C005356 ACPV Data Analysis and Data Source Onboarding (NS) - THU 17 Sep

Under the direction / guidance of the NCSC Point of Contact the contractor shall:

• Support data source onboarding by maintaining the Data Source registry and validating that the data presented matches the data model and has ingested correctly;
• Analyse data sources related to assets, configurations and vulnerabilities, including identifying and cataloguing relevant data sources, extracting pertinent data, assessing vulnerabilities and security gaps, and reviewing asset configurations against established security standards;
• Lead technical discussions on data sources, correlation and SOPs, including setting agendas, facilitating discussions, synthesising diverse viewpoints, and hosting and attending data boards, including running the data governance board;
• Prepare and present technical findings, provide recommendations and document results, including compiling and analysing data-driven insights, preparing technical reports and presentations, and documenting the methodology, results and implications of the analysis;
• Review the project service for depth, compliance and vulnerability exposure, including examining the service architecture, configurations, operational procedures, documentation, SOPs and technical reports to identify discrepancies, compliance requirements, areas for improvement and potential vulnerabilities.
• Attend, input and where necessary lead various boards including the Data Source Onboarding Group and Data Governing Board.

Specific Working Conditions: Normal working hours 0830-1730, with the exception of working non-standard working hours up to 360 hours annually to support incidents and on-call activities. Exceptional teleworking activities to support service delivery can also be arranged with the Point of Contact’s coordination and approval;

Travel required: The contractor may be required to work at other NCIA or NATO locations within Belgium. Such travel shall be considered commuting and will not be eligible for reimbursement. Up to two (2) days of official business travel may be required to various NATO locations during the period of performance within 12 months.

• The candidate must have a currently active NATO SECRET security clearance
• Nationally recognized/certified engineering university/college qualification with preferably Master of Science degree; A minimum requirement of a Bachelor’s degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
• Good knowledge of MS Office, with a minimum of 2 years of experience;
• Data sensitivity awareness. Understanding of handling classified or mission-critical information.
• Strong communication and interpersonal skills, with the ability to engage with diverse audiences, including government entities, partner organizations, and industry leaders;
• Strong team player, with the ability to work independently and as part of a team;
• Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 “Professional Proficiency”;
• Ability to plan and execute assigned project tasks taking into account policies, programme goals, and priorities, funding and other planning constraints;
• Deep understanding of the organization’s projects and priorities to effectively communicate key messages and foster positive relationships with stakeholders;
• Knowledge/ understanding of NATO responsibilities and organisation.
• Training/certifications: add if any
• Good understanding of Splunk and SQL

Desirable Experience:

• Experience in working for or supporting a military or governmental organization;
• Knowledge of NATO Communication and Information Systems Infrastructure.