Information Security Advisor II

RAMPQuest; Indianapolis (IN); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical coverage with HSA

401k with employer match

Dependent Care FSA

Employee Assistance Program (EAP)

Dental and Vision insurance

Company-sponsored life insurance

Short- and Long-Term Disability

Maternity, Paternity, and Military"

Paid Time Off

Anniversary Bonus

Professional Development opportunities

HQ office amenities

Job summary

RAMPQuest is seeking an Information Security Advisor II to lead segments of cybersecurity advisory engagements, perform risk and gap analyses, and develop comprehensive compliance documentation. The role emphasizes translating complex requirements into practical remediation plans, strengthening governance and audit readiness.

The ideal candidate will balance technical acumen with analytical thinking and strong communication to support client outcomes and ongoing security maturity across public

Qualifications

• 4-7 years of experience in cybersecurity advisory roles.
• Experience with NIST SP 800-53, ISO 27001, or SOC 2.
• Ability to translate technical requirements into actionable guidance for clients.
• Experience managing client relationships and guiding discussions.

Responsibilities

• Lead defined components of cybersecurity advisory engagements, including planning, execution, and documentation deliverables.
• Conduct independent gap analyses and risk assessments against established security and compliance frameworks.
• Develop and maintain client compliance documentation, including SSPs and DRPs, policies and audit response materials.
• Evaluate client environments against NIST, ISO, and SOC 2, identifying risks and improvement opportunities.
• Provide clear, actionable remediation recommendations tailored to client maturity and risk tolerance.
• Participate in client-facing advisory calls, workshops, and presentations with professionalism and confidence.
• Communicate regulatory concepts effectively to non-technical stakeholders.
• Support audit readiness by preparing evidence and validating control implementation.
• Ensure all deliverables meet internal quality standards and contractual requirements.

Skills

Risk assessment

Gap analysis

Regulatory frameworks

Client communication

Project management

Documentation

Education

Certifications: Security+; CISA; CGRC; CRISC; CCP; SCF

Job description

At RAMPQuest, we partner with organizations to navigate complex cybersecurity and compliance frameworks, offering expert‑led consulting, advisory services, risk assessments, and program management. With deep experience across both public sector and commercial clients, we help organizations operationalize standards such as NIST SP 800‑53 and CMMC, including services as the Program Management Office (PMO) for GovRAMP. Our values—trust, community, and integrity—guide our engagement with clients, providers, and partners.

The Information Security Advisor II serves as a trusted contributor on cybersecurity advisory engagements, providing independent analysis, practical guidance, and clear communication with clients. This role leads defined components of client engagements, including risk assessments, gap analyses, and the development of compliance documentation, while ensuring deliverables align with recognized security and compliance frameworks. The Advisor II is expected to translate complex technical requirements into actionable recommendations that support client remediation efforts and long‑term security maturity.

This position requires a strong balance of technical acumen, analytical thinking, and professional presence. The Information Security Advisor II participates confidently in client meetings and presentations, supports audit readiness activities, and contributes to the continuous improvement of advisory methodologies and client‑facing materials. The role also emphasizes collaboration—sharing insights across teams, strengthening engagement quality, and supporting consistent, high-quality delivery. As a mid‑level advisor, this role reflects growing independence, sound judgment, and increasing ownership of client outcomes while continuing to develop deeper subject‑matter expertise and relationship management skills.

The primary duty of the Information Security Advisor II is to provide independent cybersecurity advisory services by evaluating client environments against established regulatory and compliance frameworks, conducting risk and gap assessments, and exercising discretion to develop tailored remediation strategies that strengthen governance, audit readiness, and overall enterprise risk management.

Responsibilities

• Lead defined components of cybersecurity advisory engagements, including planning, execution, and documentation deliverables
• Conduct independent gap analyses and risk assessments against established security and compliance frameworks
• Develop and maintain client compliance documentation, including system security plans (SSPs), disaster recovery plans (DRPs), policies, procedures, and audit response materials
• Evaluate client environments against frameworks such as NIST, ISO, and SOC 2, identifying risks, control gaps, and improvement opportunities
• Provide clear, actionable remediation recommendations tailored to client maturity, risk tolerance, and business needs
• Participate in and contribute to client‑facing advisory calls, workshops, and presentations with professionalism and confidence
• Communicate technical and regulatory concepts effectively to non‑technical client stakeholders
• Support audit readiness efforts by preparing evidence, responding to auditor inquiries, and validating control implementation
• Ensure all client deliverables meet internal quality standards, contractual requirements, and applicable compliance frameworks
• Collaborate with cross‑functional team members to share insights, align on engagement strategy, and strengthen advisory outcomes
• Proactively identify process improvements, risks, or efficiencies within engagements and recommend solutions
• Contribute to the refinement of advisory methodologies, templates, and client‑facing tools
• Maintain current knowledge of cybersecurity standards, regulatory trends, and best practices relevant to advisory services

Qualifications

• 4-7 years of experience in cybersecurity advisory roles
• Certifications preferred: Security+, CISA, CGRC, CRISC, CMMC Certified Cybersecurity Practitioner (CCP), SCF Practitioner
• Experience with NIST SP 800-53, ISO 27001, or SOC 2
• Demonstrate growing expertise in managing client relationships and guiding discussions, while contributing to team cohesion and knowledge sharing

At RAMPQuest, a Knowledge Business Services company, we prioritize creating an environment that supports our Team Members’ success and personal well‑being with a robust benefits package, some of which include:

• Medical coverage, including employer match program for Health Savings Accounts (HSAs)
• Generous 401k retirement plan with employer match
• Dependent Care Flexible Spending Account (DCFSA)
• Employee Assistance Program (EAP) with unlimited usage and visits and wellness program
• Dental and Vision insurance
• Company-sponsored life insurance, with options for additional coverage
• Short- and Long-Term Disability (STD and LTD) benefits
• Maternity, Paternity, and Military benefits
• Baby on Board program
• Paid Time Off package
• Company Anniversary Bonus program
• Professional Development opportunities, including Young Professional Series, Manager Focus series, Cyber Security panels and briefs, and more
• A+ rated HQ office full of amenities including fitness center, rec room, coffee bars, bike room, café, auditorium, private Mother’s room, and more