS.GOV.BS on or before 5:00 pm on 30 November 2022.