ICT Security Architect

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – NATOIS-0043

Role Background

They will be embedded in the Security Architect Authorit, being the Joint Intelligence and Security Division/NATO Office of Security (JISD/NOS), in order to enable the Security Approval/Accreditation Process of ICTM-led projects. In the past years ICTM and JISD/NOS have developed templates and examples of the documentation set that needs to be submitted as part of a Security Approval/Accreditation Process, as well as specific procedures applicable within the NHQ CIS Governance.

Objectives

The primary objective of this role is to strengthen the security of NATO Headquarters ICT projects by providing expert security architecture guidance and supporting secure solution design. The Security Architect will contribute to the Security Approval and Accreditation process, support Cyber and Information Systems (CIS) Security Risk Management activities, and assist with security auditing to ensure compliance with NATO security policies and standards.

Scope of Work

The Security Architect will work closely with project managers and key stakeholders to provide security-related advice throughout the lifecycle of ICT projects. Responsibilities include assessing security requirements, identifying and mitigating security risks, supporting accreditation and risk management activities, and ensuring that ICT solutions align with NATO security policies, architecture principles, and best practices. The role also supports security audit activities and contributes to the continuous improvement of security governance across NATO Headquarters ICT initiatives.

Role Duties and Responsibilities

• Security Architecture Advice and Guidance to Project Managers
• CIS Security Risk Management
• Review of ADSs from security architecture perspective
• Assess ADS requests
• Contribute to Security Audit activities
• Contribute to the continuous improvement of internal processes
• Other security-related duties as required by the NATO
• supervisor

Essential Skills, Experience and Certifications

• Minimum 8 years of experience in ICT security-related functions
• Proven, strong expertise in ICT security architecture and security
• Accreditation/Approval process
• Experience in participating in ICT systems and applications Implementations
• Experience in both on-premise and cloud deployments
• Experience with SIEM and UEBA technologies and tools
• Technically oriented university degree (information management,electronic engineering, etc.) or equivalent completed advanced vocational training
• Proven understanding and technical knowledge of the ICT infrastructure & security services (directory services, database, PKI, firewall, etc.), latest software technologies either on-premises or cloud-based
• Good understanding of project management methodologies and tools (e.g. PRINCE2)
• Good knowledge of security architecture frameworks and methodologies (e.g. SABSA)
• Desirable: knowledge and practice of NATO CIS security related directives.
• Proven experience in organizing workshops and conducting meetings and presentations

Working Location

• Brussels, Belgium

Working Policy

• On-site in Belgium, with the possibility of working remotely part-time from within Belgium

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance