ICT Security Consultant

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO’s communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO’s military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO’s mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO’s information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO’s communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise’s: NATO International Civilians (NIC)’s, Military (Mil), and Interim Workforce Consultants (IWC)’s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce. Role ID -CO-14633-AAS / RFQ No: NATOIS-0042 Role Background The ICT Security Accreditation Expert will support the Information and Communication Technology Management (ICTM) Directorate at NATO Headquarters. The role will be embedded within the Security Accreditation Authority (JISD/NOS) to oversee the security approval and accreditation process for ICT-related projects. The position focuses on ICT security accreditation, security architecture, and security risk management while supporting secure implementation of infrastructure and software projects. Role Duties and Responsibilities

• Oversee the Security Approval and Accreditation process for ICT-related projects.
• Review and assess security documentation, including:
• Security Approval/Accreditation Documentation Sets (ADS)
• Security Risk Assessments (SRA)
• Security Approval Plans
• Security Requirements Statements
• Security Test and Verification documents
• Security Audit Reports
• Non-Functional Requirements (NFRs)
• Prepare security recommendations and Security Approval/Accreditation letters.

• Provide security architecture guidance and advice to project managers and stakeholders throughout the project lifecycle.

• Develop security-related documentation, including Security Risk Assessments, where required.
• Assess Security Approval and Accreditation requests.
• Recommend improvements to existing security processes, procedures, and templates.
• Represent the team in cybersecurity meetings and CIS security-related boards.
• Support security-related decision-making within internal governance forums.
• Prepare bi-weekly status reports for the NATO supervisor.
• Perform other security-related duties as assigned. Essential Skills, Experience and Certifications

• Minimum 8 years of experience in ICT security-related roles.
• Strong experience in ICT security architecture and security accreditation/approval.
• Experience supporting ICT system and application implementation projects.
• Experience with both on-premises and cloud-based environments.

• Experience working in international organizations, government environments, classified environments, or complex multi-stakeholder organisations is desirable.

• Technically oriented university degree (e.g. Information Management, Electronic Engineering) or equivalent advanced vocational qualification.

• Strong knowledge of ICT infrastructure and security services, including directory services, databases, PKI, firewalls, and modern software technologies.

• Good understanding of project management methodologies such as PRINCE2.
• Excellent workshop facilitation, presentation, communication, and technical writing skills.

• Desirable: o Knowledge of NATO CIS security directives. o National certification in cybersecurity risk management or security accreditation (e.g. PACS, IT-Grundschutz, ENS). o Knowledge of Artificial Intelligence (AI) security.

• Language Requirement: Advanced English (NATO Level V).

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects., The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO’s member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.