2026-0129 Provision OSCAL Architecting Services to NATO HQ CDT (NS) NETHERLANDS

The NATO Communications and Information Agency (NCIA) located in The Hague, The Netherlands, is providing technical support to the NATO HQ Cyber and Digital Transformation (CDT) Division and Supreme Allied Command Transformation (SACT) by moving away from manual point-in-time audits, authorization to operate and security accreditation towards Continuous Governance, Risk and Compliance Auditing leading to Continuous Authorization to Operate (cATO) and Continuous Security Accreditation via EaC (Everything as Code) + Regulatory Operations (RegOps) using NIST OSCAL (Open Security Controls Assessment Language) data models, with the ultimate goal to deploy the RegScale platform as a workload and establish a Minimum Viable Product (MVP) for Continuous Authorization to Operate (cATO).

The services described in this SOW require contractor personnel with experience in Enterprise Architecture and in addressing challenges related to interoperability., * The candidate must have a minimum of a Bachelor’s degree from a nationally recognized/certified University in a related discipline and 3 years of related post-degree experience.

• The candidate must have a minimum of 3 years’ experience with NIST/ISO frameworks, JSON/YAML proficiency, and regulatory mapping.
• The candidate must have a minimum of 3 years’ experience with compliance-to-code translation.
• The candidate must have documented (or demonstrable) experience in process analysis and design techniques.