PCI Compliance Consulting Service

The government authority in Minneapolis, Minnesota requires a qualified onshore vendor to provide Payment Card Industry compliance consulting services. The agency needs to identify and resolve security vulnerabilities across its operations to achieve full compliance. The selected consultant will perform a gap analysis and deliver a detailed compliance gap report for each merchant location. The scope of work requires the consultant to develop an action plan to remediate all identified gaps and assist the agency in creating a remediation roadmap. The consultant must also provide individual Attestations of Compliance for each of the four merchant entities. Additionally, the agency requires assistance and guidance with testing, scanning, documentation updates, and the creation of a communications plan. The consultant must proactively inform the agency of changing standards and card issuer recommendations. Only organizations based in the United States are eligible to bid on this opportunity. The agency expects the selected vendor to perform all work offsite. Bidders must submit any questions regarding this opportunity no later than July 10, 2026. The agency accepts digital proposal submissions via email or through their online portal. The agency has not disclosed a specific budget and is currently looking for proposals to determine pricing.