Digital Trust Advisor (Risk, Controls and Executive Reporting) for NATO with security clearance

Automated evidence is worthless until an auditor accepts it. This post is about making that case, properly. A multinational defence organisation in The Hague, Netherlands is piloting continuous assurance over its cloud estate. You would lead the governance side of that pilot: define it, test whether the evidence really holds, and show the leadership what it means. What you would be doing Running the stakeholder discussion that fixes the pilot's scope, target environment, priority application, s…