#NC25ICT178790 - CSB Cloud Technical Manager Services - Closed
Deadline: April 23, 2025
Requester: NATO
Location: The Hague, Netherlands
Job type: Contractor
Start date: June, 2025
Security clearance: NATO SECRET
SCOPE OF WORK / DUTIES / ROLES
- Program and Project Management: Orchestrate and manage initiatives focused on establishing a security trust assurance and risk registry for cloud service providers, readiness for security accreditation and other initiatives as required;
- Compliance Management: Ensure cloud service providers comply with their shared responsibility model as per the custom organizational security framework;
- Pilot Programs: Lead and manage pilot programs with major cloud service providers to test and validate compliance and security measures;
- Security Accreditation: Drive efforts to achieve security accreditation for cloud systems, ensuring adherence to NATO policies and directives;
- Stakeholder Collaboration: Collaborate with internal and external stakeholders, including security teams, cloud service providers, and regulatory bodies;
- Risk Management: Identify, assess, and mitigate risks associated with cloud service provider security and compliance;
- Documentation and Reporting: Maintain comprehensive documentation and provide regular reports on program status, compliance metrics, and risk assessments;
- Training and Development: Develop and deliver training programs to enhance the cloud security knowledge and skills of team members;
- Continuous Improvement: Implement continuous improvement processes to enhance the efficiency and effectiveness of cloud security programs;
- Cloud Auditing: Plan and oversee the auditing of cloud service providers to ensure compliance with security standards and frameworks;
- Compliance as Code: Implement and manage compliance as code practices to automate security and compliance checks within cloud environments;
- Strategic Planning: Contribute to the strategic planning of cloud security initiatives, aligning them with organizational goals. The contractor will be part of a team and will provide services using an Agile and iterative approach during multiple sprints. Each sprint is planned for a duration of 1 week. The content and scope of each sprint will be agreed during the sprint-planning meeting, in writing, based on the activities mentioned above. Due to the AGILE approach of this project, there is a need to define a set of specific arrangements between the NCI Agency and the contractor that specifically defines the deliverables to be provided for each sprint as well as their associated acceptance criteria. This includes sprint planning, execution and review processes.
REQUIRED SKILLS, KNOWLEDGE AND EXPERIENCE
-
Project Management Professional (PMP), Prince2 or Certified ScrumMaster (CSM);
-
Certified Cloud Security Professional (CCSP);
-
Certificate of Cloud Security Knowledge (CCSK);
-
Certificate of Cloud Auditing Knowledge (CCAK);
-
In-depth knowledge of cloud security frameworks and standards (e.g., CSA STAR, NIST, ISO/IEC 27001);
-
Proficiency in cloud platforms (AWS, Azure, Google Cloud);
-
Strong understanding of the shared responsibility model in cloud computing;
-
Successful track record of advising complex international organizations on cloud governance, cloud compliance, cloud auditing;
-
Experience with continuous assurance and compliance;
-
Excellent project management skills, including planning, execution, and monitoring;
-
Strong analytical and problem-solving abilities;
-
Effective communication and stakeholder management skills;
-
Ability to lead cross-functional teams and drive results;
-
Experience with security trust assurance and risk registries;
-
Familiarity with security accreditation processes and standards;
-
Proven track record of managing complex cloud security projects;
-
The Contractor is able to speak and write fluent English since the work is conducted in English;
-
The Contractor must have the nationality of one of the NATO nations.
This position is now closed.
We regularly add new positions. We suggest exploring other available opportunities and staying updated by following our LinkedIn page.
If you don’t find any suitable opportunities, you can send us your CV, as an open application. However, we will not submit you to any vacancies without your written consent.