This opportunity was cancelled

The buyer cancelled this opportunity, for example because they no longer have the budget. They may publish an updated version later.
Ambulance Radio Programme (ARP) on behalf of Department of Health & Social Care

Cyber Security Expert

4 Incomplete applications

2 SME, 2 large

9 Completed applications

7 SME, 2 large

Important dates

Thursday 24 May 2018
Deadline for asking questions
Monday 28 May 2018 at 11:59pm GMT
Closing date for applications
Thursday 31 May 2018 at 11:59pm GMT


Specialist role
Cyber security consultant
Summary of the work
The main purpose of this role is to be the security expert for the ARP to ensure security controls and protection is in place on the communication infrastructures relating to the Ambulance Service in England and support for the Welsh and Scottish Ambulance Services, where appropriate.
Latest start date
Monday 16 July 2018
Expected contract length
6 months
Organisation the work is for
Ambulance Radio Programme (ARP) on behalf of Department of Health & Social Care
Maximum day rate
£750 per day (including expenses at office base)

About the work

Early market engagement
Who the specialist will work with
ARP delivers critical communications to the Ambulance Service. The role requires relationships to be built and maintained with a range of security specialist suppliers, Ambulance Trusts, the Cabinet Office, Government Digital Services, the wider NHS and other emergency services.
What the specialist will work on
1. Be the security specialist for Ambulance control room and mobile data solutions nationally and manage the following aspects: security management, availability management, risk and issue management;
2. Contribute in the design, implementation and administration of policies, controls, guidance etc that have an impact on the security of the systems provided;
3. Lead and drive the full suite of testing including conformance, performance, integration and the full end-to-end testing; and
4. Lead training of user groups in relation to security.

Work setup

Address where the work will take place
ARP has a central London office base but the role may require regular travel to Ambulance Trusts and suppliers across England.
Working arrangements
Full-time (core hours of Mon-Fri 9-5) onsite for face-to-face and skype meetings. Travel and subsistence expenses are at NHS Agenda for Change rates: trains and overnight accommodation (away from office base) will be booked and paid for by the ARP PMO.
Security clearance
Security Clearance required.

Additional information

Additional terms and conditions

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate suppliers’ technical competence.

Essential skills and experience
  • have degree education, underpinned by experience in security management; IMT service management and/or IMT security management
  • experience of Government Digital Service/ public sector security management
  • current clean driving licence
  • have Diploma in Security Management or equivalent
Nice-to-have skills and experience
  • evidence ITIL Service Manager
  • evidence PRINCE2 Practitioner
  • evidence a proven track record in security management within a communications field environment
  • evidence experience in testing communication technologies in operational environments
  • evidence extensive knowledge of communications solutions including Tetra, Mobile Data and 2G/3G/4G

How suppliers will be evaluated

How many specialists to evaluate
Cultural fit criteria
  • Work as a team with our organisation
  • be prepared to draft and embed security policies
  • be transparent and collaborative when making decisions
  • take responsibility for own work
  • share knowledge and experience with other team members
Assessment methods
  • Work history
  • Reference
  • Interview
Evaluation weighting

Technical competence


Cultural fit




Questions asked by suppliers

1. Is there a current incumbent, and what is the IR35 status?
ARP currently has a consultancy providing some support in this area. ARP do not expect that this provision will fall within IR35 but recommends that any Provider assess this for themselves.