Deadline Date: Monday 30 March 2026
Requirement: Governance Risk Compliance Writer - Governance and Policy Support
Location: Mons, BE
Full Time On-Site: Yes
Time On-Site: 100%
Total Scope of the request (hours): 836
Required Start Date: 5 May 2026
End Contract Date: 31 December 2026
Required Security Clearance: NATO SECRET
Duties & Role:
The contracted individual will be embedded in NATO Cyber Security Centre Assess Branch, Adversary Emulation section.
Governance & Policy Development:
- Gather and review the current documentation
- Draft, review, and maintain governance documentation for the Adversary Emulation Section, including: Policies, standards, and procedures; Methodology governance documentation
- Ensure Red Team governance documentation aligns with: Organizational directives; Military doctrine and policy; Applicable NATO, national, or institutional frameworks
Methodology & Ethical Governance:
- Document and maintain approved Red Team methodologies from a governance perspective, including: Ethical boundaries; Rules of engagement (governance view)
- Deconfliction process: Escalation, oversight, and stop criteria
Deliverables:
- Reporting & Documentation: Produce governance-focused written outputs, including: Policy compliance statements; Operating model (CONOPS); Governance documentation; Templates (rules of engagement, engagement reports, etc.); Governance annexes to Red Team reports
- Ensure written outputs are: Clear, structured, and suitable for senior governance audiences; Consistent in terminology and tone
Specific Working Conditions: The work will be mainly executed on site at the NCI Agency offices in Mons, Belgium. Limited remote working from Belgium is possible, in accordance with the relevant NCI Agency Directive and line manager approval. Secure environment with standard working hours. There may be travel required, specifically to Brussels, Belgium, Braine-l'Alleud, Belgium; 10 Duty Travel days per year.
Requirements
Skill, Knowledge & Experience:
- The candidate must have a currently active NATO SECRET security clearance
- The contracted individual will hold a Bachelor's degree at a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and 5 years post-related experience. The lack of a university/college degree may be compensated by the demonstration of an at least 8 years extensive and progressive expertise in the duties related to the function of the SOW.
- The required skillset for the contracted individual is:
- Demonstrated experience in governance, risk, compliance, policy writing, or institutional oversight
- Demonstrated experience working in cybersecurity organization
- Familiarity with military or defence organizational structures
- Excellent analytical and structured writing skills
- Experience handling sensitive or restricted information