RAMPxchange Security Advisor

Overview

RAMPxchange is seeking a knowledgeable and client-focused Security Advisor to support organizations navigating cybersecurity risk, compliance, and marketplace procurement. This exempt, professional role serves as a trusted advisor to clients, vendors, and internal stakeholders by evaluating information system security risks, communicating mitigation strategies, and contributing to the ongoing development of the RAMPxchange platform and marketplace ecosystem. 

 

The Security Advisor reports to the Senior Security Advisor and will exercise independent judgment, apply subject-matter expertise, and play a key role in client onboarding, vendor vetting, and continuous improvement of security and risk management practices. 

 

RAMPxchange is an online cybersecurity and risk management marketplace designed to simplify procurement for organizations looking to improve their security posture. With personalized guidance from expert advisors, members can partner with verified providers to achieve their cybersecurity goals and meet compliance requirements with confidence. To learn more about RAMPXchange please visit our website. RAMPxchange: Cybersecurity Marketplace 

Responsibilities

• Analyze information system security risks, gaps, and vulnerabilities, and provide practical, business-aligned remediation recommendations tailored to client needs. 
• Communicate complex technical risks, control requirements, and mitigation strategies clearly to both technical and non-technical stakeholders. 
• Conduct client and prospective client demo calls to assess use cases and recommend appropriate platform engagement. 
• Support client onboarding by evaluating and vetting vendors using RAMPxchange’s third-party risk assessment tools. 
• Facilitate collaboration between cybersecurity vendors and organizations procuring security and risk management products and services. 
• Contribute to the development and refinement of marketplace policies, security assessment of questionnaires, and internal operational processes. 
• Stay current on emerging cybersecurity threats, technologies, regulatory frameworks, and procurement trends to inform platform guidance and advisory services. 

Qualifications

• Minimum of 2 years of professional experience in one or more areas of information system security, including controls implementation, system configuration, security tools, monitoring, auditing, or reporting. 

• Industry-recognized cybersecurity certification such as Security+, Network+, CCNA, or equivalent. 

• Strong working knowledge of the Risk Management Framework (RMF) and NIST SP 800-53, including their alignment with related frameworks such as CMMC, FedRAMP, GovRAMP, or ISO/IEC 27001. 

• Demonstrated understanding of the security control assessment and audit process. 

• Working knowledge of cloud platforms and cloud security requirements. 

• Excellent written and verbal communication skills, with the ability to translate technical security concepts into clear, business-focused guidance. 

 

Preferred Qualifications 

• Experience conducting security assessments, audits, or risk scoring activities. 

• Background in cybersecurity or risk management consulting. 

• Familiarity with multiple compliance frameworks such as FedRAMP, GovRAMP, SOC 2, U.S. state data privacy laws or other non-governmental regulatory frameworks/laws. 

• Advanced cybersecurity certifications, including CISSP, CISM, CRISC, or equivalent. 

 

Key Competencies 

• Strong analytical, risk assessment, and critical thinking skills. 

• High attention to detail with the ability to manage multiple priorities effectively. 

• Ability to collaborate across cross-functional teams and external partners. 

• Client-centric mindset with a proactive, solution-oriented approach. 
• Professional judgment and discretion in evaluating security risks and advising stakeholders. 

 

RAMPxchange is a part of the Knowledge Services Family of Solutions. 

 

Knowledge Services strives to offer a modern, professional environment that provides Team Members an inviting, comfortable, and collaborative place to work to maximize success.   

  

At Knowledge Services, we prioritize creating an environment that supports our Team Members’ success and personal well-being with a robust benefits package, some of which include: 

• Medical coverage, including employer match program for Health Savings Accounts (HSAs)  

• Generous 401k retirement plan with employer match