Deadline Date:
Friday 8 August 2025
Requirement:
Cyber Security Accreditation Support
Location:
The Hague, NETHERLANDS
Full Time On-Site:
Yes
Time On-Site:
100%
Not to Exceed:
2025 BASE: NTE 56,610 EUR (17 * 3,330 EUR per sprint)
2026, 2027, 2028 options
Period of Performance:
2025 BASE: 1 September 2025
Required Security Clearance:
NATO SECRET
Special Terms and Conditions:
A Non-disclosure Undertaking will have to be signed before the start of the service delivery.
Please do NOT
apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.
Objectives:
- NCIA is embracing cloud services by transitioning to Microsoft 365 with a security-centric design.
- This shift aims to enhance operational efficiency, collaboration, and security across the organization. We are looking for individuals with strong knowledge, a willingness to learn, and a desire to grow as part of this new challenge.
- The objective of this statement of work is to establish a support and operating model for End User Services operating in the Public Cloud, with a focus on Microsoft 365 services.
The consultancy support for these services require an experienced contractor in Cyber Security Accreditation Support, with the following qualifications:
Experience:
- At least 5 years of experience supporting cyber security projects for large-scale CIS environments.
- At least 5 years of background in system security engineering, accreditation, and architecture.
- Proven experience with NATO or national security accreditation.
- Familiarity with lifecycle accreditation documentation (SAP, SRS, STVP).
- Understanding of accreditation authority structures and stakeholder dynamics.
- Skilled in conducting security risk assessments and SRARs.
- Familiar with NIST SP 800-30, ISO 27005 frameworks.
- Ability to advise on remediation and residual risk handling.
- Thorough knowledge of NATO Security Policy and ACO/ACT frameworks.
- Ability to interpret and implement policy requirements.
- Experience contributing to policy and directive development.
- Understanding of secure architecture principles in hybrid/public cloud.
- Knowledge of identity, access management, and ZTNA concepts.
- Familiarity with data protection strategies, including encryption and DLP.
- Excellent written communication for reporting and documentation.
- Effective oral communication and stakeholder engagement.
- Presentation of security posture and compliance status to senior audiences.
- Comfortable liaising with SAAs, PMs, and operational authorities.
- Representation in SABs and NATO-wide working groups.
- Capable of conflict resolution and negotiating accreditation paths.
- Provide accreditation advice for proposals, bids, and tenders.
- Support for security deliverables during project lifecycle.
- Input into procurement, development, and deployment stages.
- Experience working in international, multi-cultural environments.
- Familiarity with civil-military collaboration structures.
- Appreciation of NATO's organizational mission and governance.
- Desirable: CISSP, CISM, or CISA.
- Other relevant training in security risk or audit domains.
- Commitment to ongoing professional development.
- Fluent in English, both spoken and written.
- French language proficiency is an asset.
- NATO Secret Security Clearance or national equivalent required.
- Understanding of security best practices and compliance requirements related to Intune Device Management and Operations.
- Experience conducting audits and ensuring adherence to regulatory standards.
- Excellent communication skills to effectively collaborate with IT teams, stakeholders, and end-users.
- Ability to document processes clearly and provide training on IAM tools and practices.
- Strong organizational skills to manage multiple tasks and priorities effectively.
- Attention to detail in managing M365 environment and the Microsoft Intune Platform.
- Ability to work effectively as part of a team and share knowledge and resources.
- Willingness to collaborate with colleagues to solve complex issues.
- The individual has strong customer relationship skills, including negotiating complex and sensitive situations under pressure.
- Full proficiency in the English language. French language proficiency is of advantage.
- The individual must have the nationality of one of the NATO nations.
- The individual must possess a NATO Secret Security Clearance or national equivalent.