Hiring of Senior Cyber Security Expert (NIDP)

Source: World Bank — Ethiopia Digital ID for Inclusion and Services Project

Request for Expression of Interest

(Consulting Services – Individual Selection)

Senior Cyber security Expert for Ethiopian National ID Program

Country: Ethiopia

Project: Ethiopia Digital ID for Inclusion and Services Project

Project ID: P179040

Assignment Title:  Senior Cybersecurity Expert for Ethiopian National ID Program

Reference No.: ET-NIDP-474497-CS-INDV

Duty Station: NIDP Head Office, Addis Ababa

The Federal Democratic Republic of Ethiopia, Ministry of Finance (MoF), has received financing from the World Bank toward the cost of the Ethiopia Digital ID for Inclusion and Services Project.  National ID Program, the ultimate project implementer intends to apply part of the proceeds for selecting of individual consultants.

National ID Program as part of the project implementation program is looking for an Individual Consultant that supports the NIDP.  Experienced individual consultants who have experience, passionate and innovative ideas for the position of Senior Cyber security Expert are invited to express their interest for the assignment.

The Senior Cyber security Expert expected to play a crucial role in ensuring the security of the overall services of the National ID Program in Ethiopia. He/ She will collaborate closely with cross-functional teams, including program officers, software engineers, designers, data analysts, and program stakeholders to deliver the required efficiency as well as accountability.

The Senior cyber security Expert is responsible for monitoring, analyzing, and responding to security events and incidents within an organization. The expert will work on  NIDP information assets by identifying vulnerabilities, investigating security incidents, and implementing security controls. The Senior Cyber security Expert works closely with the IT team, incident response team, and other stakeholders to detect and mitigate security threats and risks. You will also be involved in the overall cyber security risk management activities of NIDP.

Specific responsibilities for the Senior Cyber security Expert will include, but are not limited to, the following core activities:

• Ensuring the confidentiality, integrity, and availability of information assets by identifying vulnerabilities, investigating security incidents, and implementing security controls
• Implement and monitor identity and access management for NIDP platform users and services, Manage access control and security for micro-services
• Design and implementation of PKI and cryptographic and key management solutions for NIDP Platform . Perform security testing of web and desktop applications and recommend improvements
• Collaborate in the design, implementation of Secure software
• Lead incident response efforts, including investigation, containment, eradication, and recovery from security incidents.
• Develop and maintain incident response plans and playbooks.
•  Participate in the design and implementation of cyber security governance and management activities of NIDP
• Monitoring, analyzing, and responding to security events and incidents within NIDP.
• Works closely with the IT team, incident response team, and other stakeholders to detect and mitigate security threats and risks
• Ensure compliance with relevant security regulations and standards.
• Manage security audits and assessments.
• Develop and deliver security awareness training programs for employees
• Provide technical leadership and mentorship to junior cyber security team members.
• Develop and implement comprehensive cyber security strategies, policies, and procedures aligned with industry best practices and regulatory requirements (e.g., NIST, ISO 27001, GDPR).
• Design and architect secure systems and networks, considering cloud, on-premises, and hybrid environments.
• Conduct security risk assessments and vulnerability analyses to identify and prioritize security threats

National ID Program, Digital ID for Inclusion and Services Project now invites eligible Individual Consultants to indicate their interest to provide the Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the services for a period of one year with possibility of extension for additional period subject to outstanding performance of the consultant and availability of budget. The shortlisting criteria include the following;

• Bachelor's degree in Computer Science, Information Security, or a related field with 8 years’ experience (or Master’s degree and 6 years’ equivalent experience).
• Strong knowledge of information security principles, concepts, and technologies.
• Experience in security monitoring, incident response, or related fields.
• Strong understanding of security frameworks and standards (e.g., NIST, ISO 27001, CIS).
• Proficiency in security tools and technologies (e.g., SIEM, IDS/IPS, vulnerability scanners, penetration testing tools).
• Proficient in incident handling methodologies, including incident triage, containment, eradication, and recovery.
• Knowledge of vulnerability assessment tools and techniques.
• Understanding of compliance requirements and frameworks (e.g ISO27001, ).
• Strong analytical and problem-solving skills, with the ability to investigate and resolve security incidents.
• Excellent communication skills, both verbal and written, with the ability to convey technical information to non-technical stakeholders.
• Proven experience in leading and managing cyber security projects
• Relevant certifications such as CompTIA Security+, Certified Incident Handler (GCIH), or Certified Ethical Hacker (CEH),CISSP, CISM, CEH, OSCP are a plus

The selection method is based on para 7.36 and 7.37 of the World Bank’s Procurement Regulation.

The attention of interested individual is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” July 2016 (“Procurement Regulations”) revised November 2017, August 2018, September 2023, setting forth the World Bank’s policy on conflict of interest.

An individual will be selected in accordance with the Selection of Individual Consultant (Section V) method set out in the Procurement Regulations.

Expressions of interest (CV, cover letter and documentary evidence for fulfilling the qualifications) must be delivered in a written form to the address below by E-mail on or before April 28th, 2025. Further information can be obtained, by email at the below address during office hours from 8:30 AM to 5:30 PM Addis Ababa time: 

Federal Democratic Republic of Ethiopia,

National ID Program (NIDP)

Digital ID for Inclusion and Services Project

Attn: Project Management Unit (PMU),

Address: Welosefer Bole, Ethio-China St, INSA Building, 14th Floor, Addis Ababa, Ethiopia

Tele- +251-912-200295 or +251-911-446582

E-mail: nejmedin@id.et or zelalem@id.gov.et

Website: https://id.gov.et/

Addis Ababa, Ethiopia