Continuous Compliance Architect - Cyber & RegOps (On-site)

Spektrum; Den Haag; On-site; EUR 75,000 - 110,000; Full time

Job summary

Spektrum is hiring for a role based in The Hague, Netherlands, supporting NATO-related cyber and governance initiatives. The position focuses on OSCAL conversion, policy-as-code mapping, and SSP generation to enable continuous authorization and secure operations.

The candidate will work with NCIA/NCI Agency standards, review baselines, and coordinate stakeholder sessions to ensure compliant, auditable security documentation. On-site work with occasional travel may be required.

Qualifications

• A minimum of 3 years’ experience in NIST/ISO frameworks, JSON/YAML proficiency and regulatory mapping.
• Experience translating compliance requirements into code and controls.

Responsibilities

• Review the existing SRS, D32/CSRS, NIST/ISO baseline for OSCAL conversion.
• Identify and document relevant technical triggers from the cloud environ.
• Review sampled automated evidence to confirm completeness, accuracy and suitability for supporting SSP content.
• Conduct Stakeholder Review Sessions to validate assumptions, mappings, evidence sources, and SSP generation logic.
• Issue tracking and remediation support.

Skills

NIST/ISO frameworks

JSON/YAML proficiency

Regulatory mapping

Compliance-to-code translation

Process analysis & design techniques

Education

Bachelor's degree in related discipline

Business English

Job description

Spektrum is hiring for a role based in The Hague, Netherlands, supporting NATO-related cyber and governance initiatives. The position focuses on OSCAL conversion, policy-as-code mapping, and SSP generation to enable continuous authorization and secure operations.

The candidate will work with NCIA/NCI Agency standards, review baselines, and coordinate stakeholder sessions to ensure compliant, auditable security documentation. On-site work with occasional travel may be required.