Réf.
2026/IESCECEEDP/16667
Type d'offre
Experts
Type de contrat
Contrat de prestation de services
Conditions de l'offre
CV, narrative on the understranding of the ToRs & daily Fee
Domaines d'expertises
Innovations Technologiques
Date limite de candidature
20/11/2026 23:55
Durée de la mission
Long terme
Contrat
Indépendant / Entrepreneur Individuel
Durée
24 months
Individual Expertise Service Contract (CPS EI) – Cybersecurity Expert - EU-EAC DEEP Programme (H/F)
Département Géographique - GEO > DP - RWANDA
Mis en ligne le : 12/11/2026
AFRIQUE SUBSAHARIENNE
RWANDA
KIGALI
Description de la mission
The purpose of this framework contract is to make available to the EU-EAC DEEP Programme (SO5) the services of an individual consultant (“the Expert”) providing technical expertise in cybersecurity, with a focus on regional cybersecurity coordination, CERT/CSIRT cooperation and cyber exercises. Services will be mobilised on an as-needed basis through Purchase Orders, as described in Section 5.
Overall objective:
To provide technical cybersecurity expertise supporting the EAC Secretariat, the CTWG and the Partner States in strengthening regional cybersecurity governance, operational cooperation and preparedness, in line with the SO5 workplan.
Specific objectives – under this framework contract, the Expert may be requested to:
• Support the operationalisation of the CTWG and the prioritisation of the Partner States’ cross-border cybersecurity needs into a validated workplan.
• Support regional normative work, in particular the Regional Cybersecurity Strategy and the CIIP policy, in line with international and European standards.
• Support the establishment of the EAC CERT/CSIRT Cooperation Forum and the development of common operational instruments for incident information sharing.
• Support the design, preparation and conduct of regional cyber drills and tabletop exercises, and their after-action reviews.
• Design and deliver technical training and contribute to capacity-building activities for cybersecurity authorities and CSIRTs/CERTs.
Description du projet ou contexte
The Multi-Donor Action “DEEP: Digital Economy, E-Commerce, E-Payment and Public E-Services Programme” (EU-EAC DEEP) is part of the pan-African Safe Digital Boost for Africa (SDBA) initiative. It runs from July 2025 to June 2029 and covers the eight EAC Partner States: Burundi, the Democratic Republic of the Congo, Kenya, Rwanda, Somalia, South Sudan, Uganda and the United Republic of Tanzania.
Specific Objective 5 (Cybersecurity) aims to enable and enhance cybersecurity through regionally harmonised frameworks and policies for the protection of critical infrastructure, and capacity building. It is implemented by Expertise France, in close coordination with the EAC Secretariat, the EAC Cybersecurity Technical Working Group (CTWG) and the Partner States, and contributes to three outputs:
• Output 5.1: national and regional cybersecurity frameworks and critical infrastructure protection policies are developed and/or improved in line with international standards;
• Output 5.2: national, regional and international cooperation on cybersecurity and critical infrastructure protection is improved and promoted in the EAC States;
• Output 5.3: awareness of cybersecurity threats, cyber hygiene rules and individual responsibility is improved in the EAC States.
The first meeting of the EAC Regional CTWG (Nairobi, 28–30 July 2026) recognised the CTWG as the principal regional technical coordination platform for cybersecurity under the leadership of the EAC Secretariat. A draft SO5 workplan was presented, proposing in particular a mandate for the CTWG, an EAC CERT/CSIRT Cooperation Forum attached to the EAC Regional CERT, regional normative work (Regional Cybersecurity Strategy and Critical Information Infrastructure Protection (CIIP) policy) and regional cyber exercises. The Partner States have also identified their cross-border cybersecurity needs, including threat intelligence sharing, incident response coordination, protection of critical information infrastructure, cyber exercises and capacity building
Profil souhaité
Required qualifications and experience
Professional experience
• At least 8 years of professional experience in cybersecurity (policy, operations, research or training).
• Demonstrated practical experience in support to regional cybersecurity coordination bodies, CSIRT/CERT operations and cooperation, and the design and facilitation of cyber exercises (cyber drills, tabletop exercises).
• Experience in capacity building and technical assistance in Africa, preferably in EAC Partner States, and in inter-agency, regional and international cooperation.
• Participation in similar EU-funded technical assistance projects would be an asset.
Qualifications and skills
• At least Bachelor’s degree in cybersecurity, information security, computer science, engineering, law, public policy or a related field, or equivalent work experience.
• Knowledge of international and European cybersecurity frameworks and standards (e.g. ENISA, NIS2, ISO/IEC 27000 series, NIST, Budapest and Malabo Conventions).
• Excellent written and spoken English; strong analytical, drafting, presentation and facilitation skills. Knowledge of French is an asset.
• Relevant professional certifications (e.g. CISSP, CISM, ISO/IEC 27001 Lead Implementer/Auditor, GIAC) would be an asset.
Additional requirements
• Good understanding of EU policies and of the EAC institutional context.
• Demonstrated ability to engage with high-level institutional counterparts.
• Availability to be mobilised at short notice and to travel within the EAC region.
Informations complémentaires
Application documents
Interested candidates are invited to submit, in English:
• An updated CV, preferably in EU format, clearly indicating relevant cybersecurity experience and language proficiency.
• A short technical note (maximum 3 pages) presenting the candidate’s understanding of the assignment, the proposed methodology and implementation approach, and availability.
• A financial proposal, as described in Section 10.
Critères de sélection des candidatures
Le processus de sélection des candidats s'opérera selon le(s) critère(s) suivant(s) :
- Formation/compétences/expériences du candidat
Document(s) joint(s) : ToR - Framework-Contract.CPS-EI-Cybersecurity-Expert.SO.DEEP.pdf
Expertise France est l’agence publique de conception et de mise en œuvre de projets internationaux de coopération technique. L’agence intervient autour de quatre axes prioritaires :
- gouvernance démocratique, économique et financière ;
- paix, stabilité et sécurité ;
- climat, agriculture et développement durable ;
- santé et développement humain.
Dans ces domaines, Expertise France assure des missions d’ingénierie et de mise en œuvre de projets de renforcement des capacités, mobilise de l’expertise technique et joue un rôle d’ensemblier de projets faisant intervenir de l’expertise publique et des savoir-faire privés.