Payment Card Industry Data Security Standard Security Assessor Services

The New York City Office of Technology and Innovation is seeking a qualified vendor to provide Payment Card Industry Data Security Standard security assessor services. The agency needs to fulfill the requirements of its mandated annual certification and ensure compliance across its operations. The selected vendor will perform the annual certification for the agency and its six payment channels, while also providing subject matter expertise and guidance to the internal team as they perform certifications for twenty-eight Level 4 city agencies. The scope of work requires the vendor to conduct all assessments, testing, validation, and documentation necessary to ensure compliance. Responsibilities include completing all mandated reports and certifications. The performance of this work will take place through a combination of onsite and offsite activities. Eligible bidders must be organizations based in the United States and must possess current Qualified Security Assessor credentials. Bidders must also demonstrate substantial experience performing assessments for large and complex organizations. The agency is currently looking for proposals to determine the budget, and bidders may submit their responses digitally via email or online.