Security Control Framework Engineer (Policy-as-Code and Automated SSP) for NATO with security clearance

A control catalogue written in prose cannot be checked by a machine. Your job would be to change that. A multinational defence organisation in The Hague, Netherlands is digitising its security control baseline so that compliance can be measured continuously rather than audited once a year. You would architect the translation — from written standards to structured, machine-readable control data. What you would be doing Reviewing the existing security requirement statements and the NIST or ISO ba…