NATOIS-0017 - ICT Security Accreditation NS - TUE 9 Apr Brussels

Job Description

• Based onsite in Brussels
• CURRENT Security Clearance required: NATO SECRET
• CURRENT visa for working in Belgium

NATOIS-0017 - ICT Security Accreditation ExpertDeadline Date: Tuesday 9 April 2024Requirement: ICT Security Accreditation expertLocation: Brussels, BEFull Time On-Site: YES, but with some flexibility for part-time teleworking (locally)MAX Rate:158 EURTotal Scope of request (hours): 1000 hours (circa 6 months)Required Start Date:3 June 2024Required Security Clearance:NATO SECRETNote: For all Level-of-Effort and Completion-Type requests processed outside of IWC Value Stream, and for which contractor will not be reimbursed directly by NCIA for travel expenses, additional travel funding shall be allocated on a Not-to-exceed basis whenyearly Option is exercised.PROFILE SUMMARYInformation and Communication Technology Management (ICTM) Directorate has portfolio of ICT-related projects with diverse nature. Some projects are rather infrastructure related, others are related to software acquisition and development. EM/ICTM has requirementfor expert in ICT security. Your efforts will focus on assisting Project Managers in developing security-related documents, development of non-functional requirements for new systems and attending security-related meetings when requiredNATO’S DIVISION & SUPERVISION, COORDINATION AND REPORTINGDivision: International Staff - Executive ManagementMission: Executive Management (EM) Division, International Staff (IS), has lead role in overall management of NATO Headquarters (HQ) environment. Within EM, ICTM Directorate provides support and services to North Atlantic Council (NAC), itsCommittees, IS staff, and, when required, to Member and Partner Nation Delegations based in HQ. Directorate comprises of two pillars: Information Communication Technology (ICT) and Archives, Information and Knowledge Management (AIM).Vision: ICTM is recognised and trusted Directorate for implementation of ICT-related projects for IS. PRINCE2 has been adopted as methodology. In order to guarantee (cyber-) security of systems that are being implemented, EM/ICTM follows securityapproval process, agreed by Security Accreditation Authority. As part of this process, security-related documentation needs to be submitted to variety of stakeholders for review and approval.OBJECTIVE AND SCOPE OF WORKBackground: You will assist EM/ICTM Project Managers in their work by developing set of security-related documentation as directed by NATO’s security policies and directives. At beginning (initiation phase) of project Security Approval/AccreditationPlan is agreed between Implementation Authority (in this case EM/ICTM) and Security Accreditation Authority, being Joint Intelligence and Security Division/NATO Office of Security (JISD/NOS). In past years EM/ICTM have developed templates and examples of documentationset that needs to be submitted. These templates will be made available to you.Objectives:Development of security-related documentation in accordance with relevant NATO security directives.Provide security-related advice during acquisition phase of new project.Attend meetings related to (cyber-) security.Scope of Work:Assist in drafting Non-Functional Requirements (NFRs) document, which is part of Statement of Work (SoW) and based on business NFR’s provided by Business Analyst. NFR document gathers ability to deploy, security, usability andsupportability requirements of procured solution;Develop agreed security-related documentation;Support Project Manager and other project stakeholders regarding security design matters throughout entire project lifecycle, including security approval-related activities;Reporting:Two-weekly status reports to NATO supervisorDUTIES AND ROLEDevelopment of Security Accreditation/Approval Plan;Assist in development of Security Risk Assessments;Security Operating Procedures;NFR’s ;Security-related input to CIS Description;Other security-related deliverables as required by NATO supervisor.LOCATIONService will be 100% at NATO Headquarters in Brussels.Due to nature of service, there will be flexibility for part-time teleworking (locally).TIMELINESServices of contractor are required for period starting 3rd June 2024 until 31st December, 2024.REQUIRED EXPERTISE AND QUALIFICATIONS

• Candidate must have currently active NATO SECRET security clearance
• Minimum 8 years of experiencein ICT security-related functions;
• Proven, strong expertise in ICT security;
• Experience in participating in ICT system implementations.
• Additionally, you must have experience in working in international organization or environment.
• Technically oriented university degree(information management, electronic engineering, etc.) or equivalent completed advanced vocational training;
• Good understanding and technical knowledge of ICT infrastructure & security services (directory services, database, PKI, firewall, etc.), latest software technologies;
• Good understanding of project management methodologies and tools (PRINCE2);
• Desirable: knowledge and practice of key NATO (cyber-) security related directives.
• Possess following minimum levels of NATO’s official languages: (English): V (“Advanced”)
• Proven experience in organizing workshops and conducting meetings and presentations;
• Excellent drafting and communication skills;