Hiring of an Information Security Specialist

Project Management & Implementation Unit Strengthening Social Protection Delivery System in Sindh Sindh Social Protection Authority Social Protection Department Government of Sindh REQUEST FOR EXPRESSIONS OF INTEREST Assignment Title: Selection of Individual Consultant Credit No.: IDA / 7229-PK The Government of Sindh (herein after called Borrower) has received financing from the International Development Association (IDA) (the Bank) in the form of a credit (hereinafter called credit) towards the cost of strengthening social protection system in Sindh . The Project Director, Project Management & Implementation Unit, Strengthening Social Protection Delivery System in Sindh and it is intended to apply part of the proceeds of this credit for payments to the following “Individual Consultant Services” to be procured under this project. The consulting services to be procured on purely contractual basis are as follows: Sr. Name of Position Qualification Experience 1 Information Security Specialist (Nos. 01) Minimum sixteen (16) years of education in Cyber Security, Information Security, Computer Science, Information Technology, Computer Engineering, Telecommunications Engineering or another relevant discipline from an HEC-recognized university. Minimum three (3) years of relevant experience in Information Security, Cyber Security or IT Security. Experience conducting Vulnerability Assessment and Penetration Testing (VAPT). Experience securing web applications, APIs and mobile applications. Experience with Linux and Windows Server security. Experience working with cloud environments (Azure, AWS, Google Cloud, PTCL QCloud or equivalent). Experience using common security assessment tools. Experience working in Government or donor-funded projects shall be considered an advantage Skills Good understanding of application security principles and Secure SDLC. Knowledge of OWASP Top 10 and OWASP Mobile Top 10. Knowledge of common web application vulnerabilities including SQL Inject