Hi, *Please reply to **[email protected]* <[email protected]>* and put cc to ** [email protected]* <[email protected]>* or feel free to contact me on 732-734-0711.*
Title: Project Manager (with DLP skill) (Data Loss Prevention) Location: Chicago, IL Duration: 6months Skills: Exelon Corporation has initiated several project efforts related to protecting Sensitive Private Information of customers, shareholders, employees, retirees and contractors. This SOW covers the scope of Phase 2 for Data Leakage. The supplier will be responsible for participating in the selection, implementation and management of the DLP solution. This scope of work consists of the second phase of the project, which includes participating in the two DLP vendor technology evaluation projects, participating in the selection of the DLP vendor selection, and participating in the implementation of the technology. With the afore mentioned deliverables the supplier will be responsible for facilitating the selection of a final DLP vendor solution, develop DLP policies, DLP incident response processes, management of the console, training Exelon personal on DLP policy development and management, and transition of the DLP management environment to steady state operation. It is anticipated that this SOW is a 1.5-year effort from November 2008 – March of 2010. Data Leakage: Exelon must have reasonable protective measures in place to safeguard Sensitive Personal Information (SPI) of customers, shareholders, employees, retirees and contractors. A key aspect of protection will be to implement a system and corresponding business process, which allows Exelon to prevent SPI leaks – external and internal, accidental and malicious. Exelon desires to implement a network-monitoring tool that will detect "leakage" of privacy information from email or the Internet. The system should be able to discover where SPI is located within the Exelon network, monitor who is using the information and how they are using it, and protect the information, securing business processes, managing risk, and assisting with compliance. This SOW will include planning, implementation, and technology management The project must complete the implementation of the complete DLP system including Data in Motion Protection, Data at Rest SPI identification and workstation projection, leading the development of all processes for Exelon to support DLP, and transitioning the management of the DLP system to the Exelon Steady State operational team by March 2010. The supplier will be responsible for the interacting with the security team, the compliance team, any application groups, Exelon Site IT, I&O groups such as Architecture and Engineering, as well as the managing of the matrixed relationship between the project team and various areas within IT, including IT Hosting and IT Operations. At Exelon, the management of the network, servers, etc. is outsourced to CSC Corporation. The project team will need to coordinate as well with the CSC team that plays a role in the scope of the project effort including documentation of requirements, estimates, and timeframes. In addition, some review by our Internal Auditors of plans may be required. The project team for the projects will be based at the Chase building in downtown Chicago.** *2. *Services The supplier will be responsible for all tasks associated with Phase 2 of the Data Leakage Project, such as: 1. Participate in the vendor technology evaluation process 2. Participate in the selection of the DLP vendor 3. Work Planning Requests 4. Develop DLP policies 5. Create a schedule for staged DLP policy implementation 6. Create a DLP incident response process 7. Facilitate closure of DLP incidents 8. Manage the DLP console 9. Train Exelon personnel on the DLP console 10. Train Exelon personnel on DLP policy development 11. Manage DLP Management console 12. Participate in the transition of the DLP Management console to steady state support 13. Follow all Exelon standards, including production (change) control, time tracking, etc. Follow all Exelon standards, including production (change) control, time tracking, etc.** *3. *Deliverables * * There are several deliverables that will need to be submitted to Exelon management for review and acceptance during this project. Specific deliverable dates for these will be established within the first few weeks of the project. Deliverables related to Phase 2** 1. Facilitate the implementation of the DLP management console 2. Develop SPI DLP policies 3. Participate in the creation of a schedule for staged DLP policy implementation 4. Participate in the creation of a DLP incident response process 5. Facilitate closure of DLP incidents 6. Manage the DLP console \ 7. Train Exelon personnel on the DLP console 8. Train Exelon personal on DLP policy development *4. *SCHEDULE * * The vendor will participate in activities based on the schedule established by the DLP Project Manager. *5. *milestones Milestones related to Phase 2 1. Participate in the 2 vendor technology assessment 2. Participate in the determination of final vendor 3. Participate in the implementation of DLP technology 4. Develop SPI policies for the DLP system 5. Develop SPI incident response process 6. Manage the DLP console 7. Train Exelon personal in Policy Development 8. Train Exelon personal in DLP console management Close out documents for the project, including lessons learned and project files.* * * * *6. *ACCEPTANCE CRITERIA/TESTING For the project tasks Exelon management will approve the deliverables. -- Thanks & Regards Neal Smith Technical Recruiter Astoline Inc Office: 732-734-0711 Email: [email protected]
