CDT-0010 Cybersecurity Standards Engineering Support Services (NS) - TUE 12 May

Deadline Date: Tuesday 12 May 2026

Requirement: Cybersecurity Standards Engineering Support Services

Location: Brussels, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 1087

Required Start Date: No Later Than 17 June 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Special Terms and Conditions: The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site. If the successful candidate is allowed to work remotely, travel to NATO HQ for meetings will be at the candidate’s expense. Travel to other locations will be reimbursed as if the travel originated in Brussels. Attendance at these meetings is mandatory.

1. INTRODUCTION

Cyber Digital Transformation Division (CDT) drives NATO’s Digital Transformation, a key objective is to strengthen the ability of Allies and the NATO Enterprise to deter, defend against and counter the full spectrum of cyber and cyber-enabled threats at the speed of relevance, comprehensively across the political, military, and technical levels. In particular, strengthen mechanisms and tools to enhance readiness and resilience against cyber threats across the Alliance, focusing in particular on Mission Vital Infrastructure (MVI).

We are looking for a well-rounded professional with excellent technical and communication skills as well as experience in the cybersecurity domain. NATO knowledge would constitute and asset.

2. TASKS

The Cyber Security Standard Engineering Support Services require a professional who can provide expert support in the analysis, coordination, development, and maintenance of NATO Cyber Security and CIS standards. The contractor will contribute to the design and evolution of NATO standardization artefacts within the cyber security domain, working closely with engineers, national subject matter experts, standards custodians, and relevant NATO stakeholders. The role supports the Interoperability and Standardization Section (ISS) as a cross-functional capability, ensuring consistent, secure, and interoperable cyber security standards across NATO’s digital technology portfolio. The contractor shall provide the following services in an effective and timely manner:

2.1 Requirements Analysis and Stakeholder Coordination

Description: The contractor shall engage with relevant stakeholders, including NATO committees, Capability Panels, national SMEs, and standards custodians, to elicit, analyse, and validate requirements related to cyber security standards and CIS protection. This includes translating complex cyber security specifications, policies, and operational needs into clear, actionable, and testable requirements.

Measurement: Success will be measured by the delivery of stakeholder-approved requirements documentation, traceability between requirements and resulting standards artefacts, and documented stakeholder interactions and decisions. Timeline: Continuously throughout the period of performance.

2.2 Development and Maintenance of Cyber Security Standards

Description: The contractor shall contribute to the development, review, and maintenance of NATO cyber security standards, ensuring alignment with NATO policies and internationally recognized frameworks such as NIST and ISO. This includes supporting the lifecycle of standardization artefacts within NATO governance processes.

Measurement: Success will be measured by the delivery and acceptance of standards artefacts by relevant governance bodies, compliance with applicable frameworks, and alignment with operational cyber security requirements.

Timeline: Continuously throughout the period of performance, with key deliverables aligned to governance cycles.

2.3 Development of Cyber Security Conformance Criteria and Audit Objectives

Description: The contractor shall define, document, and maintain cyber security conformance criteria and audit objectives, with a focus on enabling automation of compliance verification wherever feasible. This includes ensuring that criteria are measurable, testable, and aligned with NATO security policies and standards.

Measurement: Success will be measured by the delivery of approved conformance criteria, demonstrated applicability in auditing or compliance activities, and evidence of automation potential or implementation.

Timeline: Initial dev