Position: Cybersecurity Policy Expert
Company: Agriteam Canada
Category: Security
Experience required: no_exp

About Agriteam Canada:
Agriteam Canada is one of Canada’s leading international development firms, providing management and technical expertise to developing and transitional country partners on projects that promote sustainable growth and meaningful opportunities for people to improve their lives. Over the past 30 years, we have implemented over 370 projects in more than 65 countries.

Agriteam has two offices in Canada and 11 offices around the world, including an office in Ukraine. Over the almost thirteen-year of Agriteam presence in Ukraine, the team successfully implemented five international technical assistance projects.

About the project:
In October 2019, Agriteam Canada launched a new five-year project in Ukraine: Support to Ukraine’s Reforms for Governance (SURGe).

SURGe’s Ultimate Outcome is to help the Government of Ukraine (GoU) to deliver governance and economic reforms that better respond to the needs of its citizens. To achieve this, the Project will strategically enhance and strengthen the GoU’s reform management functions, namely its capacity to undertake planning and analysis of reforms that consider citizen impact, and to implement these reforms.

Reform initiative and position summary:
The expert team will be deployed to the State-owned enterprise Electronic Health (SOE eHealth) at Ministry of Health (MoH) to continue the development of the central component of eHealth IT system and respective ecosystem.

The goal of the reform initiative is to provide government-guaranteed package of health care services of the enhanced quality to citizens of Ukraine for free.

For this reform, SURGe Project is looking for а Cybersecurity Policy Expert who will be responsible for IT security assessment/audits of eHealth CDB and MIS, participation in drafting IT security policies.   

The expert will be based in Kyiv and will be reporting to the Team Lead.

Level of effort: Full time, Monday-Friday.

The duration of the contract is until 30 June 2020 with a possibility of extensions (subject of approval and implemented deliverables during a previous deployment).
For contracting (after the job offer is made), the selected candidate is expected to be registered as a Private Entrepreneur of the 3d group (consultancy services).

Indicative duties and responsibilities (scope of work):
1.	Development of eHealth CDB and medical information systems (MIS) security audit plan;
2.	Conducting eHealth CDB and MIS Security Audit for vulnerability search and preparation of audit
reports and guidelines;
3.	Conducting consultations on eHealth CDB and MIS IT security policy development projects;
4.	Creating a target profile on security;
5.	Incident response and conducting IT Incident Investigations;
6.	Conducting periodic security testing.

Preferred qualifications and skills:
1.	Higher education in the field of Informatics and Computer Science, Automation and Control,
Systems Sciences, Physical and Mathematical Sciences;
2.	Experience in implementing IT security and auditing tools (Rapid7, Nexpose, Qualis);
3.	Knowledge of products and information security solutions: Firewall, antivirus, anti-DDoS,
Privileged Access, DPI, IDS \ IPS, SIEM, DLP, vulnerability scanners Kali Linux;
4.	Knowledge of principles and requirements of industry standards and practices (OWASP,
ISO27001);
5.	Experience in providing corporate network information security;
6.	Experience in conducting training and presentations from 2 years	;
7.	Strong communication skills and effective teamwork.