Information Security Advisor II - RAMPQuest

Overview

At RAMPQuest, we partner with organizations to navigate complex cybersecurity and compliance frameworks, offering expert-led consulting, advisory services, risk assessments, and program management. With deep experience across both public sector and commercial clients, we help organizations operationalize standards such as NIST SP 800-53 and CMMC, including services as the Program Management Office (PMO) for GovRAMP. Our values-trust, community, and integrity-guide our engagement with clients, providers, and partners.

The Information Security Advisor II serves as a trusted contributor on cybersecurity advisory engagements, providing independent analysis, practical guidance, and clear communication with clients. This role leads defined components of client engagements, including risk assessments, gap analyses, and the development of compliance documentation, while ensuring deliverables align with recognized security and compliance frameworks. The Advisor II is expected to translate complex technical requirements into actionable recommendations that support client remediation efforts and long-term security maturity.

This position requires a strong balance of technical acumen, analytical thinking, and professional presence. The Information Security Advisor II participates confidently in client meetings and presentations, supports audit readiness activities, and contributes to the continuous improvement of advisory methodologies and client-facing materials. The role also emphasizes collaboration-sharing insights across teams, strengthening engagement quality, and supporting consistent, high-quality delivery. As a mid-level advisor, this role reflects growing independence, sound judgment, and increasing ownership of client outcomes while continuing to develop deeper subject-matter expertise and relationship management skills.

The primary duty of the Information Security Advisor II is to provide independent cybersecurity advisory services by evaluating client environments against established regulatory and compliance frameworks, conducting risk and gap assessments, and exercising discretion to develop tailored remediation strategies that strengthen governance, audit readiness, and overall enterprise risk management.

Responsibilities

• Lead defined components of cybersecurity advisory engagements, including planning, execution, and documentation deliverables
• Conduct independent gap analyses and risk assessments against established security and compliance frameworks
• Develop and maintain client compliance documentation, including system security plans (SSPs), disaster recovery plans (DRPs), policies, procedures, and audit response materials
• Evaluate client environments against frameworks such as NIST, ISO, and SOC 2, identifying risks, control gaps, and improvement opportunities
• Provide clear, actionable remediation recommendations tailored to client maturity, risk tolerance, and business needs
• Participate in and contribute to client-facing advisory calls, workshops, and presentations with professionalism and confidence
• Communicate technical and regulatory concepts effectively to non-technical client stakeholders
• Support audit readiness efforts by preparing evidence, responding to auditor inquiries, and validating control implementation
• Ensure all client deliverables meet internal quality standards, contractual requirements, and applicable compliance frameworks
• Collaborate with cross-functional team members to share insights, align on engagement strategy, and strengthen advisory outcomes
• Proactively identify process improvements, risks, or efficiencies within engagements and recommend solutions
• Contribute to the refinement of advisory methodologies, templates, and client-facing tools
• Maintain current knowledge of cybersecurity standards, regulatory trends, and best practices relevant to advisory services

Qualifications

• 4-7 years of experience in cybersecurity advisory roles
• Certifications preferred: Security+, CISA, CGRC, CRISC, CMMC Certified Cybersecurity Practitioner (CCP), SCF Practitioner
• Experience with NIST SP 800-53, ISO 27001, or SOC 2
• Strong interpersonal skills for client-facing engagements
• Demonstrate growing expertise in managing client relationships and guiding discussions, while contributing to team cohesion and knowledge sharing

At RAMPQuest, a Knowledge Business Services company, we prioritize creating an environment that supports our Team Members’ success and personal well-being with a robust benefits package, some of which include:

• Medical coverage, including employer match program for Health Savings Accounts (HSAs)
• Generous 401k retirement plan with employer match
• Dependent Care Flexible Spending Account (DCFSA)
• Employee Assistance Program (EAP) with unlimited usage and visits and wellness program
• Dental and Vision insurance
• Company-sponsored life insurance, with options for additional coverage
• Short- and Long-Term Disability (STD and LTD) benefits
• Pet insurance
• Maternity, Paternity, and Military benefits
• Baby on Board program
• Paid Time Off package
• Company Anniversary Bonus program
• Professional Development opportunities, including Young Professional Series, Manager Focus series, Cyber Security panels and briefs, and more
• A+ rated HQ office full of amenities including fitness center, rec room, coffee bars, bike room, café, auditorium, private Mother’s room, and more

RAMPQuest, a Knowledge Business Services company, established in 1994 and headquartered in Indianapolis, IN, is a certified woman-owned (WBE) professional services organization with over 1500 employees located in offices throughout North America. Founded by Julie Bielawski, CEO of Guidesoft, Inc., dba Knowledge Services is an industry leader in Managed Service Programs (MSP), Vendor Management System (VMS), Employer of Record / Payroll Services, Workforce Management, Survey Management, and MSP for Vocational Rehabilitation Services. We provide outstanding services to major organizations in various industries, including IT, Healthcare, Federal, State, and local Governments, Public Utilities, Telecom, and more.

As such, Knowledge Services is committed to providing opportunities for growth - in our company, in each Team Member and in our relationships. We believe titles do not define a person but provide a framework to each person’s endless potential. Our focus on improving our team, product and processes drive us every day. We are guided by our four Pillars that set the foundation of who we are and how we conduct business: Knowledge, Integrity, Innovation, and Service.

Knowledge Services is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Veterans, military families, and people with disabilities are encouraged to apply.

Applicants with disabilities may contact Human Resources via telephone, e-mail, and other means to request and arrange for accommodations. Please contact the Human Resources Team at [email protected] or 317-806-0014.