Hiring of an Information Security Specialist

Project Management & Implementation Unit Strengthening Social Protection Delivery System in Sindh Sindh Social Protection Authority Social Protection Department Government of Sindh

REQUEST FOR EXPRESSIONS OF INTEREST

Assignment Title: Selection of Individual Consultant

Credit No.: IDA / 7229-PK

The Government of Sindh (herein after called Borrower) has received financing from the International Development Association (IDA) (the Bank) in the form of a credit (hereinafter called credit) towards the cost of strengthening social protection system in Sindh .

The Project Director, Project Management & Implementation Unit, Strengthening Social Protection Delivery System in Sindh and it is intended to apply part of the proceeds of this credit for payments to the following “Individual Consultant Services” to be procured under this project.

The consulting services to be procured on purely contractual basis are as follows:

Sr. Name of Position Qualification Experience

1 Information Security Specialist (Nos. 01) Minimum sixteen (16) years of education in Cyber Security, Information Security, Computer Science, Information Technology, Computer Engineering, Telecommunications Engineering or another relevant discipline from an HEC-recognized university.

Minimum three (3) years of relevant experience in Information Security, Cyber Security or IT Security. Experience conducting Vulnerability Assessment and Penetration Testing (VAPT). Experience securing web applications, APIs and mobile applications. Experience with Linux and Windows Server security. Experience working with cloud environments (Azure, AWS, Google Cloud, PTCL QCloud or equivalent). Experience using common security assessment tools. Experience working in Government or donor-funded projects shall be considered an advantage

Skills Good understanding of application security principles and Secure SDLC. Knowledge of OWASP Top 10 and OWASP Mobile Top 10. Knowledge of common web application vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), CSRF, SSRF, Broken Authentication and Insecure Direct Object References. Understanding of API security concepts including OAuth, JWT, API authentication and rate limiting. Knowledge of vulnerability assessment and penetration testing methodologies. Familiarity with common security tools such as Burp Suite, Nessus, OpenVAS, Nmap, Metasploit, OWASP ZAP and Wireshark. Knowledge of firewall, endpoint protection and cloud security concepts. Understanding of ISO 27001, NIST Cybersecurity Framework and CIS Controls. Strong analytical and technical report writing skills. Good communication skills in English and Urdu; knowledge of Sindhi will be an advantage.

Interested applicants must send their Expression of Interest / Applications along with their detailed updated Curriculum Vitae highlighting qualifications and experience in carrying out similar assignments including references for possible checks, along with attested copies of CNIC, degrees/certificates, transcripts and experience certificates from previous organizations on the address below either by registered courier services or by email at [contact details removed] with the subject line clearly mentioning the position applied for on or before August 24, 2026.

The attention of interested Consultants is drawn to Section III, paragraphs, 3.14, 3.16, and 3.17 of the World Bank’s “Procurement Regulations for IPF Borrowers” (November 2020) (“Procurement Regulations”), setting forth the World Bank’s policy on conflict of interest.

The Consultants will be selected in accordance with the Open Competitive Selection of Individual Consultants method set out in the Procurement Regulations of the World Bank for IPF Borrowers (November 2020) available on www.worldbank.org. Further information can be obtained at the address below during office hours i.e. 1000 to 1700 hours . The detailed Terms of Reference (TORs) for the aforementioned position can be obtained from the website: www.sspa.gos.pk/procurement

Procurement Specialist Project Management & Implementation Unit Strengthening Social Protection Delivery System Sindh (SSPDS), Sindh Social Protection Authority, Govt. of Sindh 155-N, Main Khayaban-e-Muslim, Phase 6, DHA, Karachi (Sindh) Pakistan

Tel: [contact details removed]