Information Security Advisor II - RAMPQuest

Knowledge Services•Indianapolis, IN

About The Position

The Information Security Advisor II provides cybersecurity advisory services by evaluating client environments against established regulatory and compliance frameworks, conducting risk and gap assessments, and developing tailored remediation strategies. The role leads defined components of client engagements, including risk assessments, gap analyses, and compliance documentation, and translates technical requirements into practical recommendations that support remediation, audit readiness, governance, and long-term security maturity. This mid-level role requires growing independence, sound judgment, and increasing ownership of client outcomes. The Advisor participates in client meetings, workshops, and presentations; supports audit readiness; and contributes to improving advisory methods and client-facing materials. The role also involves collaborating and sharing knowledge across teams to support consistent, high-quality engagement delivery.

Requirements

4–7 years of experience in cybersecurity advisory roles.
Experience with NIST SP 800-53, ISO 27001, or SOC 2.
Strong interpersonal skills for client-facing engagements.
Growing expertise in managing client relationships and guiding discussions, while contributing to team cohesion and knowledge sharing.

Nice To Haves

Preferred certifications: Security+, CISA, CGRC, CRISC, CMMC Certified Cybersecurity Practitioner (CCP), or SCF Practitioner.

Responsibilities

Lead defined components of cybersecurity advisory engagements, including planning, execution, and documentation deliverables.
Conduct independent gap analyses and risk assessments against established security and compliance frameworks.
Develop and maintain client compliance documentation, including system security plans (SSPs), disaster recovery plans (DRPs), policies, procedures, and audit response materials.
Evaluate client environments against frameworks such as NIST, ISO, and SOC 2, identifying risks, control gaps, and improvement opportunities.
Provide actionable remediation recommendations tailored to client maturity, risk tolerance, and business needs.
Participate in client-facing advisory calls, workshops, and presentations.
Communicate technical and regulatory concepts effectively to non-technical client stakeholders.
Support audit readiness by preparing evidence, responding to auditor inquiries, and validating control implementation.
Ensure client deliverables meet internal quality standards, contractual requirements, and applicable compliance frameworks.
Collaborate with cross-functional team members to share insights, align engagement strategy, and strengthen advisory outcomes.
Identify process improvements, risks, or efficiencies within engagements and recommend solutions.
Contribute to the refinement of advisory methodologies, templates, and client-facing tools.
Maintain current knowledge of cybersecurity standards, regulatory trends, and relevant best practices.

Benefits

Medical coverage, including an employer match program for Health Savings Accounts (HSAs).
401(k) retirement plan with employer match.
Dependent Care Flexible Spending Account (DCFSA).
Employee Assistance Program (EAP) with unlimited usage and visits, and a wellness program.
Dental and vision insurance.
Company-sponsored life insurance, with options for additional coverage.
Short- and long-term disability benefits.
Pet insurance.
Maternity, paternity, and military benefits.
Baby on Board program.
Paid time off package.
Company Anniversary Bonus program.
Professional development opportunities, including Young Professional Series, Manager Focus series, cybersecurity panels, and briefs.
Headquarters office amenities, including a fitness center, rec room, coffee bars, bike room, café, auditorium, and private Mother’s room.