Information Security Advisor III (CMMC)

Information Security Advisor III (CMMC)

Posted Date

2 days ago

(4/2/2026 11:57 AM)

Job ID 2026-30433

Job Location

US-IN-Indianapolis Type Regular Full-Time

Overview

At RAMPQuest, we partner with organizations to navigate complex cybersecurity and compliance frameworks, offering expertled consulting, advisory services, risk assessments, and program management. With deep experience across both public sector and commercial clients, we help organizations operationalize standards such as NIST SP 80053 and CMMC, including services as the Program Management Office (PMO) for GovRAMP. Our valuestrust, community, and integrityguide our engagement with clients, providers, and partners.

The Information Security Advisor III (CMMC) is a seniorlevel advisory role responsible for leading complex CMMC readiness and compliance preparation engagements and serving as a subject matter expert for organizations preparing for future thirdparty CMMC assessments. This position applies assessorinformed expertise to evaluate CMMC implementation maturity, guide remediation efforts, and improve the quality and defensibility of client security programs.

While this role requires CMMC Certified Assessor (CCA) credentials, it does not perform certification assessments, validate assessment packages, or issue compliance determinations. Instead, the role operates strictly in an advisory and readiness capacity, helping organizations understand assessment expectations and prepare effectively for evaluation by an authorized C3PAO. The role requires advanced technical knowledge, strong analytical capability, and the ability to clearly communicate complex regulatory and technical concepts to technical and nontechnical stakeholders.

The Information Security Advisor III leads CMMCfocused client engagements, reviews and finalizes readiness documentation, and develops strategic remediation recommendations aligned with CMMC requirements and supporting standards. This role also provides mentorship to junior advisors, contributes to the continuous improvement of CMMC advisory methodologies, and collaborates crossfunctionally to ensure consistent, highquality service delivery. The position operates with a high degree of independence and is expected to exercise sound judgment, discretion, and influence in both client and internal interactions.

We are located in Indianapolis and are looking to fill the on-site position, with local applicants given preference. For the right candidate, we will consider remote work.

Responsibilities

Lead and oversee complex CMMC advisory and readiness engagements, serving as the primary subject matter expert and escalation point for CMMCrelated client and internal inquiries.

Conduct advanced CMMC readiness evaluations, gap analyses, and compliance assessments using assessorinformed methodology to evaluate implementation maturity and preparedness for CMMC Level 1 and Level 2 requirements, without performing formal certification assessments.

Develop, review, and approve CMMCrelated documentation, including policies, procedures, implementation narratives, evidence mappings, remediation plans, and readiness artifacts, ensuring accuracy, completeness, and alignment with CMMC expectations and supporting standards such as NIST SP 800171.

Mentor, guide, and provide technical oversight to junior advisors supporting CMMC engagements, contributing to knowledge transfer, skill development, and overall team effectiveness.

Lead and facilitate client advisory meetings, executive briefings, interviews, and readiness workshops, clearly communicating CMMC requirements, assessment expectations, and technical concepts to both technical and nontechnical audiences.

Collaborate crossfunctionally with consulting, advisory, PMO, and program leadership teams to ensure alignment on CMMC engagement objectives, deliverables, and service quality.

Identify opportunities for operational, methodological, or engagementlevel improvements and contribute to the refinement of CMMC advisory processes, standards, templates, and clientfacing materials.

Ensure all advisory deliverables meet established quality standards, contractual requirements, organizational policies, and ethical boundaries related to nonC3PAO advisory services.

Maintain current knowledge of evolving CMMC requirements, assessment guidance, DoD policy updates, and industry best practices to inform advisory guidance and recommendations.

Qualifications

Master's degree in Cybersecurity, Information Technology, or a related field preferred.

7+ years of experience in cybersecurity advisory, compliance, or risk management roles, with demonstrated experience supporting CMMCrelated readiness or assessoradjacent activities.

CMMC Certified Assessor (CCA) credential required. This role exclusively supports CMMC advisory and readiness engagements.

Expertlevel ability to explain complex technical and regulatory concepts in writing and verbally to diverse audiences.

Demonstrated experience leading client conversations, influencing decisionmaking, and fostering trust through clear communication and strategic insight.

Experience applying formal assessment methodology and evidence evaluation rigor in a noncertification, advisory context.

Experience with CMMC and supporting frameworks, including NIST SP 800171, as well as related standards such as ISO, FedRAMP, GovRAMP, HIPAA, PCI, and SCF.

RAMPQuest strives to offer a modern, professional environment that provides Team Members an inviting, comfortable, and collaborative place to work to maximize success.

At RAMPQuest, a Knowledge Business Services company, we prioritize creating an environment that supports our Team Members' success and personal well-being with a robust benefits package, some of which include:

Medical coverage, including employer match program for Health Savings Accounts (HSAs)

Generous 401k retirement plan with employer match

Dependent Care Flexible Spending Account (DCFSA)

Employee Assistance Program (EAP) with unlimited usage and visits and wellness program

Dental and Vision insurance

Company-sponsored life insurance, with options for additional coverage

Short- and Long-Term Disability (STD and LTD) benefits

Pet insurance

Maternity, Paternity, and Military benefits

Baby on Board program

Paid Time Off package

Company Anniversary Bonus program

Professional Development opportunities, including Young Professional Series, Manager Focus series, Cyber Security panels and briefs, and more

A+ rated HQ office full of amenities including fitness center, rec room, coffee bars, bike room, cafe, auditorium, private Mother's room, and more

RAMPQuest, a Knowledge Business Services company, established in 1994 and headquartered in Indianapolis, IN, is a certified woman-owned (WBE) professional services organization with over 1500 employees located in offices throughout North America. Founded by Julie Bielawski, CEO of Guidesoft, Inc., dba Knowledge Services is an industry leader in Managed Service Programs (MSP), Vendor Management System (VMS), Employer of Record / Payroll Services, Workforce Management, Survey Management, and MSP for Vocational Rehabilitation Services. We provide outstanding services to major organizations in various industries, including IT, Healthcare, Federal, State, and local Governments, Public Utilities, Telecom, and more.

As such, Knowledge Services is committed to providing opportunities for growth - in our company, in each Team Member and in our relationships. We believe titles do not define a person but provide a framework to each person's endless potential. Our focus on improving our team, product and processes drive us every day. We are guided by our four Pillars that set the foundation of who we are and how we conduct business: Knowledge, Integrity, Innovation, and Service.

Knowledge Services is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Veterans, military families, and people with disabilities are encouraged to apply.

Applicants with disabilities may contact Human Resources via telephone, e-mail, and other means to request and arrange for accommodations. Please contact the Human Resources Team at ... or ....

INDCORP

ISDKO