ITES-11318 - USA (California) - Virtual Chief Information Security Officer Services - Deadline December 7,2026

(1) Vendor needs to provide virtual chief information security officer services to the government authority located in California.• Virtual Chief Information Security Officer (VCISO) to provide strategic cybersecurity leadership, governance, risk management, and advisory services to the agency.• Establish and maintain a risk–based cybersecurity strategy, governance and roadmap aligned with industry framework and standards.• Internal IT and cybersecurity team with senior–level strategic cybersecurity leadership.• Provide strategic cybersecurity leadership and governance.• Provide support in the development of agency cybersecurity policy, cybersecurity risk management, and incident response programs.• Advise executive leadership and if requested, the board of directors, on cybersecurity risk.• lead cybersecurity enterprise risk assessments and maturity evaluations, maintain a cybersecurity risk register, and prioritize remediation.• Develop, review, maintain and enhance cybersecurity policies, standards, and procedures.• Develop and maintain documentation, control narratives, and evidence packages to support cyber insurance underwriting and renewal.• Review security posture of new vendors and third parties, SaaS platforms, and data–sharing arrangements and provide recommendations.(2) All questions must be submitted no later than November 18, 2026.