(C4CA) Short-Term Expert – Cybersecurity Policy and Regulatory Frameworks (H/F)

Описание

Expertise France is the public agency for designing and implementing international technical cooperation projects. The agency operates around four key priorities :
- democratic, economic, and financial governance ;
- peace, stability, and security ;
- climate, agriculture, and sustainable development ;
- health and human development ;
In these areas, Expertise France conducts capacity-building initiatives and manages project implementation, leveraging technical expertise and acting as a project coordinator. This involves combining public sector expertise with private sector skills to drive impactful results. 

The objective of this assignment is to provide high-level technical expertise and advisory support to beneficiary institutions in strengthening national cybersecurity frameworks through alignment with international standards, capacity development, and facilitation of inclusive policy dialogues.
Under the supervision of the Cybersecurity Component Coordinator, the expert will carry out the following tasks:
Review existing national cybersecurity strategies, action plans, risk management protocols, and legal/regulatory documents in selected Central Asian countries.
Provide tailored recommendations for enhancing cybersecurity governance frameworks in line with international best practices (e.g. EU NIS2 Directive, ENISA guidelines, ISO/IEC 27001, ITU recommendations).
Support the development or revision of national cybersecurity strategies and related documents (e.g. action plans, institutional frameworks).
Facilitate multi-stakeholder policy dialogue sessions and workshops with relevant ministries, regulatory bodies, CERTs/CSIRTs, and civil society actors.
Assist in the design of institutional capacity-building plans to improve cyber governance structures.
Draft technical notes, policy briefs, or guidance documents to support the national legislative and regulatory development processes.
Contribute to regional knowledge-sharing activities as needed.
Deliverables for each assignment will be detailed in the related purchase order. They can include documents listed non-exhaustively hereafter:
Inception note detailing proposed workplan and methodology.
Country-specific advisory notes and analysis on cybersecurity legal/policy gaps and alignment opportunities.
Draft or revised cybersecurity strategies, action plans, or protocols (country-specific).
Capacity-building recommendations for institutional cyber governance.
Summary report of policy dialogue activities facilitated.
Final mission report detailing activities conducted, outcomes, and recommendations.

The Team Europe Initiative (TEI) on Digital Connectivity in Central Asia (C4CA) aims to enhance digital transformation and connectivity in the region. Expertise France leads the implementation of the cybersecurity component (SO4), which seeks to strengthen national cybersecurity capacities, frameworks, and awareness.
As part of Output 2 under SO4, the project provides technical assistance to support the development and alignment of national cybersecurity policy and regulatory frameworks with international best practices in Kazakhstan, Kyrgyzstan, Uzbekistan, and Tajikistan.

Education:
Advanced university degree (Master’s or equivalent) in cybersecurity, law, public policy, information security, or a related field.
Professional Experience:
At least 7 years of relevant experience in cybersecurity policy, regulation, or cyber governance.
Proven experience advising governments on cybersecurity legal and policy frameworks.
Experience working in international technical assistance projects, preferably in the EU context.
Familiarity with international best practices in cybersecurity (EU, OECD, ITU, etc.).
Experience in institutional capacity building and policy dialogue facilitation.
Skills and Competencies:
Strong analytical and drafting skills.
Excellent communication, facilitation, and stakeholder engagement skills.
Ability to work independently and deliver high-quality outputs under tight timelines.
Regional experience in Central Asia is an asset.
Excellent command of English is required; Russian would be an advantage.

Applications will be reviewed on a rolling basis.
Interested experts should apply by sharing: a CV in English highlighting fields of expertise listed in these TORs and relevant experience ; and Cover letter in English. 
This advertisement will be used to create a pool of 3 experts supporting the implementation of the Policy and Regulatory Frameworks activities of the Cybersecurity component.
Number of working days: up to 30 days, activated through a Purchase Order
Travel: Missions to Central Asia may be required (costs covered according to Expertise France rules)