Cyber Advance Program – Services of a Technical Consultant

Background The Cyber Advance Program was embarked to implement a stream of cybersecurity products to provide a consistent improved cybersecurity management capability. This will be achieved through the roll-out of the MS E5 security products. The following are the MS E5 products and associated capabilities: MS Defender for Identity (MDI) - for advanced identity and access securityMS Defender for Endpoint (MDE) - for endpoint protectionMS Purview - Data Loss Prevention (DLP) components only to address a gap identified between Trend Micro Apex One (existing) and MDE (future)MS Sentinel - for Security Information and Event Management (SIEM) toolingMS Defender for Cloud Apps (MDCA) - Threat and information protection services for SaaS environmentsMS Defender for Office 365 (MDO) - for email messaging security What is the project delivering This project will see the transition from existing products to Microsoft Defender and will be implemented through three workstreams: Workstream 1: Microsoft Defender for Endpoint (passive mode) (MDE-P) and Defender for Identity (MDI). Workstream 2: Microsoft Defender for Endpoint (active mode) (MDE-A) and Sentinel (SIEM) uplift.Workstream 3: Microsoft Defender for Cloud Applications and Microsoft Defender for Office 365 With the roll out of these products, new mechanisms shall be introduced helping improve the security coverage and posture of WA Health. The program aims to achieve the following business benefits: Improve capabilities to protect the healthcare systems, staff and patients from digital threats.Provide WA Health with improved cybersecurity threat protection services aligned with the rest of the Government and supported by the Office of Digital Government and GCIO.Through Advanced Hunting in the MDE product, to provide a more targeted view of our threat information and proactively look for unusual and suspicious activity.Consistent threat data is fed into the Security Information and Event Management (SIEM) systems, which are connected to other government agencies to help identify threats across the Western Australia state. The program is currently at delivery stage and with MDE-P released and MDE-A designed completed. Resource required: The program requires a Technical Resource that have significant demonstrated hands-on experience in large-scale ICT environment and WA Health Sector. The resource needs to have the following skill set and expected to carry out, but not limited to the following activities: Significant experience in the MS Cybersecurity products. In particular, the technical skill and experience related to this program will be highly regarded.Business requirement gathering with strong stakeholder engagement experience.Provide technical gap analysis, i.e. As-is and To-be analysis. Ability to provide solution design would be highly desirable.Experience in solution architecture area will be of significant advantage.Has considerable experience in the Project management/coordination.Ability to provide program/project definition and PMO support to the program.Strong conceptual and interpersonal analysis skills.