Консультант/ка: Legal Consultant on cloud services, for USAID Cybersecurity for Critical Infrastructure in Ukraine Activity, DAI Global, LLC

1. Activity Background:

The purpose of the US Agency for International Development (USAID) Cybersecurity for Critical Infrastructure in Ukraine Activity is to strengthen the resilience of Ukraine’s critical infrastructure from cyberattacks by establishing trusted collaboration between key cybersecurity stakeholders in the government, private sector, academia, and civil society. The activity aims to achieve this goal by implementing the following activity components:

Component 1: Strengthen the cybersecurity enabling environment

The legal, regulatory and institutional framework for national cybersecurity in Ukraine needs to be strengthened and aligned with international standards and best practices. This component will strengthen the cybersecurity resilience of Ukraine’s critical infrastructure sectors by addressing legislative gaps, promoting good governance, enabling collaboration between stakeholders, and supporting cybersecurity institutions. This component will also build the technical capacity of key sectors through increased access to cybersecurity technology and equipment.

Component 2: Develop Ukraine’s cybersecurity workforce

Ukraine suffers from a severe shortage of cybersecurity professionals. This component of the USAID Cybersecurity for Critical Infrastructure in Ukraine Activity will address workforce gaps through activities that develop new cybersecurity talent and build the capacity of existing talent. These activities will address the entire workforce pipeline, the quality of education received by cybersecurity specialists, and industry training programs to rapidly upskill Ukraine’s workforce to respond to immediate cybersecurity vulnerabilities.

Component 3: Build a resilient cybersecurity industry

A growing cybersecurity industry in Ukraine will contribute directly to national security and prosperity. This component will seek to build trust and collaboration between the public and private sector to develop innovative solutions for future cybersecurity challenges; spur investment and growth in the broader cybersecurity market in Ukraine through greater access to financing; support smaller cybersecurity companies to rapidly increase the number of local cybersecurity service providers; and offer mechanisms for Ukrainian firms to connect with industry partners to enable better access to innovations and business opportunities.

Under Component 1, the Activity is focused on delivering a proactive mechanism of cybersecurity technical assistance and project management that will serve as an assistance function to address GOU’s critical cybersecurity challenges in wartime. The Activity is focused on short- and medium-term technical projects which include procurement of necessary digital and cyber technologies for the benefit of GOU and CI operators. With built-in flexibility, the Activity identify and set priority procurements in response to war effects on CI and the evolving security dynamics on the ground.

The Activity also provides assistance to GOU in legal services, e.g. reviewing from a legal perspective the use by public authorities and other subjects of public law of cloud services outside of Ukraine. In extension of these efforts, the Activity will continue such support to Ministry of Digital Transformation by Drafting of the CMU Resolution on the provision of cloud services to the public sector. 

2. Role’s Purpose:   

Under the supervision of the Component 1 Enabling Environment Lead, the Legal Consultant on cloud services will be responsible for Drafting of the CMU Resolution on the provision of cloud services to the public sector.

The Legal Consultant on cloud services will lead the CMU Resolution development, coordinate all deliverables to implement the overall concept, as well as coordinate and conduct all relevant communications with beneficiaries and representatives of public authorities on non-legal issues required for the Annexes to the CMU Resolution development.

The Activity is looking for a Legal Consultant on cloud services to: 

1. Lead the CMU Resolution on the provision of cloud services to the public sector development 
2. Develop annexes to the CMU Resolution:

•   the procedure for the provision of cloud services and data centre services related to the processing of state information resources and restricted information, the protection of which is required by laws;
•   the procedure for preparing proposals for the use of cloud services and data centres by the public sector;
•   model agreement for the provision of cloud and data centre services to public users and critical infrastructure facilities.

3.DELIVERABLES:

• Drafted the CMU on the provision of cloud services to the public sector (including explanatory statement, justification)
• Developed annexes to the CMU Resolution on:

 – the procedure for the provision of cloud services and data centre services related to the processing of state information resources and restricted information, the protection of which is required by law;

 –  the procedure for preparing proposals for the use of cloud services and data centres by the public sector;

 – model agreement for the provision of cloud and data centre services to public users and critical infrastructure facilities.

• Report on advocacy, as requested by the MDT, in communications with beneficiaries, state authorities during the process of approving the draft prior to submission to the CMU

 4. MINIMUM QUALIFICATIONS AND EXPERIENCE:

• Master’s degree in IT / Cyber or related fields, Master’s degree legal or related fields 
• Experience or knowledge of the IT and/or cybersecurity sector 
• Minimum five (5) years of professional experience in, law, cybersecurity, critical infrastructure issues etc.   
• Experience working with the GOU (especially with cybersecurity stakeholders) 
• Fluency in English and Ukrainian.   

Equal Employment Opportunity 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran. 

DAI and its employees are committed to confronting discrimination in all forms, nurturing respect for our interpersonal relationships, and holding ourselves accountable for positive change within the company and in the communities, cultures, and countries in which we live and work.  DAI is committed to attracting and retaining the best employees from all races, ethnicities, and backgrounds in our continued effort to become a better development partner. 

DAI upholds the highest ethical standards. We are committed to the prevention of sexual exploitation, abuse, and harassment as well as other ethical breaches. All our positions are therefore subject to stringent vetting and reference checks.”

DAI promotes workforce diversity and encourages persons from excluded groups, including persons with disabilities, to apply.

It’s Kyiv-based position.

Period of performance- 4 months.

Qualified candidates should send their CV and cover letter to [email protected]. by 10 April 2024 6:00pm Kyiv time. Only short-listed candidates will receive notice requesting additional information. Interviews will be conducted on the rolling basis.