Information Systems Security Officer (ISSO) Senior Consultant

Overview

Knowledge Services, a leading multidisciplinary organization in the software, professional services, and cyber security industry, is seeking a seasoned client focused Senior Consultant as an ISSO (Information System Security Officer) for our GRC Advisory and Consulting Services Team.. This role represents a unique opportunity to become a key member of an exciting and growing organization driven by a commitment to excellence, innovation, and a passion for “Serving Those Who Serve Others.”

 

We are located in Indianapolis and looking to fill the position to be onsite, with local applicants given preference. For the right candidate, we will consider remote work, with the expectation that travel to the Indianapolis office would occur one week out of the quarter.  

You will have the opportunity to directly influence the adoption of security for State and Local Government by serving as the expert on client engagements with cloud service providers and will have the ability to form relationships and educate clients on information security. 

If you are passionate about the nation's information security, and are seeking continuous growth, let's discuss this career opportunity! 

Knowledge Services works as the StateRAMP's PMO with the mission to promote cybersecurity best practices through education, advocacy, and policy development to support its members and improve the cyber posture of state and local governments and the citizens they serve. This is an opportunity to apply your cybersecurity expertise to advise private-sector clients on the StateRAMP process and nuances of compliance frameworks, state requirements, and how to successfully achieve the StateRAMP Certification.  

We are seeking an experienced Information Systems Security Officer (ISSO) to work as a Senior Consultant in our compliance efforts. The ideal candidate will have a strong background in leading FedRAMP and/or StateRAMP compliance programs.  

As a Security Compliance ISSO, the Senior Consultant will lead efforts for our clients to achieve the necessary compliance requirements for FedRAMP and StateRAMP statuses.  

Responsibilities

• Consult with our clients throughout the engagement process, preparing our clients for various Authorization status.  
• Develop a client specific authorization package including comprehensive documentation. The items include the System Security Plans, policies, procedures, and controls, to support FedRAMP and StateRAMP compliance initiatives. Develop and implement security solutions aligned with industry best practices and frameworks (ISO, NIST, PCI, etc.) to meet client objectives and maintain compliance with legal and regulatory standards.​ 
• Instruct and advise clients on continuous monitoring activities.​ 
• Lead and monitor consulting engagements, ensuring client needs and deliverables are properly scoped and delivered.​ 
• Provide recommendations to address identified gaps and work closely with clients to create corrective action and risk remediation plans.​ 
• Offer design recommendations to improve security posture and efficiency. ​ 
• Participation in and creation of presentations for webinars, marketing, and conferences. 

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.  

• Relevant certifications such as CISSP, CISM, CRISC, or CISA is highly desirable. 

• Working knowledge of cloud applications, security tools and SaaS environments.  

 

Preferred Qualifications  

• 8+ years of experience in Information Security consulting or advising required.​ 

• In-depth knowledge of FedRAMP and/or StateRAMP authorization processes . 

• Excellent analytical and problem- solving skills, including the ability to identify and mitigate risks effectively.  

• Proven understanding of basic technologies and the ability to assess controls against standardized frameworks including NIST SP 800-53/800-171, ISO 27000 series, HIPAA, PCI, SOC 2, MARS-E 2.0, CSF etc. 

• Technical experience in multiple cloud environments, including Azure, Google, and AWS  

• Strong interpersonal and team working skills to effectively collaborate with teams across the organization and groups with various technical knowledge 

• Demonstrated ability in writing professional level documentation covering topics related to IT Security (system security plans, disaster recovery plans, audit finding responses, etc.) 

• Experience in differing levels of the technology hosting stack, IaaS, PaaS, and SaaS ​ 
• Strong ability to work collaboratively as well as independently 

 

 

Knowledge Services stri