Software Engineering Student - Interested in Cloud Security Engineering and GRC
Making risk
legible.
I build tools that map controls across frameworks like NIST CSF, ISO 27001 and Essential Eight, and I write about what I learn along the way. Currently completing a software engineering degree at Monash, with a professional background in regulated manufacturing.
[ REDACTED ]
Most compliance work is invisible until something breaks.
I'm interested in the systems behind the systems. The frameworks, controls and processes that let cloud infrastructure be trusted. This site is a record of what I've built, what I've learned, and where that's heading.
I'm a penultimate-year Bachelor of Software Engineering (Honours) student at Monash University, graduating in 2027.
My background isn't typical for software engineering. I spent four years as a GMP Processor in a regulated manufacturing environment at Ensign Laboratories. Working under strict Standard Operating Procedures taught me that good systems are ones where evidence, process, and accountability are built in, not an afterthought.
That experience drives my interest in GRC and Cloud Security Engineering. I'm focused on how major frameworks like NIST CSF, ISO 27001, Essential Eight, and APRA CPS 234, get operationalised in code rather than just existing as static documents.
Projects and tools.
Roles, certifications, and timeline.
Bachelor of Software Engineering (Honours)
AWS Solutions Architect Associate (SAA-C03)
CompTIA Security+
Google Cybersecurity Professional
Coursera CompTIA A+
GMP Processor
Managed risk-minimisation and quality control under strict regulatory compliance frameworks and Standard Operating Procedures (SOPs).
Notes on cybersecurity and markets.
I write regularly about cloud security patterns, engineering for compliance, and how systems can be designed to make risk legible.
Read the full archiveWhat's next.
[ Certifications ]
- Completing CompTIA Security+
- Completing AWS Solutions Architect Associate (SAA-C03)
[ Engineering ]
- Building more agents to automate tasks
- Expanding my IaC and Cloud Architecture knowledge
[ Career ]
- Seeking graduate and internship opportunities in cloud security and GRC
- Exploring opportunities across the broader cloud landscape
Let's talk.
Open to graduate roles, internships, and conversations about cloud security, GRC, or the tools in between.
nfx@nunesfx.com