Deadline Date: Friday 10 July 2026

Requirement: CDT NATO Integrated Cyber Defence Centre Coordinator

Location: Mons, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 880 (estimate)

Required Start Date: 17 August 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Special Terms and Conditions: The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organization, NATO HQ Brussels, Belgium to the contractor whilst working on site.

1. INTRODUCTION

The Cyber and Digital Transformation (CDT) Division advances the Alliance’s agenda on cyber defence and digital transformation, and is developing and coordinating the Alliance’s efforts on countering hybrid threats. The CDT also promotes coherence for Information and Communications Technology (ICT) and cyber security efforts across the NATO Enterprise’s civil and military bodies, ensuring that policies, processes and capabilities are interoperable and aligned with the Alliance’s strategic objectives.

The NATO Integrated Cyber Defence Centre (NICC) was designed to enhance the protection of NATO and Allied networks and the use of cyberspace as an operational domain. The Centre informs on possible threats and vulnerabilities in cyberspace, including privately-owned civilian critical infrastructures necessary to support military activities. The Centre brings together civilian and military personnel from across the NATO Enterprise, Allied countries and experts from industry. It leverages advanced technologies to increase situational awareness in cyberspace and enhance collective resilience and defence. CDT provides the Enterprise Coordinator role as well as membership to the three NICC Communities: SA & Fusion, Protect and Defend and Operations. CDT will be guaranteeing a growing presence in SHAPE by co-locating members within the three communities and the NICC Coordination Team (NCT).

The CDT NICC Coordinator is part of Cyber Operations Section and NICC Enterprise Coordinator Office and works in SHAPE within the NCT. The expert contractor will guarantee full support to the Section/Enterprise Coordinator Office Head in actively participating in the CDT daily activities, coordinate with the other CYOP members that are collocated in Mons and regularly report on NICC implementation. Further, this position will support CDT on-site NICC interaction with all NICC stakeholders such as ACO, JISD and NCIA. The incumbent will report to the CDT CYOP Section Head.

2. TASKS

The contractor will carry out the following services:

2.1 NICC Enterprise Coordinator Office Head Support

Provide continuous and quality on-site support to the Cyber Operations Section and NICC Enterprise Coordinator Office (CDT) in the context of all NICC related activities. This includes tracking decisions, actions, planned NICC activities and status in support of intra-NICC activities, including, but not limited to, the NICC communities; forward, with the aims to enhance the “enterprise approach” to ICT coherence and cybersecurity, and to improve coordination across the NATO Enterprise civil and military bodies.

Review and authorize reports from planning groups, working groups, conferences, workshops, table-top exercises, seminars or brain storming sessions. Plan and direct the preparation and delivery of briefings and workshops. Brief the Head of the NCT, Office Head and NICC Coordinators on key issues. Organise weekly meetings to update the Office Head and prepare Coordinators meetings. Meetings: Monitors, attends and reports on cross-community NICC activities to the Office Head. Weekly NICC report: Capturing all items of awareness and actions required by the NICC Enterprise Co-Ordinator and the CDT NICC community members.

Measurement:

• Timely and accurate delivery of weekly reports.
• Accurate tracking of CDT Community member taskings and actions.
• Effective coordination of meetings accompanied by clear actionable meeting minutes.
• Clear, concise and comprehensive documentation.

2.2 CDT Support to the NICC

Track all CDT activities in support of the NICC. This will involve direct interaction with all CDT members of the NICC Communities, including their formal and informal deliverables in support of the NICC. The expert contractor will also have to coordinate with elements of CDT or other stakeholders that are not located in SHAPE. Oversight and management of the CDT workplan supporting the NICC implementation, which tracks deliverables (and their status), stakeholder engagement and program risk in support of CDT’s engagement with NICC. Lead the engagement with NICC stakeholders, in order to support the collaborative work strands of the team, taking forward the views of CDT leadership at various levels and ensuring they are well understood within the NICC community, and communicating to CDT leadership the views of NICC stakeholders. Ensure the NCT builds and sustains relationships with NICC stakeholders.

Measurement:

• Timely and accurate delivery of reports on CDT deliverables.
• Clear, concise and comprehensive documentation providing an overview/dashboard on CDT deliverables.

2.3 On-Site CDT Representation

Support in representing the Section/Office head in activities where presence at SHAPE is needed.

Measurement:

• Timely and accurate delivery of reports on CDT deliverables.
• Clear, concise and comprehensive documentation providing an overview/dashboard on CDT deliverables.

2.4 CDT Community Support to the NICC

Provide support to CDT contributions regarding the three NICC communities. This shall include development and review of relevant CDT inputs related to risk, incident and cyber defence operations.

Measurement:

• Timely and accurate delivery of reports on CDT deliverables.
• Clear, concise and comprehensive documentation providing an overview/dashboard on CDT deliverables

2.5 CDT NCT Support

Act as CDT staff element within the NICC Coordination Team (NCT), through support to all NCT meetings, contribute to NCT work products and deliverables, act as a liaison between the NCT and the Enterprise Coordinator Office Head and ensure that CDT community members are aware of relevant NCT taskings.

Provide continuous and quality on-site support to the NICC Enterprise Co-Ordinator (CDT) in the context of all NICC related activities. This includes tracking decisions, actions, planned NICC activities and status in support of intra-NICC activities, including, but not limited to, the NICC communities.

Measurement:

• Timely and accurate delivery of reports.
• Clear, concise and comprehensive documentation

2.6: CDT Engagement at SHAPE

Provide senior liaison function on CDT topics at SHAPE as requested from CDT Senior Leadership. Participate in weekly meetings and coordination activities with the DCOS Cyberspace and his office/team, and through the provision of required related products and deliverables (in support of this function). Additionally, report on relevant updates from such meetings and activities to CDT and CYOP Leadership through appropriate reports.

Measurement:

• Timely and accurate delivery of reports.
• Clear, concise and comprehensive documentation.
• Ensuring constant and effective stakeholders’ engagement at all levels as appropriate.

3. PRACTICAL ARRANGEMENTS

This work will be carried out on site at NATO SHAPE HQ, Mons, Belgium. Once a week or when required, the incumbent shall perform duties at NATO HQ Brussels.

Meetings will be physically in the office, or in person via electronic means using Conference Call capabilities, according to the CDT staff instructions.

SHAPE Mons, SHAPE Recognized Business hours/Holidays: SHAPE Mons official holiday schedule applies and will be provided to the contractor.

NATO SHAPE HQ, Mons, Belgium of Operations: Monday to Thursday 0830 – 1730 and Friday 0830 – 1530 (CET)

Contractor Furnished Services: Contractor shall furnish everything required to perform the contract except for the items specified and covered under OCIC Furnished Property and Services below.

CDT Furnished Property and Services: Laptop for business administration including relevant software will be provided by CDT. Laptop for technical work including relevant software will be provided by CDT. Access to relevant networks and environments will be provided by CDT.  Work is to be performed on the CDT NATO HQ network(s) and appropriate hardware and connectivity will be provided by the CDT NATO HQ, for the duration of this contract, and is to be returned upon completion of the contract.

4. PROFILE

[See Requirements]

5. COORDINATION & REPORTING

Weekly Status Reporting

i. The contractor is required to provide weekly status reports detailing project progress, challenges encountered, and solutions implemented. These reports should highlight any deviations from the schedule or budget and propose corrective actions if necessary.

ii. Status reporting can be conducted on-site at SHAPE HQ Mons.

iii. Each status report should follow a standardized format agreed upon at the project's outset, which includes sections for accomplishments, work in progress, upcoming tasks, issues, and risks.

Adherence to NATO and CDT Protocols

i. The contractor shall comply with all general rules, terms, and conditions applicable to working within the CDT at SHAPE HQ Mons. This includes security protocols, data protection guidelines, and any specific operational procedures.

ii. The contractor must participate in an orientation session (if provided) to familiarize themselves with SHAPE HQ's environment, culture, and specific requirements of the facility.

iii. Regular coordination meetings with the CDT assigned Project Manager or designated point of contact will be scheduled to ensure alignment with NATO's objectives and to facilitate any necessary adjustments to the project plan.

6. LOCATION OF DUTY

The service will be executed on-site at the NATO SHAPE offices in Mons, Belgium. Limited travels to NATO bodies and Committee meetings in NATO Countries may be required. Once a week or when required, the incumbent shall perform duties at NATO HQ Brussels.

7. TIMELINES

The services of the contractor are required for the period starting 17th August until 31th December, 2026.

A contract extension is possible for the calendar year 2027. The contract extensions are subject to performance of the contractor and related NATO regulations and budget availability.

8. SPECIFIC WORKING CONDITIONS

Secure environment with standard working hours. Occasional non-standard hours may be required in support of the NATO CDT urgent tasks.

9. TRAVEL

Travel may be needed to attend coordination activities or meetings at NATO HQ, Brussels, or in other locations. Travel expenses will be reimbursed to the individual directly (in addition to the hourly rate) under NATO rules. Travel to NATO HQ – Brussels will not be reimbursed.

10. SECURITY AND NON-DISCLOSURE AGREEMENT

The security classification of the service will be up to NATO SECRET.

Performance of the services described in this SOW require a valid NATO SECRET security clearance at the time of proposal submission

Contractor/ shall be aware of all security rules pertaining to the handling of NATO classified information.

Personnel Security Clearance (PSC). Individuals who require access or may have access to information classified NC or above during the course of their duties shall have a PSC at the appropriate level, which is valid for the duration of the authorized access. In addition, such individuals are required to: Have a need-to-know; Have been briefed on their security obligations in respect to the protection of NATO Classified Information; and have acknowledged their  responsibilities either in writing or an equivalent method which ensures non-repudiation.

A signed Non-Disclosure Agreement will be required.

Requirements

3. PROFILE

• All staff to be employed on the contract must hold a NATO SECRET Security Clearance.
• The contractor must have more than 3 years of experience as an OF4.
• The contractor must have a significant experience within a national military organisation in a management role.
• The contractor must have strong familiarity with the technical, military and political aspects and structures of cybersecurity capabilities within NATO.
• The contract must have experience in the management or delivery of cybersecurity programs across multiple focus areas, including, but not limited to, incidents, risk, and cyber defence.
• The contractor must have demonstrated experience in project administration and tracking in multi-discipline environments. Program management of cybersecurity projects would be an asset.
• The contractor must have demonstrated experience in leading and operating in an environment with cross functional teams and complex reporting structures.
• The contractor must have demonstrated communication skills to senior decision makers and stakeholders in a multi-national environment. They must be able to address the technical, military, as well as policy aspects of ICT capabilities and cybersecurity in multinational environments.
• The contractor must have excellent English writing skills and the ability to brief on their work in English (NATO equivalent SLP 4343).
• Demonstrated relevant experience in NATO, defence, or government projects in the area of cyberdefence.
• Knowledge of relevant NATO security requirements and policies.
• Prior experience of working in an environment comprising both military and civilian elements.
• A thorough knowledge of one of the two NATO languages, both written and spoken, is essential and some knowledge of the other is desirable. (Note: Most of the work of the CDT-NATO HQ is conducted in the English language).