Virtual Chief Information Security Officer (vCISO

Virtual Chief Information Security Officer (vCISO)

Are you looking for limitless career opportunities with a company that values growth, innovation, and teamwork? At Ntiva,we're more than a Managed Services Provider,we're a community dedicated to helping each other, our clients, and their businesses thrive both personally and professionally. Ntiva is a culture of people who are passionate about the work…and each other.

Our clients view us as an essential part of their teams, relying on us for strategic guidance, fast solutions to complex challenges, and proactive support. With strategic locations across the U.S. and leadership from our founder, Steven Freidkin,we're on the front lines of a fast-paced industry, facing cybersecurity threats and rapid technology changes together.

If you thrive in a dynamic, supportive environment and enjoy going above and beyond,we'd love to meet you. Come explore one of our many opportunities and grow with us!

How you’ll make an Impact

As a vCISO, you will serve as a fractional security leader and trusted advisor to Ntiva's Gov Con clients, owning the direction of their security program while staying close enough to the work to move it forward. You will lead security and compliance strategy for both prospective and existing clients across the defense industrial base regulatory landscape (CMMC, NIST 800-171/172, DFARS, and the frameworks around them), translate those requirements into practical, prioritized roadmaps, and provide the ongoing assurance clients need to stay defensible over time — not just at a point-in-time assessment.

You will support new-business pursuits, strengthen and expand current relationships, and work closely with Sales, Account Management, Engineering, and Delivery teams to align security initiatives with client business objectives. In this role you will help shape Ntiva's go-to-market approach for security and compliance services, mature the Gov Con service stack, and ensure a consistent, scalable, and high-quality client experience across delivery, compliance, and advisory.

Location and Work Expectations

• This is a hybrid role with approximately 10% on-site work at client locations. We are seeking candidates located in either the Chicago or Kansas City areas
  . The specific allocation of remote versus onsite requirements may fluctuate based on business needs.
• Monday-Friday, 8am-5pm CST

What you will be doing

• Serve as the fractional security leader for a portfolio of Gov Con clients, setting security program direction, building and maintaining multi-year security roadmaps, and reporting risk and progress to client leadership in clear business terms.
• Lead client risk management: conduct and interpret risk assessments, maintain risk registers, and drive risk-based prioritization of remediation and security investment.
• Own ongoing compliance assurance across client programs, continuous control monitoring, periodic reassessment, and evidence maintenance, keeping SPRS scores, SSPs, and POA&Ms current and defensible between formal assessments.
• Lead CMMC Level 2 and NIST 800-171 readiness for clients: scope the environment, direct gap assessments, and guide remediation from findings through validated closure. (Ntiva prepares and maintains clients for certification; it is not a C3
  
  PAO and does not perform the certifying assessment.)
• Technically validate control implementation, review configurations across identity, endpoint, network, cloud (Microsoft 365 / Azure), and logging to confirm NIST 800-171 controls are actually in place and effective, not just documented on paper.
• Advise on security architecture and tooling, identity, endpoint, network/firewall, and logging/monitoring, partnering with Engineering and Delivery on designs and controls that make compliance scalable and sustainable.
• Provide security leadership during events and incidents: guide client response, oversee containment and remediation, and ensure applicable reporting obligations (e.g., DFARS ) are met.
• Develop and maintain client security governance, policies, standards, and procedures aligned to NIST 800-171 and client contractual requirements.
• Support Sales and Account Management as the…