Security Control Assessor, NIST 800-53

🔥 2 hours ago

🐊 Florida – Remote

🐊 Florida – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Velero

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2024

🔒 Cybersecurity

📋 Compliance

💼 Consulting

Cybersecurity • Compliance • Consulting

Velero is a cybersecurity and compliance consulting firm that provides managed advisory and technical services to businesses of all sizes. Their offerings include offensive security and penetration testing, compliance advisory and assessments (SOC 2, HIPAA, NIST, ISO, PCI DSS, HITRUST, etc. ), privacy consulting (GDPR, CCPA/CPRA), public sector advisory (CMMC, FISMA, FedRAMP), due diligence and risk management for M&A and third‑party risk, AI security and scalability consulting, virtual CISO/CTO/CIO services, cloud advisory and engineering, and secure code reviews. Velero’s engagements include helping a growing SaaS company achieve SOC 2 certification via gap analysis, remediation roadmaps, controls implementation, and staff training. Based in Tampa, FL, they position themselves as a partner for organizations seeking to meet regulatory requirements and defend against cyber threats.

📋 Description

• Developing Security Assessment Plans (SAP) with defined testing procedures (Inspect / Interview / Test) • Conducting control assessments across all control families (technical + administrative) • Interviewing control owners and validating implementation statements in SSPs • Performing evidence-based testing (logs, configurations, artifacts) • Writing Security Assessment Reports (SAR) with formal findings and risk ratings • Building POA&M entries tied to identified control deficiencies

🎯 Requirements

• 5+ years of direct experience performing NIST 800-53A assessments • Proven ownership of SAP and SAR deliverables • Strong experience designing and executing control testing procedures • Background in RMF, FedRAMP, FISMA, or CMS ARS frameworks • Ability to independently validate controls beyond documentation review • Nice to have: • Experience with CMS ARS / ARC-AMPE baseline • Strong Excel-based evidence mapping and tracking

🏖️ Benefits

• As a lean, growing firm, we prioritize results over red tape, offering you a direct seat at the table and a clear path for career progression as we scale. You won’t be just a number here; you’ll have the autonomy to make a visible impact on the business from day one.