Hybrid vCISO for GovCon Security & Compliance

Ntiva, Inc.; Lombard (IL); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental and Vision coverage

401k + company-matched 4%

Paid PTO & holidays

Job summary

Ntiva, Inc. is seeking a vCISO to lead security and compliance for GovCon clients. You will translate regulatory requirements into practical roadmaps, driving risk-based security investments and ongoing assurance across multiple programs.

The role requires hands-on governance, ability to manage CMMC Level 2 / NIST 800-171 readiness, and collaboration with Sales, Engineering, and Delivery teams. Hybrid work in the Chicago/Kansas City region.

Qualifications

• 5+ years in cybersecurity or IT compliance with client-facing advisory experience.
• Hands-on leadership of CMMC Level 2 / NIST 800-171 readiness engagements end to end.
• Strong command of identity, endpoints, network, cloud security controls.
• Ability to translate technical risk into business guidance for executives.

Responsibilities

• Serve as fractional security leader for GovCon clients, setting program direction and roadmaps.
• Lead risk management: conduct risk assessments, maintain risk registers, prioritize remediation.
• Oversee compliance assurance across programs and evidence maintenance.
• Guide CMMC Level 2 and NIST 800-171 readiness and remediation efforts.
• Validate security configurations across identity, endpoint, network, cloud, and logging.
• Advise on security architecture and tooling to scale compliance.
• Provide security leadership during incidents and coordinate client reporting obligations.
• Develop governance, policies, standards, and procedures aligned to NIST 800-171.
• Support sales with security insights and client discussions.

Skills

Fractional security leader

CMMC Level 2

NIST 800-171

Risk management

Security architecture

Identity & access management

M365/Azure security

GovCon experience

Customer-facing advisory

Tools

Microsoft Entra ID

Azure AD

Microsoft 365

Azure Government GCC High

SIEM/log management

Job description

Ntiva, Inc. is seeking a vCISO to lead security and compliance for GovCon clients. You will translate regulatory requirements into practical roadmaps, driving risk-based security investments and ongoing assurance across multiple programs.

The role requires hands-on governance, ability to manage CMMC Level 2 / NIST 800-171 readiness, and collaboration with Sales, Engineering, and Delivery teams. Hybrid work in the Chicago/Kansas City region.