Information Security Consultant

DRC is seeking to appoint an Information Security Consultant (Company or individual) for the following deliverables:
The Information Security Consultant is responsible for assessing, analyzing and ensuring proper management and protection of beneficiary data processed in DRC Lebanon through DRC’s Information Management Systems ALPHA and the Referral Information Management System “RIMS” in adherence to humanitarian and protection principles. Alpha and RIMS are both online systems hosted on the cloud. RIMS is being used by more than 50 organizations to manage and track internal and external referrals within and across sectors

Responsibilities:

• In consultation with Program Managers, IT, IM, and the RIMS team, the consultant will develop, review and update -when necessary- security polices for both Alpha and RIMS including security of personal data, and sharing data with partners;
• Assesses the current server hosting plan, data storage and management of servers;
• Assesses the functionalities and features of Alpha and RIMS related to data security driven from global systems such as CPIMS+ and GBVIMS+
• Tests security vulnerabilities using different accredited tools in Alpha and RIMS to expose system’s shortcomings and flaws, and use the results to improve security and prepare for outside attacks on monthly basis. Additionally recommends good practices to keep IM Systems secure, produces monthly security snapshots, and quarterly full security reports.
• Supports IM and IT teams in answering cyber security and security audit questions.
• Provides DRC’s Lebanon IM Team with basic tools to test security vulnerabilities at application, server and database levels and creates procedures in case a data breach is detected;
• Create data security checklist to gauge if essential practices are in place in program (s), on how to process data and information in a secure manner;
• Create backup and recovery plans for online systems and databases;
• Recommends long-term plan and solution to keep the IM System secure.
• Other duties as agreed with the Information Management Manger in line with objectives above and weekly work plans.

Tender (RFP) Issuing date: 8^thof June 2020

Tender (RFP) Closure Date: 17^th of June 2020, Time: 14:00 pm

Interested applicants or firms should share both CV’s and financial proposal / offer to be qualified.