> Markdown version of [/jobs/ext/2668849-cloud-governance-and-audit-consultant-continuous-assurance-for-nato-with-security-clearance](https://www.wearedevelopers.com/jobs/ext/2668849-cloud-governance-and-audit-consultant-continuous-assurance-for-nato-with-security-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Governance and Audit Consultant (Continuous Assurance) for NATO with security clearance - **Company:** WLG - **Location:** Den Haag, Netherlands - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Interoperability - **Published:** September 2, 2026 - **Apply:** https://www.adzuna.nl/details/5865380868 ## About the Role * A bachelor's degree in a related discipline with three years of related experience * Three years across all of: leadership; communication; strategy; risk management; audit standards; and building a return-on-investment case people can follow * Documented experience of process analysis and design Nice to have * Real technical knowledge of how allied organisations achieve interoperability * A working understanding of defence cloud strategy * ITIL, COBIT or an equivalent ## Description Automated evidence is worthless until an auditor accepts it. This post is about making that case, properly. A multinational defence organisation in The Hague, Netherlands is piloting continuous assurance over its cloud estate. You would lead the governance side of that pilot: define it, test whether the evidence really holds, and show the leadership what it means. What you would be doing * Running the stakeholder discussion that fixes the pilot's scope, target environment, priority application, success criteria and risk areas * Agreeing roles, responsibilities, dependencies and decision points with the cloud, compliance, audit and business sides * Judging whether automated evidence from cloud and software services is complete, reliable, traceable and fit for purpose * Mapping that digital evidence to the controls, audit requirements and assurance expectations it is supposed to satisfy * Reviewing the dashboard so that it reflects live risk, control status and compliance rather than a comfortable picture * Preparing the demonstration that explains the dashboard, the insights and the business value to an executive audience * Running review sessions to validate assumptions and mappings, and tracking issues to remediation ## Related Videos - [From Bedside Beeps to Interoperable Bytes – Getting your medical devices ready to talk the IEEE 11073 language](https://www.wearedevelopers.com/videos/771-from-bedside-beeps-to-interoperable-bytes-getting-your-medical-devices-ready-to-talk-the-ieee-11073-language) - [What Digital Sovereignty Means for Developers - Julien Blanchez](https://www.wearedevelopers.com/videos/1370-what-digital-sovereignty-means-for-developers-julien-blanchez) - [WeAreDevelopers LIVE - GraalVM in action, Static Analysis insights and more](https://www.wearedevelopers.com/videos/1723-wearedevelopers-live-graalvm-in-action-static-analysis-insights-and-more) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Seriously gaming your cloud expertise: from cloud tourist to cloud native](https://www.wearedevelopers.com/videos/373-seriously-gaming-your-cloud-expertise-from-cloud-tourist-to-cloud-native) - [Blockchains: One Size doesn't Fit All](https://www.wearedevelopers.com/videos/409-blockchains-one-size-doesn-t-fit-all) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)