Objectives

The primary objective of this tender is to appoint a qualified Security Architect company to support the Housing Development Agency (HDA) in assessing, designing, implementing, and optimizing enterprise-wide security solutions. The goal is to establish a structured security architecture that safeguards the organization's facilities, personnel, and systems against evolving threats, ensuring a secure, resilient, and cost-effective security environment.

Scope

The scope of work includes:

• Conducting a comprehensive assessment of current security posture.
• Defining the target (to-be) security state aligned with organizational needs.
• Designing security solutions and architecture frameworks.
• Developing a security roadmap for continuous improvement.
• Delivering security policies, standards, and implementation guidelines.
• Providing training and change management support (4 sessions each).
• Monthly progress reporting and documentation of security policies and standards.

Technical Requirements

The technical requirements for the tender include:

• Delivery of a security maturity assessment, solution recommendations, and a detailed roadmap.
• Design of a security architecture framework based on best practices and risk-driven approaches.
• Application of a risk-based security architecture methodology, including asset classification, threat modeling, monitoring, incident response, and business continuity planning.
• Provision of a detailed project plan with milestones, timelines, and deliverables.
• Demonstration of relevant certifications and experience of proposed personnel (minimum 5 years, with at least one member having 3 years in security architecture).
• Application of innovative and quality-driven security design principles.
• Provision of training and change management support to ensure effective adoption of security solutions.

Skills Requirements

The successful bidder must demonstrate:

• Proven experience in delivering comparable security architecture projects, supported by at least six references and case studies.
• Expertise in security assessment, design, and implementation, with a focus on enterprise security frameworks.
• Relevant professional certifications (e.g., CISSP, SABSA, TOGAF, or equivalent).
• Strong project management skills, including planning, milestone tracking, and reporting.
• Capability to develop and implement security policies, standards, and procedures.
• Experience in applying a risk-driven approach to security architecture, including asset classification, threat modeling, and incident response.
• Ability to provide training and facilitate change management processes.