Вакансія: Cybersecurity Educаtion Expert (Consultant) – USAID Cybersecurity for Critical Infrastructure in Ukraine Activity

1. INTRODUCTION:

The purpose of the United States Agency for International Development (USAID) Cybersecurity for Critical Infrastructure in Ukraine Activity is to strengthen the resilience of Ukraine’s critical infrastructure from cyberattacks by establishing trusted collaboration between key cybersecurity stakeholders in the government, private sector, academia, and civil society. The activity aims to achieve this goal by implementing the following activity components:

Component 1: Strengthening the cybersecurity enabling environment

The legal, regulatory and institutional framework for national cybersecurity in Ukraine needs to be strengthened and aligned with international standards and best practices. This component will strengthen the cybersecurity resilience of Ukraine’s critical infrastructure sectors by addressing legislative gaps, promoting good governance, enabling collaboration between stakeholders, and supporting cybersecurity institutions. This component will also build the technical capacity of key sectors through increased access to cybersecurity technology and equipment.

Component 2: Developing Ukraine’s cybersecurity workforce

Ukraine suffers from a severe shortage of cybersecurity professionals. This component of the USAID Cybersecurity for Critical Infrastructure in Ukraine Activity will address workforce gaps through activities that develop new cybersecurity talent and build the capacity of existing talent. These activities will address the entire workforce pipeline, the quality of education received by cybersecurity specialists, and industry training programs to rapidly upskill Ukraine’s workforce to respond to immediate cybersecurity vulnerabilities.

Component 3: Building a resilient cybersecurity industry

A growing cybersecurity industry in Ukraine will contribute directly to national security and prosperity. This component will seek to build trust and collaboration between the public and private sector to develop innovative solutions for future cybersecurity challenges; spur investment and growth in the broader cybersecurity market in Ukraine through greater access to financing; support smaller cybersecurity companies to rapidly increase the number of local cybersecurity service providers; and offer mechanisms for Ukrainian firms to connect with industry partners to enable better access to innovations and business opportunities.

Together the above components will improve short-term cybersecurity resilience in Ukraine and establish a solid foundation for long-term cybersecurity independence and leadership. Lessons and best practices from key critical infrastructure sectors will extend to all parts of the public sector, as well as to the private sector and civil society.

Task Background for rapid assessment of current state of the cybersecurity education in Ukrainian training institutions

Shortfalls in terms of human capital represent a major challenge to Ukraine’s cybersecurity sector. Effectively identifying, protecting, detecting, responding to, or recovering from cyberattacks on critical infrastructure will require increasing cybersecurity awareness and skills.   In 2018,  the Ministry of Education  certified  59 educational institutions within Ukraine in cybersecurity training and education, one  third of which are state law enforcement, military training facilities or private business schools/academies and  the remainder, public universities. 

The Activity will conduct a Cybersecurity Professional Training and Development Needs Assessment to support the design of a cybersecurity training program appropriate for the needs of the sector and in line with the existing capacity of critical infrastructure cybersecurity professionals. In support of the Cybersecurity Professional Training and Development Needs Assessment, a rapid assessment of the current state of cybersecurity education in Ukrainian higher education institutions/universities, including a gap and needs analysis, need to be conducted. Specifically, this parallel assessment would examine connections or gaps between university education programs and professional development training and certification programs and look at whether universities can offer professional training courses as part of their programs.

The Activity will coordinate with other programs that have carried out similar assessments of cybersecurity education offered by certified higher-education institutions, in order to determine what additional information needs to be collected and to develop a detailed scope for the assessment. To carry out this task, the Activity seeks services of professional Cybersecurity Education Consultant.

2. Background:

To date, the following assessments of cybersecurity education in Ukraine have been carried out:

1. The concept of forming professional competencies of specialists in informational technologies and cyber security;
2. Cyber security in a digital learning environment;
3. Cyber education and its features;
4. Recommendations for development and implementation of the professional model competences in the sphere of training of specialists for of the national cyber-security system;
5. Development recommendations and implementation of the training profile “cybernetic security” in Ukraine;
6. Complex of electronic educational resources Computer graphics training future cyber security bachelors;
7. Virtual laboratory for modeling of processes in informational and cyber securities as a form of forming practical skills of students;
8. Professional training for bachelors in cybersecurity in US higher education institutions;
9. Domestic and foreign experience of the content formation of computer graphics education for future bachelors of cybersecurity;
10. Comparative analysis of curricula for bachelor’s degree in cyber security in the USA and Ukraine;
11. Training model of professionals in the field of information and cyber security in the higher educational institutions of Ukraine;
12. An Experience Report on Education and Training Programme in Cybersecurity of Critical Infrastructures;

Additional materials such as orders from the Ministry of Education of Ukraine, cybersecurity legislation, NIST standards, round-table discussions, higher educational institutions’ cybersecurity training program evaluation reports are needed to be also analyzed and used for rapid assessment report preparation. 

1. On approval of the standard of higher education in the specialty 125 “cybersecurity” for the first (bachelor’s) level of higher education;
2. Order of the Ministry of Education and Science of Ukraine, standard of higher education of Ukraine, second level (master) specialty 125 Cybersecurity;
3. Order of the Ministry of Education and Science of Ukraine, Kharkiv National University named after Karazina V.N., educational and scientific program of training “Doctor of Philosophy”, standard of higher education of Ukraine, third (educational and scientific), specialty 125 Cybersecurity ;
4. Resolution of the Cabinet of Ministers of Ukraine of November 23, 2011 № 1341 On approval of the National Qualifications Framework;
5. Law of Ukraine On Basic Principles of Cyber Security of Ukraine“;
6. Information on self-assessment of the educational program National University “Lviv Polytechnic” Doctor of Philosophy, specialty Cybersecurity;
7. Public discussion on changes in the educational program “Cybersecurity”;
8. A framework program to increase the level of cybersecurity of critical infrastructure (NIST);
9. Workforce Framework for Cybersecurity (NIST);
10. Recommendations for teaching cybersecurity (NIST);
11. National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework;
12. Cybersecurity Skills Development in the EU;

3. Role’s Purpose:

The Activity is seeking a Cybersecurity Education Expert (Consultant) to conduct a desk review of the existing cybersecurity education and training assessments referenced above and identify any gaps in those assessments that need to be addressed through additional reviews. The consultant would also determine whether recommendations for addressing the findings identified in these assessments are still applicable and can be addressed under the scope of work of the Activity. Under the supervision of the Workforce Development Lead and in close coordination with Florida International University, the Consultant will design a rapid assessment in order to collect relevant data and information missing from those assessments and for properly determining as well as examine connections or gaps between university education programs and professional development training and certification programs and look at whether universities can offer professional training courses as part of their programs.

4. Responsibilities and tasks:

• Conduct desk review of the existing cybersecurity education and training assessments listed above;
• Identify recommendations from those assessments and the status of their implementation;
• Determine which of those recommendations the Activity should consider incorporating into cybersecurity educational programs at higher educational institutions;
• Based on gaps identified in the existing assessments that need to be followed-up on, design rapid assessment;
• Prepare rapid assessment report describing methodology, documenting findings from desk review and making recommendations.

The assessment should look at the following:

• Standard #125 for “Cybersecurity” specialization at bachelor’s degree, master’s degree and PhD levels;
• Regulatory restrictions that create excessive barriers to the introduction of new cybersecurity and CI curricula;
• Prospective plans or methodological developments, best practices in Ukraine in terms of development of non-formal education, hybrid programs, dual education, a combination of practical classes (internships, employment) in related to education in the IT sector, cybersecurity and Critical Infrastructure Protection in Ukraine;
• Introduction of a professional qualifications’ framework for 52 cyber specialties based on the NIST Special Publication 800-181: National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework;
• Development of new cybersecurity training programs for CI sectors in Ukrainian high education institutions based on the conducted piloted training programs in Ukraine and developed similar programs in USA and EU;
• Implementing the standards and training framework for cybersecurity and Critical infrastructure protection training program;
• Comparative analysis of cybersecurity higher education in Ukraine, USA, EU, others;
• Carry out a desk review of existing assessments of the cybersecurity higher education framework, including those referenced above.

5. Required Qualifications:

• Master’s or PhD in Cybersecurity or other relevant IT fields;
• Strong communications skills and ability to cooperate;
• Good command of Ukrainian and English;
• Minimum 10 (ten) years professional experience in education field/ workforce development specific to cybersecurity and IT training in Ukraine;
• Experience with international projects on developing cybersecurity education and workforce development assessments with the GOUs stakeholders.

6. CRITERIA:

• Relevant experience in conducting similar cybersecurity education and training assignments/assessments in cybersecurity area;
• Understanding of the problem statement and implementation approach;

Qualified candidates should send their CV and cover letter to [email protected]. Only short-listed candidates will receive notice requesting additional information.