This role builds and operates the automated compliance evidence collection engine for an enterprise solution running on AWS. The work is technical and hands-on, including writing Lambda functions, Terraform modules, CI/CD pipelines, and integrating with AWS Audit Manager to produce Dashboards for Compliance visibility. The right person has a developer's instincts and a security engineer's judgment. Key Responsibilities
Design and build Lambda-based evidence collectors that query live AWS infrastructure and produce structured compliance evidence mapped to PBMM and ITSG-33 controls Write and maintain IaC (Terraform) for compliance pipeline components - orchestration, storage, ingestion, and IAM roles Integrate evidence collection pipelines with AWS Audit Manager, ensuring evidence packages are assessment-ready Write automation scripts in Python and C# to support evidence normalization, schema validation, and data transformation Contribute to CI/CD pipeline ...