ITES-11073 - USA (Garden, New York) - Managed Governance, Risk, Compliance and Cybersecurity Program Management Services - Deadline October 27,2026

(1) Vendor needs to provide managed governance, risk, compliance and cybersecurity program management services to the government authority located in Garden, NY.– Establish and maintain a mature cybersecurity governance program.– Develop and maintain an accurate enterprise technology and information asset inventory.– Establish accountability and ownership for cybersecurity risks and remediation activities.– Enhance Board–level and executive visibility into cybersecurity risks and program progress.– Governance, Risk, and Compliance (GRC) Services– Consultant shall provide active cybersecurity program management services and shall not be limited to advisory recommendations.– Services shall include:• Maintaining a comprehensive cybersecurity program plan.• Developing and maintaining project plans related to cybersecurity initiatives.• Coordinating stakeholders, business owners, technical teams, and project resources.• Conducting status meetings and action–item tracking.• Monitoring progress toward remediation goals.• Assigning and maintaining documented ownership for cybersecurity risks, systems, applications, services, vendors, and remediation activities in coordination with College’s leadership– Enterprise Asset and Application Inventory Management– Third–Party and Vendor Risk Management(2) All questions must be submitted no later than October 14, 2026.