Cybersecurity Expert for SPS

Country: Federal Government of Somalia (FGS)

Name of the Project: Somalia Productive, Resilient, and Inclusive Growth (SPRING)

Assignment Title: Cybersecurity Expert for National Payment System (NPS)

Project ID: P501662

Individual/Firm: Individual Selection

Deadline for submission of EOI: November 30,2026 at 4:00pm

Ref No. SO-MOF-576060-CS-INDV

1. Background: In May 2025, the Federal Republic of Somalia, through its Ministry of Finance (MoF) launched the Somalia Productive, Resilient, and Inclusive Growth (SPRING) project. The project development objective is to promote private sector-led growth and job creation by improving the business-enabling environment, strengthening the financial system, and enhancing access to finance. The SPRING project is organized around four components (three mutually reinforcing and one supporting): (i) Component 1: Improving the enabling environment for the private sector; (ii) Component 2: Deepening financial sector reforms and strengthening institutional capacity; (iii) Component 3: Enhancing access to finance and resilience for MSMEs; and (iv) Component 4: Project Management. A wide range of activities will be implemented as part of this project to reach its development objective, such as improvements to regulatory/institutional frameworks, the rollout of the digital ID system, financial sector reforms, the creation of a risk-sharing mechanism, and the provision of business development services for micro, small and medium enterprises in select economic sectors, among others. The MoF received US$105 million from the World Bank, including US$10 million from the Somalia Multi-Partner Fund to implement the SPRING project. As part of this initiative, deepening financial sector reforms and strengthening institutional capacity, MoF intends to apply part of the proceeds from the World Bank to finance the position of Cybersecurity Expert for National Payment System (NPS). 2. Responsibilities: The Cyber Security Expert will provide Cybersecurity Strategy, Governance & Function Establishment; Cyber Risk Management, Compliance & Assurance; Security Architecture, Engineering & Secure Development; Security Operations, Monitoring & Incident Response; Identity, Privileged; Vulnerability Management, Security Testing & Threat Management; Cyber Resilience, Business Continuity & Disaster Recovery; Participant, Third-Party & Supply-Chain Security; Security Awareness, Team Capability & Knowledge Transfer; All other specific tasks detailed in the Terms of Reference (TOR) for the assignment can be found at the following website link: https://sps.so/docs/TOR%20for%20Cybersecurity%20Expert%20Terms%20at%20NPS.pdf 3.Skills and qualifications Selection Criteria: The selection shall be based on the qualifications, experience and skills of the candidate and followed by an interview. The qualifications, experience and competencies include: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, Network Security, Computer Engineering, or a closely related discipline is required. A Master's degree in Cybersecurity, Information Security, Computer Networks and Security, Information Systems, Technology Risk, or a related discipline is strongly preferred. Minimum 10 years of progressive professional experience in cybersecurity, information security, technology risk, IT governance, or security assurance, with substantial hands-on responsibility in regulated or high-availability environments. At least 5 years of experience in a senior, lead, managerial, or consulting role responsible for information-security governance, cyber-risk management, security operations, or cybersecurity transformation. Demonstrated experience establishing, materially uplifting, or leading an information-security or cybersecurity function, ISMS, SOC/security-monitoring capability, incident-response programme, or comparable enterprise security capability. At least two recognized professional cybersecurity or information-security credential is required, such as CISSP, CISM, CRISC, GIAC, ISO/IEC 27001 Lead Implementer/Lead Auditor or Senior Lead Implementer, or an equivalent recognized certification.

4. Duration: The proposed duration for the assignment is Twelve Months (12) calendar months from starts date.

5 . The Ministry of Ministry of Finance now invites eligible consulting (“Consultants”) to indicate their interest in providing the above-mentioned Services. Interested Consultants should provide information demonstrating that they have the required qualifications and relevant experience to perform the Services and furnish the Curriculum Vitae (CV). 6. Attention of interested Consultants is drawn to section III, para 3.14, 3.16 & 3.17 of the World Bank’s Procurement Regulations for IPF Borrowers: Procurement in Investment Projects Financing Goods, Works, Non -Consulting and Consulting Services dated in September 2023 (Procurement Regulations), setting forth the World Bank’s policy on conflict of interest. 7. A Consultant will be selected in accordance with the Individual Consultant method set out in the World Bank Procurement Regulations . 8 . Interested Consultant may obtain further information (in person or by e-mail) at the address below during office hours from 8.00 a.m. – 4.00 p.m. Saturday to Thursday except on public holidays. 9. Deadline for submission: Expressions of interest should be delivered in a written form to the address below (in person, or by e-mail) by November 30, 2026, at 4:00pm (Somalia Local time) Attention; Project Coordinator SPRING Project Ministry of Finance Federal Government of Somalia Shangani District, Mogadishu, Somalia

Email Address: bid.spring@piu.mof.gov.so

Copy to: hr@sps.so