Job Description

Deadline Date: Friday 16 October 2026

Requirement: Staff Support - Cryptographic Modernisation and Risks

Location: Brussels, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 380 (estimate)

Required Start Date: As Soon As Possible

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Special Terms and Conditions: The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site. If the successful candidate is allowed to work remotely, travel to NATO HQ for meetings will be at the candidate’s expense. Travel to other locations will be reimbursed as if the travel originated in Brussels. Attendance at these meetings is mandatory.

1. INTRODUCTION

The Cyber and Digital Transformation Division (CDT) oversees all aspects of cyber and digital transformation across the entire NATO enterprise and is the principal institutional engine for advancing the Alliance’s agenda on those issues. The division also coordinates on all aspects linked to countering hybrid actions. As a fully integrated civilian-military Division, it combines the strategic insight of the International Staff (IS) with the operational expertise of the International Military Staff (IMS), enabling coherent, credible, and actionable advice to NATO’s senior decision-making bodies.

The Cyber Plans and Capabilities Section (CYPCAP) delivers technical and capability expertise in the field of cyber defense, cyber security, and cyber operations. Through the DPC substructure, the Section delivers technical and implementation directives on cyber security and cryptographic standards. The Section supports the Military Committee in its governance role for cryptographic modernization and transformation as well as in cyber matters. The Section also enables the operationalization of cyber as a domain through delivering cyber defense subject matter expertise into the NATO Defense Planning Process and the Common Funded Capability Delivery Governance Model. CYPCAP also oversees the implementation of the Cyber Adaptation Roadmap. Additionally, this section supports the Cyber Strategy and Policy Section in developing operational doctrine in cyberspace.

1. OBJECTIVE

Staff Support (Cryptographic Modernization and Risks) will play a role in all of activities related to cryptography in CYPCAP. The primary responsibility will be preparing drafts of Committees’ documents, mostly related to cryptographic device approval and release processes. S/He will be responsible for inclusion of the document in the NATO workflow systems and tracking the approval process.

Other important function of this role is preparation of advice on risks related to cryptographic modernization and transformation. The incumbent will have to identify risks, based on received documentation and information gathered during meetings; and advise the Staff Officers on necessary further actions. S/He will be responsible for providing initial evaluation, proposing risk response and assessing residual risk. All of the finding and analysis will have to be properly document. The incumbent will also be involved in risk escalation process including preparation of, and occasional delivery of briefings at relevant NATO bodies.

Additionally, S/He will support various cryptographic communities of interest through organizing meetings, coordinating attendance, supporting the local organizing entities and finally preparing and staffing meeting records. This will include managing NATO portals and supporting both internal and national representatives.

1. TASKS

The incumbent must be able to perform effectively and efficiently with minimal supervision the tasks described below.

• Prepare draft documents related to NATO cryptographic device approval and release processes.
• Provide expertise in the field of cryptography in support of ongoing NATO and national initiatives.
• Support NATO Enterprise Risk Management, considering and incorporating the cryptographic elements to risks analysis, to support informed decision making.
• Manage organization of events and develop records of the meetings.
• Prepare presentations, speeches and speaking notes for senior officials as directed.
• Provide continuous and quality executive advice to the Staff Officers on the relationship with the NATO cryptographic stakeholders.
• Manage the cryptographic communities of interest portals and support external engagement.

1. PROFILE

[See Requirements]

1. LOCATION OF DUTY

The consultancy service will be executed on-site at the NATO HQ offices in Brussels, Belgium. Limited travels to other NATO bodies and Committee meetings in NATO Countries may be required.

The contractor will be embedded within CDT, working within the Cyber Plans and Capabilities Section, reporting directly to the Section Head, and working in close coordination with the other stakeholders.

The duty location is NATO HQ in Brussels, Belgium. Teleworking is possible on a case-by-case basis upon an agreement with management.

1. TIMELINES

The services of the contractor are required for the period starting as soon as possible until 31 December 2026.

A contract extension is possible for the calendar years 2027 and 2028. These contract extensions are subject to performance of the contractor and related NATO regulations and budget availability.

1. SPECIFIC WORKING CONDITIONS

The work will be performed in an office-based environment within a secure setting, under standard working hours. Occasional non-standard working hours may be required to support urgent or high-priority tasks.

All documentation shall be based on NATO or CDT templates or agreed templates.

All project material shall be stored on CDT dedicated spaces on approved NATO platforms.

1. TRAVEL

The contractor will be expected to undertake business travel in support of specification development and coordination activities with NATO stakeholders.

The frequency and duration of travel will depend on operational requirements and tasking needs.

Travel expenses will be reimbursed to the individual directly (in addition to the hourly rate) under NATO rules. Travel to Shape will not be reimbursed.

1. SECURITY AND NON-DISCLOSURE AGREEMENT

The security classification of the service will be up to NATO SECRET.

The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance at the time of proposal submission.

The contractor will be required to sign a Non-Disclosure Agreement prior to commencing work.

Requirements

1. PROFILE

The candidate must meet the following requirements:

• A university degree in Computer or Communication Science, Information Management, Information Security, or a related field.
• Demonstrated experience (5+ years) in post-related field.
• Possess comprehensive knowledge of the principles network security and symmetric and asymmetric cryptography; including quantum threat to cryptography.
• It is desirable that the contractor has previous experience with NATO-related cryptographic issues, such as the use of Type A algorithms, symmetric key distribution in a military environment and NATO policies on cryptography and cryptography procurement.
• Demonstrate experience with risk management as applied to cryptographic and/or cyber security fields, including creation of related artifacts, estimation and evaluation methodologies, risk mitigation planning and escalation process.
• Knowledge of NATO’s internal structures, decision-making processes, stakeholder environment and civil-military working practices, gained through relevant professional experience is desirable.
• Possess excellent written and spoken English (SLP 4343+), with the ability to communicate complex technical and policy issues clearly to a range of stakeholders.
• The contractor must have proven communication and negotiation skills matured within a large international environment.

1. SECURITY AND NON-DISCLOSURE AGREEMENT

• The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance at the time of proposal submission.