Awarded to SA Group Ltd

Start date: Tuesday 8 May 2018
Value: £46,000
Company size: SME
Ambulance Radio Programme (ARP)

IT Security Manager

8 Incomplete applications

8 SME, 0 large

14 Completed applications

14 SME, 0 large

Important dates

Tuesday 13 March 2018
Deadline for asking questions
Tuesday 20 March 2018 at 11:59pm GMT
Closing date for applications
Tuesday 27 March 2018 at 11:59pm GMT


Specialist role
Cyber security consultant
Summary of the work
The main purpose of this role is to be the security expert for ARP to ensure security controls and protection is in place on the communication infrastructures relating to the Ambulance Service in England and support for the Welsh and Scottish Ambulance Services where appropriate.
Latest start date
Monday 9 April 2018
Expected contract length
6 months
Organisation the work is for
Ambulance Radio Programme (ARP)
Maximum day rate
£650 per day

About the work

Early market engagement
Who the specialist will work with
ARP delivers critical communications to the Ambulance Service. The role requires relationships to be built and maintained with a range of security specialist suppliers, Ambulance Trusts, the Cabinet Office, Government Digital Services, the wider NHS and other emergency services.
What the specialist will work on
1. Be the security specialist for Ambulance control room and mobile data solutions nationally and manage the following aspects: security management, availability management, risk and issue management;
2. Contribute in the design, implementation and administration of policies, controls, guidance etc that have an impact on the security of the systems provided;
3. Lead and drive the full suite of testing including conformance, performance, integration and full end-to-end testing; and
4. Lead training of user groups in relation to security.

Work setup

Address where the work will take place
Central London office base plus regular travel to Ambulance Trusts and suppliers across England.
Working arrangements
Full-time (core hours of Mon-Fri 9-5) onsite for face-to-face and skype meetings.
Travel and subsistence expenses are at NHS Agenda for Change rates: train and accommodation will be booked and paid for by the ARP PMO.
Security clearance
Security Clearance required.

Additional information

Additional terms and conditions
Standard DOS2 Call-off Contract

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • have degree education, underpinned by experience in security management; IMT service management and/or IMT security management
  • experience of Government Digital Service/ public sector security management
  • current clean driving licence
Nice-to-have skills and experience
  • evidence Diploma in Security Management
  • evidence ITIL Service Manager
  • evidence PRINCE2 Practitioner
  • evidence a proven track record in security management within a communications field environment
  • evidence experience in testing communication technologies in operational environments
  • evidence extensive knowledge of communications solutions including Tetra, Mobile Data and 2G/3G/4G.

How suppliers will be evaluated

How many specialists to evaluate
Cultural fit criteria
  • work as a team with our organisation
  • be transparent and collaborative when making decisions
  • take responsibility for their work
  • share knowledge and experience with other team members
  • be prepared to draft and embed security policies
Assessment methods
  • Work history
  • Reference
  • Interview
Evaluation weighting

Technical competence


Cultural fit




Questions asked by suppliers

1. What is the IR35 status?
The Ambulance Radio Programme plan to agree outcomes-based work packages with the Provider. We do not, therefore, anticipate this requirement falling within IR35, as a substitute could be offered during the duration of the agreement. However, any Provider being awarded this opportunity would need to take the IR35 test and determine for themselves whether this requirement is inside IR35 or not.
2. This ITT does not appear to require an in date Cyber Security certification, such as the National Cyber Security Centre Security and Information Risk Advisor (NCSC SIRA). Is this correct? Whilst a diploma in Security Management implies a level of knowledge, depending on when it was achieved, it does not guarantee up to date security knowledge.
This Digital Marketplace tool serves to sift suitable Providers for a requirement and may need to be followed by a competitive process, depending on the responses received. A Provider able to supply staff with NCSC SIRA should state this in their response.
3. Can the Authority confirm that they will be calling forward 15 for interview?
The Authority intends to call forward to the further competition/ interview stage as many Providers as are suitable, up to a maximum of 15.
4. Does the Project Manager qualification have to be PRINCE2 or will another recognised Project Manager qualification be acceptable?
Yes, an equivalent is acceptable.
5. Can you confirm that the degree requirement is for a technical degree?
The degree requirement is for a level of education. Suitable staff are likely to have a relevant technical degree, but this is not necessarily a requirement.
6. Is there currently, or has there recently been, an incumbent carrying out similar work for the Authority?
No, the Ambulance Radio Programme (ARP) do not and have not had an incumbent carrying out similar work. There is some knowledge within the team and there is a scoping of audits in place under the current managed service. The future disaggregated model requires ARP to have this knowledge.
7. What level of security clearance is required?
Will the ARP sponsor the security clearance process?
Security Clearance to SC level is required. This process will not be sponsored by ARP for this requirement.
8. Is the candidate required to have clearance on Start Date? If a candidate has no clearance, will the Authority support the clearance process?
The role requires Security Clearance, although not necessarily in time for the Start Date. The ARP will not be able to support the clearance process for this requirement.
9. Will the security clearance need to be already in place or will the specialist be supported through this application?
The security clearance will need to be in place before or soon after the start date. The ARP are unable to support an individual under this requirement through the application process.