Security Governance Accreditation Consultant – Security Governance, Accreditation, Compliance – Hybrid, Luxembourg

A global organisation are seeking an experienced Security Governance / Accreditation Consultant to support a Private Cloud solution implementation.

The ideal candidate will be responsible for supporting security accreditation and Authorization to Operate activities, ensuring security requirements are clearly defined, assessed, evidenced, tracked, and aligned with applicable governance and compliance frameworks.

This position will focus on structuring security requirements, assessing people, process, and technology evidence, identifying security and compliance gaps, coordinating remediation activities, and preparing accreditation and governance artefacts, working closely with customer, infrastructure, platform, security, compliance, and NATO accreditation stakeholders.

This will be an initial 12 months+ contract with further extensions available.

This position will be worked on a hybrid basis with part-time on-site presence required in Luxembourg.

NATO Security Clearance is required.

Key Responsibilities:

• Define accreditation scope, system boundaries, governance, controls, and evidence requirements.
• Map requirements against NIST, ISO 27001, government and NATO security frameworks.
• Assess security architecture, documentation, controls, and compliance evidence.
• Conduct gap assessments, risk assessments, and track remediation and residual risks.
• Maintain requirements matrices, evidence registers, findings/risk logs, POA&Ms, and accreditation artefacts.
• Support SSPs, ST&E, ATO reviews, security workshops, and formal accreditation submissions.
• Assess security across private, disconnected, and air-gapped cloud environments.
• Coordinate with technical, security, customer, government, defence, and NATO stakeholders.
• Support operational readiness, governance, knowledge transfer, and handover.

Key Skills Required:

• Strong security governance, accreditation, assurance, GRC, and compliance experience.
• Proven ATO/accreditation experience in enterprise, government, defence, or regulated environments.
• Strong knowledge of NIST, ISO 27001, security controls, risk management, and cloud security.
• Experience with SSPs, ST&E, POA&Ms, evidence management, gap assessments, and remediation.
• Strong documentation, analytical, and stakeholder management skills.
• Experience with private/air-gapped cloud environments.
• NATO Security Clearance is required.