Requirement: Governance Risk Compliance Writer - Governance and Policy Support
Location: Mons, BELGIUM
Full Time On-Site: Yes
Time On-Site: 100%
Not to Exceed Rate: 103 EUR
Total Scope of the request (hours): 836
Required Start Date: 5 May 2026
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Duties & Role:
The contracted individual will be embedded in NATO Cyber Security Centre Assess Branch, Adversary Emulation section.
Governance & Policy Development:
- Gather and review the current documentation
- Draft, review, and maintain governance documentation for the Adversary Emulation Section, including: Policies, standards, and procedures; Methodology governance documentation
- Ensure Red Team governance documentation aligns with: Organizational directives; Military doctrine and policy; Applicable NATO, national, or institutional frameworks
- Document and maintain approved Red Team methodologies from a governance perspective, including: Ethical boundaries; Rules of engagement (governance view)
- Deconfliction process: Escalation, oversight, and stop criteria
- Reporting & Documentation: Produce governance-focused written outputs, including: Policy compliance statements; Operating model (CONOPS); Governance documentation; Templates (rules of engagement, engagement reports, etc.); Governance annexes to Red Team reports
- Ensure written outputs are: Clear, structured, and suitable for senior governance audiences; Consistent in terminology and tone
Requirements:
Skill, Knowledge & Experience:
- The candidate must have a currently active NATO SECRET security clearance
- The contracted individual will hold a Bachelor's degree at a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and 5 years post-related experience. The lack of a university/college degree may be compensated by the demonstration of an at least 8 years extensive and progressive expertise in the duties related to the function of the SOW.
- The required skillset for the contracted individual is:
- Demonstrated experience in governance, risk, compliance, policy writing, or institutional oversight
- Demonstrated experience working in cybersecurity organization
- Familiarity with military or defence organizational structures
- Excellent analytical and structured writing skills
- Experience handling sensitive or restricted information
