2025-0217 M365 and Data Compliance Management (NS) - FRI 8 Aug

Deadline Date: Friday 8 August 2025

Requirement: M365 and Data Compliance Management

Location: Braine L'Alleud. Belgium

Full Time On-Site: Yes

Time On-Site: 100%

Period of Performance: 2025 BASE: As soon as possible but not later than 1 September 2025 until 31 DEC 2025 with the possibility to exercise following options:

• 2026 option: from 01 JAN 2026 to 31 DEC 2026

• 2027 option: from 01 JAN 2027 to 31 DEC 2027

• 2028 option: from 01 JAN 2028 to 31 DEC 2028

Required Security Clearance: NATO SECRET

Special Terms and Conditions: A Non-disclosure Undertaking will have to be signed before the start of the service delivery

1 INTRODUCTION

Supporting NATO throughout all its geographical locations, NCIA is looking for service delivery in M365 and Data Compliance Management, to support NATO’s modernisation of IT services through leveraging the public cloud (Microsoft Azure, M365, Intune and Amazon AWS), delivering managed, protected, security-centric and reliable IT Services.

NCIA – Cloud Operations Team

The NATO Communications and Information Agency (NCIA) is dedicated to supporting NATO's strategic objectives, including the ambitious NATO 2030 agenda. As part of this commitment, we are spearheading the modernization and digital transformation of NATO’s IT services. Our focus is on leveraging public cloud technologies like Microsoft 365 and Intune, incorporating a security-by-design approach, and ensuring a seamless transition to a modern, collaborative workplace environment.

To achieve these goals, we are building a Cloud Operations team under the Cloud Center of Excellence, operating under the NATO Enterprise Cloud Operating Model (NECOM). The NECOM framework provides a standardized approach for cloud service management, ensuring interoperability, scalability, and security across NATO's IT infrastructure. The Cloud Center of Excellence will serve as a hub for best practices, innovation, and expertise, driving the adoption and optimization of cloud technologies within NATO. This team will play a crucial role in our journey towards providing managed, protected, and reliable End User Services.

Embracing the latest technological advancements, this initiative will foster innovation and ensure NATO remains at the cutting edge of IT capabilities. By continuously evolving and integrating new technologies, we aim to enhance operational efficiency and readiness for future challenges. This remote position offers an exciting opportunity to be at the forefront of NATO's technological evolution and contribute to the security and efficiency of our operations.

NCIA – Cloud Centre of Excellence (CCoE)

The Cloud Centre of Excellence (CCoE) within the NCIA is focused on driving successful cloud adoption and maximizing the potential of cloud technologies across the organization. It serves as a central governing body, promoting best practices, enabling knowledge sharing, and ensuring alignment between business objectives and cloud initiatives. The CCoE supports various cloud-based solutions, ensuring their effective and efficient implementation and management. By fostering a culture of continuous improvement and innovation, the CCoE helps the NCIA leverage cloud technologies to enhance operational efficiency, scalability, and agility.

2 OBJECTIVES

NCIA is embracing cloud services by transitioning to Microsoft 365 with a security-centric design. This shift aims to enhance operational efficiency, collaboration, and security across the organization.

The objective of this statement of work is to establish a support and operating model for End User Services operating in the Public Cloud, with a focus on Microsoft 365 services.

3 SCOPE OF WORK

Under the direction / guidance of the local NCIA Point of Contact or the Cloud Ops Operations Manager, the contractor will support the following:

1) Execute data ingestion into Microsoft 365 services

Migrate large volumes of user and archive data into Exchange Online, SharePoint, OneDrive, and Teams.

Handle folder mapping, duplicate resolution, and retention policies during migration.

Verify accuracy, access rights, and post-migration usability.

2) Operate Azure Blob Storage as staging layer

Upload and organize content securely before ingestion workflows.

Maintain structured metadata for traceability and reconciliation.

Monitor storage utilization, access logs, and tagging structure.

3) Perform file sanitization using OPSWAT and Defender tools

Integrate MetaDefender Core workflows for CDR and malware analysis.

Apply Defender for Endpoint and Defender for M365 scanning policies.

Log,