Information Security Advisor II

At RAMPQuest, we partner with organizations to navigate complex cybersecurity and compliance frameworks, offering expert‑led consulting, advisory services, risk assessments, and program management. With deep experience across both public sector and commercial clients, we help organizations operationalize standards such as NIST SP 800‑53 and CMMC, including services as the Program Management Office (PMO) for GovRAMP. Our values—trust, community, and integrity—guide our engagement with clients, providers, and partners.

The Information Security Advisor II serves as a trusted contributor on cybersecurity advisory engagements, providing independent analysis, practical guidance, and clear communication with clients. This role leads defined components of client engagements, including risk assessments, gap analyses, and the development of compliance documentation, while ensuring deliverables align with recognized security and compliance frameworks. The Advisor II is expected to translate complex technical requirements into actionable recommendations that support client remediation efforts and long‑term security maturity.

This position requires a strong balance of technical acumen, analytical thinking, and professional presence. The Information Security Advisor II participates confidently in client meetings and presentations, supports audit readiness activities, and contributes to the continuous improvement of advisory methodologies and client‑facing materials. The role also emphasizes collaboration—sharing insights across teams, strengthening engagement quality, and supporting consistent, high-quality delivery. As a mid‑level advisor, this role reflects growing independence, sound judgment, and increasing ownership of client outcomes while continuing to develop deeper subject‑matter expertise and relationship management skills.

The primary duty of the Information Security Advisor II is to provide independent cybersecurity advisory services by evaluating client environments against established regulatory and compliance frameworks, conducting risk and gap assessments, and exercising discretion to develop tailored remediation strategies that strengthen governance, audit readiness, and overall enterprise risk management.

Responsibilities

• Lead defined components of cybersecurity advisory engagements, including planning, execution, and documentation deliverables
• Conduct independent gap analyses and risk assessments against established security and compliance frameworks
• Develop and maintain client compliance documentation, including system security plans (SSPs), disaster recovery plans (DRPs), policies, procedures, and audit response materials
• Evaluate client environments against frameworks such as NIST, ISO, and SOC 2, identifying risks, control gaps, and improvement opportunities
• Provide clear, actionable remediation recommendations tailored to client maturity, risk tolerance, and business needs
• Participate in and contribute to client‑facing advisory calls, workshops, and presentations with professionalism and confidence
• Communicate technical and regulatory concepts effectively to non‑technical client stakeholders
• Support audit readiness efforts by preparing evidence, responding to auditor inquiries, and validating control implementation
• Ensure all client deliverables meet internal quality standards, contractual requirements, and applicable compliance frameworks
• Collaborate with cross‑functional team members to share insights, align on engagement strategy, and strengthen advisory outcomes
• Proactively identify process improvements, risks, or efficiencies within engagements and recommend solutions
• Contribute to the refinement of advisory methodologies, templates, and client‑facing tools
• Maintain current…