CDT-0023 Staff Support - Cryptographic Modernisation and Risks (NS) - FRI 16 Oct

4. PROFILE The candidate must meet the following requirements: • A university degree in Computer or Communication Science, Information Management, Information Security, or a related field. • Demonstrated experience (5+ years) in post-related field. • Possess comprehensive knowledge of the principles network security and symmetric and asymmetric cryptography; including quantum threat to cryptography. • It is desirable that the contractor has previous experience with NATO-related cryptographic issues, such as the use of Type A algorithms, symmetric key distribution in a military environment and NATO policies on cryptography and cryptography procurement. • Demonstrate experience with risk management as applied to cryptographic and/or cyber security fields, including creation of related artifacts, estimation and evaluation methodologies, risk mitigation planning and escalation process. • Knowledge of NATO’s internal structures, decision-making processes, stakeholder environment and civil-military working practices, gained through relevant professional experience is desirable. • Possess excellent written and spoken English (SLP 4343+), with the ability to communicate complex technical and policy issues clearly to a range of stakeholders. • The contractor must have proven communication and negotiation skills matured within a large international environment. 9. SECURITY AND NON-DISCLOSURE AGREEMENT • The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance at the time of proposal submission.

Deadline Date: Friday 16 October 2026 Requirement: Staff Support - Cryptographic Modernisation and Risks Location: Brussels, BE Full Time On-Site: Yes Time On-Site: 100% Total Scope of the request (hours): 380 (estimate) Required Start Date: As Soon As Possible End Contract Date: 31 December 2026 Required Security Clearance: NATO SECRET Special Terms and Conditions: The contractor will be responsible for complying with the  respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site. If the successful candidate is allowed to work remotely, travel to NATO HQ for meetings will be at the candidate’s expense. Travel to other locations will be reimbursed as if the travel originated in Brussels. Attendance at these meetings is mandatory.   1. INTRODUCTION The Cyber and Digital Transformation Division (CDT) oversees all aspects of cyber and digital transformation across the entire NATO enterprise and is the principal institutional engine for advancing the Alliance’s agenda on those issues. The division also coordinates on all aspects linked to countering hybrid actions. As a fully integrated civilian-military Division, it combines the strategic insight of the International Staff (IS) with the operational expertise of the International Military Staff (IMS), enabling coherent, credible, and actionable advice to NATO’s senior decision-making bodies. The Cyber Plans and Capabilities Section (CYPCAP) delivers technical and capability expertise in the field of cyber defense, cyber security, and cyber operations. Through the DPC substructure, the Section delivers technical and implementation directives on cyber security and cryptographic standards. The Section supports the Military Committee in its governance role for cryptographic modernization and transformation as well as in cyber matters. The Section also enables the operationalization of cyber as a domain through delivering cyber defense subject matter expertise into the NATO Defense Planning Process and the Common Funded Capability Delivery Governance Model. CYPCAP also oversees the implementation of the Cyber Adaptation Roadmap. Additionally, this section supports the Cyber Strategy and Policy Section in developing operational doctrine in cyberspace. 2. OBJECTIVE Staff Support (Cryptographic Modernization and Risks) will play a role in all of activities related to cryptography in CYPCAP. The primary responsibility will be preparing drafts of Committees’ documents, mostly related to cryptographic device approval and release processes. S/He will be responsible for inclusion of the document in the NATO workflow systems and tracking the approval process. Other important function of this role is preparation of advice on risks related to cryptographic modernization and transformation. The incumbent will have to identify risks, based on received documentation and information gathered during meetings; and advise the Staff Officers on necessary further actions. S/He will be responsible for providing initial evaluation, proposing risk response and assessing residual risk.  All of the finding and analysis will have to be properly document. The incumbent will also be involved in risk escalation process including preparation of, and occasional delivery of briefings at relevant NATO bodies. Additionally, S/He will support various cryptographic communities of interest through organizing meetings, coordinating attendance, supporting the local organizing entities and finally preparing and staffing meeting records. This will include managing NATO portals and supporting both internal and national representatives. 3. TASKS The incumbent must be able to perform effectively and efficiently with minimal supervision the tasks described below. • Prepare draft documents related to NATO cryptographic device approval and release processes. • Provide expertise in the field of cryptography in support of ongoing NATO and national initiatives. • Support NATO Enterprise Risk Management, considering and incorporating the cryptographic elements to risks analysis, to support informed decision making. • Manage organization of events and develop records of the meetings. • Prepare presentations, speeches and speaking notes for senior officials as directed. • Provide continuous and quality executive advice to the Staff Officers on the relationship with the NATO cryptographic stakeholders. • Manage the cryptographic communities of interest portals and support external engagement. 4. PROFILE [See Requirements] 5. LOCATION OF DUTY The consultancy service will be executed on-site at the NATO HQ offices in Brussels, Belgium. Limited travels to other NATO bodies and Committee meetings in NATO Countries may be required. The contractor will be embedded within CDT, working within the Cyber Plans and Capabilities Section, reporting directly to the Section Head, and working in close coordination with the other stakeholders. The duty location is NATO HQ in Brussels, Belgium. Teleworking is possible on a case-by-case basis upon an agreement with management. 6. TIMELINES The services of the contractor are required for the period starting as soon as possible until 31 December 2026. A contract extension is possible for the calendar years 2027 and 2028. These contract extensions are subject to performance of the contractor and related NATO regulations and budget availability. 7. SPECIFIC WORKING CONDITIONS The work will be performed in an office-based environment within a secure setting, under standard working hours. Occasional non-standard working hours may be required to support urgent or high-priority tasks. All documentation shall be based on NATO or CDT templates or agreed templates. All project material shall be stored on CDT dedicated