Virtual Chief Information Security Officer (vCISO) Services

The Fund requires a vendor to provide virtual Chief Information Security Officer (vCISO) services to enhance and mature its cybersecurity program and align practices with the government authority in New York, NY. The requested scope includes strengthening cybersecurity governance, oversight, and risk management, as well as enhancing policies, controls, and strategic planning. The selected vendor must develop a structured, risk-based roadmap, improve threat and third-party risk mitigation, and strengthen incident preparedness, response coordination, and post-incident processes. Additionally, the vendor must conduct or coordinate periodic penetration testing and vulnerability assessments for applications, systems, and networks. Eligibility is restricted to onshore USA organizations only. The buyer is looking for proposals regarding the budget. Bidders must submit all questions no later than August 27, 2026.