Would you like to join the leading international intergovernmental organization?

We are seeking a highly skilled Governance, Risk, and Compliance (GRC) Writer to join the NATO Cyber Security Centre (NCSC) in Mons, Belgium. This is a critical role embedded within the Assess Branch, Adversary Emulation Section (Red Team), where you will be responsible for building and maintaining the foundational governance framework that guides NATO’s offensive security operations.

Responsibilities:

Governance & Policy Development:

• Gather and review the current documentation

• Draft, review, and maintain governance documentation for the Adversary Emulation Section, including:
  - Policies, standards, and procedures
  - Methodology governance documentation

• Ensure Red Team governance documentation aligns with:
  - Organizational directives
  - Military doctrine and policy
  - Applicable NATO, national, or institutional frameworks

Methodology & Ethical Governance:

• Document and maintain approved Red Team methodologies from a governance perspective, including:
  - Ethical boundaries
  - Rules of engagement (governance view)

• Deconfliction process: escalation, oversight, and stop criteria

Reporting & Documentation:

• Produce governance-focused written outputs, including:
  - Policy compliance statements
  - Operating model (CONOPS)
  - Governance documentation
  - Templates (rules of engagement, engagement reports, etc.)
  - Governance annexes to Red Team reports

• Ensure written outputs are:
  - Clear, structured, and suitable for senior governance audiences
  - Consistent in terminology and tone

Essential Qualifications & Experience:

Education:

Bachelor's degree at a nationally recognised/certified University in a technical subject with substantial Information Technology (IT) content and 5 years post-related experience. The lack of a university/college degree may be compensated by the demonstration of an at least 8 years extensive and progressive expertise in the duties related to the position.

Experience:

• Demonstrated experience in governance, risk, compliance, policy writing, or institutional oversight

• Demonstrated experience working in cybersecurity organization

• Familiarity with military or defence organizational structures

• Excellent analytical and structured writing skills

• Experience handling sensitive or restricted information

• Advanced English skills

If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.