Compliance-as-Code Architect: Automating Security Controls

WLG

Den Haag

On-site

EUR 90,000 - 120,000

Full time

6 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

WLG is seeking a security architect to translate written controls into a machine-readable catalogue and generate a complete system security plan from automated evidence. You will map NIST/ISO baselines to structured data, defining the triggers a cloud environment can raise and aligning them with control identifiers.

Collaboration with stakeholders to validate assumptions and mappings, plus remediation tracking, will be part of your responsibilities.

Qualifications

Bachelor's degree in a related discipline.
Three years across NIST and ISO control frameworks; JSON and YAML; regulatory mapping.
Translating compliance requirements into code.
Documented experience of process analysis and design.

Responsibilities

Review existing security requirement statements and the NIST/ISO baseline behind them.
Import the baseline into a structured, machine-readable control format.
Identify the technical triggers the cloud environment can raise.
Map triggers to specific control identifiers — policy as code.
Review sampled automated evidence for completeness and accuracy.
Generate the first full system security plan from automated evidence.
Run stakeholder sessions to validate mappings and generation logic.
Track issues through to remediation.