Remote GovCon vCISO & Compliance Leader

Ntiva, Inc.; United States; Remote; USD 125,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision coverage

Company 401(k) with match

Paid time off

Job summary

Ntiva, Inc. is seeking a vCISO to lead security programs for GovCon clients, translating regulatory requirements into practical roadmaps and actionable security plans.

You will partner across Sales, Account Management, Engineering, and Delivery to align security initiatives with client goals. Responsibilities include risk management, compliance assurance, and guiding CMMC Level 2 / NIST 800-171 readiness from scoping to closure, with hands-on validation of controls across Microsoft 365/Azure and

Qualifications

• 5+ years in cybersecurity, security consulting, or IT compliance with a strong technical foundation, including client-facing advisory experience.
• Hands-on experience leading CMMC Level 2 / NIST 800-171 readiness engagements end to end, scoping, control assessment, POA&M management, remediation tracking.
• Strong hands-on command of the security stack: identity and access management, EDR/MDR, network controls, SIEM, vulnerability management, and email security.
• Experience supporting GovCon clients and navigating federal regulatory requirements (CMMC, DFARS, NIST 800-171).
• Experience contributing to go-to-market strategy, service standardization, and cross-functional enablement in security/compliance programs.

Responsibilities

• Serve as the fractional security leader for a portfolio of GovCon clients, setting program direction and multi-year roadmaps.
• Lead client risk management, conduct risk assessments, maintain risk registers, and prioritize remediation.
• Own ongoing compliance assurance across programs, maintain evidence, and keep SPRS, SSPs, and POA&Ms current.
• Lead readiness for CMMC Level 2 and NIST 800-171, scope environments, guide remediations to closure.
• Validate control implementations across identity, endpoints, networks, cloud, and logging to ensure actual compliance.
• Advise on security architecture and tooling, partnering with Engineering and Delivery for scalable controls.
• Provide security leadership during incidents, guide response, containment, and reporting obligations.
• Develop and maintain governance, standards, and procedures aligned to NIST 800-171 and client contracts.
• Support Sales and Account Management as the senior security voice in discussions and proposals.
• Escalate high-risk issues to GovCon leadership with business impact and actions.
• Contribute to Ntiva’s GovCon go-to-market strategy and service stack maturity.

Job description

Ntiva, Inc. is seeking a vCISO to lead security programs for GovCon clients, translating regulatory requirements into practical roadmaps and actionable security plans.

You will partner across Sales, Account Management, Engineering, and Delivery to align security initiatives with client goals. Responsibilities include risk management, compliance assurance, and guiding CMMC Level 2 / NIST 800-171 readiness from scoping to closure, with hands-on validation of controls across Microsoft 365/Azure and