Compliance-as-Code Architect (NIST/ISO, JSON and YAML) for NATO with security clearance

A control catalogue written in prose cannot be checked by a machine. Your job would be to change that. A multinational defence organisation in The Hague, Netherlands is digitising its security control baseline so that compliance can be measured continuously rather than audited once a year. You would architect the translation — from written standards to structured, machine-readable control data. What you would be doing Reviewing the existing security requirement statements and the NIST or ISO ba…