vCISO — GovCon Security Leader (Hybrid)

Ntiva; Leawood (KS); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental and Vision coverage

401k + company-matched contributions

Employee Referral Program

Job summary

Ntiva seeks a vCISO to lead security programs for GovCon clients, translating complex requirements into practical roadmaps and ongoing assurance. You will collaborate with Sales, Engineering, and Delivery to align security with business objectives and drive scalable, high-quality governance across deliveries.

You will bring hands-on expertise in CMMC and NIST readiness, along with strong risk management, reporting, and client-facing advisory skills to advance Ntiva’s GovCon services.

Qualifications

• 5+ years in cybersecurity, security consulting, or IT compliance with a strong technical foundation, including client-facing advisory experience serving as the senior security voice for client leadership.
• Hands-on experience leading CMMC Level 2 / NIST 800-171 readiness engagements end to end, scoping, control assessment, POA&M management, remediation tracking, and evidence and audit documentation.
• Strong hands-on command of the security stack, identity and access management (Microsoft Entra ID / Azure AD, MFA, conditional access), endpoint protection (EDR/MDR), network and firewall controls, SIEM/log management, vulnerability management, and email security.
• Working knowledge of Microsoft 365 and Azure security, including government cloud (GCC / GCC High), FIPS-validated encryption, and CUI protection as they apply to DFARS and NIST 800-171.
• Ability to translate technical risk into business-level guidance for client executives and working knowledge of risk management within a managed-services delivery model.

Responsibilities

• Serve as the fractional security leader for a portfolio of GovCon clients, setting security program direction and roadmaps.
• Lead client risk management: conduct risk assessments, maintain risk registers, and prioritize remediation and security investment.
• Own ongoing compliance assurance across client programs, continuous control monitoring, reassessment, and evidence maintenance.
• Lead CMMC Level 2 and NIST 800-171 readiness for clients: scope the environment, direct gap assessments, and guide remediation to closure.
• Technically validate control implementation across identity, endpoint, network, cloud, and logging to confirm NIST 800-171 controls are in place.
• Advise on security architecture and tooling, identity, endpoint, network/firewall, and logging/monitoring to make compliance scalable.
• Provide security leadership during events and incidents: guide response, containment, and reporting obligations.
• Develop and maintain client security governance, policies, standards, and procedures aligned to NIST 800-171.
• Support Sales and Account Management as the senior security voice in discussions and proposals.
• Escalate critical risks with clear business impact and actions.
• Contribute to Ntiva's security and compliance go-to-market strategy and service maturity.

Skills

5+ years in cybersecurity

CMMC Level 2 / NIST 800-171 readiness

Security stack mastery

Identity & access management

SIEM / log management

Tools

Microsoft Entra ID / Azure AD

Job description

Ntiva seeks a vCISO to lead security programs for GovCon clients, translating complex requirements into practical roadmaps and ongoing assurance. You will collaborate with Sales, Engineering, and Delivery to align security with business objectives and drive scalable, high-quality governance across deliveries.

You will bring hands-on expertise in CMMC and NIST readiness, along with strong risk management, reporting, and client-facing advisory skills to advance Ntiva’s GovCon services.