Requirement: Cloud Digital Trust
Location: On-Site, NCIA, The Hague, NETHERLANDS
Cost Not to Exceed: 2026 BASE: 58,500 EUR
Period of Performance: 2026 BASE: As soon as possible but not later than 12 October 2026, through 31 December 2026
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Statement of Work
Overall Project Scope
The NATO Communications and Information Agency (NCIA) located in The Hague, The Netherlands, is providing technical support to the NATO HQ Cyber and Digital Transformation (CDT) Division and Supreme Allied Command Transformation (SACT) by moving away from manual point-in-time audits, authorization to operate and security accreditation towards Continuous Governance, Risk and Compliance Auditing leading to Continuous Authorization to Operate (cATO) and Continuous Security Accreditation via EaC (Everything as Code) + Regulatory Operations (RegOps) using NIST OSCAL (Open Security Controls Assessment Language) data models, with the ultimate goal to deploy the RegScale platform as a workload and establish a Minimum Viable Product (MVP) for Continuous Authorization to Operate (cATO).
SPECIFIC EXPERTISE REQUIRED
The services described in this SOW require contractor personnel with experience in Enterprise Architecture and in addressing challenges related to interoperability.
Required:
- The candidate must have a minimum of a Bachelor's degree from a nationally recognized/certified University in a related discipline and 3 years of related post-degree experience.
- The candidate must have a minimum of 3 years' experience in Leadership.
- The candidate must have a minimum of 3 years' experience in Communication.
- The candidate must have a minimum of 3 years' experience in Strategy.
- The candidate must have a minimum of 3 years' experience in Risk Management.
- The candidate must have a minimum of 3 years' experience in Audit standards.
- The candidate must have a minimum of 3 years' experience in Storytelling and ROI Analysis.
- The candidate must have documented (or demonstrable) experience in process analysis and design techniques.


