Information Security Advisor III (CMMC)

Knowledge Services•Indianapolis, IN

8d•Onsite

About The Position

At RAMPQuest, we partner with organizations to navigate complex cybersecurity and compliance frameworks, offering expert‑led consulting, advisory services, risk assessments, and program management. With deep experience across both public sector and commercial clients, we help organizations operationalize standards such as NIST SP 800‑53 and CMMC, including services as the Program Management Office (PMO) for GovRAMP. Our values—trust, community, and integrity—guide our engagement with clients, providers, and partners. The Information Security Advisor III (CMMC) is a senior‑level advisory role responsible for leading complex CMMC readiness and compliance preparation engagements and serving as a subject matter expert for organizations preparing for future third‑party CMMC assessments. This position applies assessor‑informed expertise to evaluate CMMC implementation maturity, guide remediation efforts, and improve the quality and defensibility of client security programs. While this role requires CMMC Certified Assessor (CCA) credentials, it does not perform certification assessments, validate assessment packages, or issue compliance determinations. Instead, the role operates strictly in an advisory and readiness capacity, helping organizations understand assessment expectations and prepare effectively for evaluation by an authorized C3PAO. The role requires advanced technical knowledge, strong analytical capability, and the ability to clearly communicate complex regulatory and technical concepts to technical and non‑technical stakeholders. The Information Security Advisor III leads CMMC‑focused client engagements, reviews and finalizes readiness documentation, and develops strategic remediation recommendations aligned with CMMC requirements and supporting standards. This role also provides mentorship to junior advisors, contributes to the continuous improvement of CMMC advisory methodologies, and collaborates cross‑functionally to ensure consistent, high‑quality service delivery. The position operates with a high degree of independence and is expected to exercise sound judgment, discretion, and influence in both client and internal interactions. We are located in Indianapolis and are looking to fill the on-site position, with local applicants given preference. For the right candidate, we will consider remote work.

Requirements

Master’s degree in Cybersecurity, Information Technology, or a related field preferred.
7+ years of experience in cybersecurity advisory, compliance, or risk management roles, with demonstrated experience supporting CMMC‑related readiness or assessor‑adjacent activities.
CMMC Certified Assessor (CCA) credential required. This role exclusively supports CMMC advisory and readiness engagements.
Expert‑level ability to explain complex technical and regulatory concepts in writing and verbally to diverse audiences.
Demonstrated experience leading client conversations, influencing decision‑making, and fostering trust through clear communication and strategic insight.
Experience applying formal assessment methodology and evidence evaluation rigor in a non‑certification, advisory context.
Experience with CMMC and supporting frameworks, including NIST SP 800‑171, as well as related standards such as ISO, FedRAMP, GovRAMP, HIPAA, PCI, and SCF.

Responsibilities

Lead and oversee complex CMMC advisory and readiness engagements, serving as the primary subject matter expert and escalation point for CMMC‑related client and internal inquiries.
Conduct advanced CMMC readiness evaluations, gap analyses, and compliance assessments using assessor‑informed methodology to evaluate implementation maturity and preparedness for CMMC Level 1 and Level 2 requirements, without performing formal certification assessments.
Develop, review, and approve CMMC‑related documentation, including policies, procedures, implementation narratives, evidence mappings, remediation plans, and readiness artifacts, ensuring accuracy, completeness, and alignment with CMMC expectations and supporting standards such as NIST SP 800‑171.
Mentor, guide, and provide technical oversight to junior advisors supporting CMMC engagements, contributing to knowledge transfer, skill development, and overall team effectiveness.
Lead and facilitate client advisory meetings, executive briefings, interviews, and readiness workshops, clearly communicating CMMC requirements, assessment expectations, and technical concepts to both technical and non‑technical audiences.
Collaborate cross‑functionally with consulting, advisory, PMO, and program leadership teams to ensure alignment on CMMC engagement objectives, deliverables, and service quality.
Identify opportunities for operational, methodological, or engagement‑level improvements and contribute to the refinement of CMMC advisory processes, standards, templates, and client‑facing materials.
Ensure all advisory deliverables meet established quality standards, contractual requirements, organizational policies, and ethical boundaries related to non‑C3PAO advisory services.
Maintain current knowledge of evolving CMMC requirements, assessment guidance, DoD policy updates, and industry best practices to inform advisory guidance and recommendations.

Benefits

Medical coverage, including employer match program for Health Savings Accounts (HSAs)
Generous 401k retirement plan with employer match
Dependent Care Flexible Spending Account (DCFSA)
Employee Assistance Program (EAP) with unlimited usage and visits and wellness program
Dental and Vision insurance
Company-sponsored life insurance, with options for additional coverage
Short- and Long-Term Disability (STD and LTD) benefits
Pet insurance
Maternity, Paternity, and Military benefits
Baby on Board program
Paid Time Off package
Company Anniversary Bonus program
Professional Development opportunities, including Young Professional Series, Manager Focus series, Cyber Security panels and briefs, and more
A+ rated HQ office full of amenities including fitness center, rec room, coffee bars, bike room, café, auditorium, private Mother’s room, and more