Company Description Venzip is a modern governance and compliance platform that helps growth-focused organizations turn risk and regulatory requirements into a competitive advantage. Built by Big 4-trained experts, Venzip provides full-spectrum visibility across risk, vendors, and controls for standards such as SOC 2, ISO 27001, HIPAA, GDPR, and emerging AI system risks. The platform offers real-time control monitoring, embedded security and AI training, AI model oversight, and vendor governance portals to keep companies audit-ready.

Trusted by organizations in SaaS, fintech, healthcare, government, and other sectors, Venzip enables teams to scale securely, win enterprise deals, and continuously improve their risk posture. The essentials

Contract: 3–6 months

Billing: Ad hoc / as-needed - scoped and billed per engagement, not fixed weekly hours

Location: Fully remote

Rate: CAD $60–$100/hour, depending on experience Role Description We're looking for a Senior Security Consultant on an ad hoc, 3–6 month basis to support one of our clients through a NIST 800-53–based security and compliance engagement. You'll assess and strengthen the client's control environment, close gaps against federal requirements, and produce the documentation that stands up to assessment. Because billing is ad hoc, this suits an experienced consultant who can scope work tightly, deliver against clear milestones, and flex their hours to the engagement's needs.

You'll represent Venzip to the client and report back to your Venzip engagement lead.

Key responsibilities

NIST 800-53 assessment & implementation, assess the client's control environment, identify gaps, and advise on implementing and operating the required controls to the appropriate baseline

Documentation & evidence, develop and refine core artifacts (System Security Plans, Plans of Action & Milestones, and supporting evidence)



to a standard that withstands third-party assessment

Risk assessment & remediation, run risk assessments, prioritize findings, and track remediation to closure with the client's technical and business owners

CMMC readiness (where needed), support gap assessments and control mapping, including NIST 800-171

Advisory & translation, translate complex federal and regulatory requirements into explicit, actionable guidance for technical and non-technical stakeholders alike

Represent Venzip, act as a trusted, professional point of contact for the client, upholding Venzip's standards throughout the engagement

What you'll bring

NIST 800-53 (required): demonstrable, hands-on experience assessing and implementing controls — this is a must for the role

5+ years in security consulting, GRC, audit, or compliance, with a track record of taking clients through control assessments and remediation

Documentation rigor: proven ability to author and maintain SSPs, POA&Ms;, and audit-ready evidence

Exceptional ability to explain security and regulatory requirements clearly to both technical and non-technical audiences

Self-directed and comfortable with ad hoc, milestone-based engagements in a fully remote setting

Nice to have

CMMC experience, including its underlying requirements (NIST 800-171) and readiness or assessment support

Federal / Defense Industrial Base (DIB) experience, or exposure to FedRAMP / FISMA

Familiarity with related frameworks (ISO 27001, SOC 2, NIST CSF)

Relevant certifications (CISSP, CISA, CRISC, CMMC CCP/CCA)

Experience with GRC or evidence-automation tooling (Venzip and similar)

What success looks like

Within the engagement, you'll have delivered a clear, prioritized view of the client's posture against NIST 800-53, moved them materially closer to being assessment-ready, and left behind documentation (SSP, POA&M;, evidence) that stands up to scrutiny with Venzip positioned as a partner the client wants to keep working with.

📌 Senior Security Consultant — NIST 800-53 (Contract) (British Columbia)
🏢 Venzip
📍 British Columbia