ITES-10755 - USA (San Mateo, California) - vCISO Support Services - Deadline August 26,2026

(1) Vendor needs to provide vCISO support services to the government authority located in San Mateo, CA. – Provide vCISO professional services supporting the agency. – Establish and maintain a comprehensive cybersecurity governance program aligned with guidelines, as these may be updated from time to time, define organizational risk tolerances, security metrics, and executive leadership reporting structures.– Conduct ongoing risk assessments to map agency’s digital assets, identify vulnerabilities, and prioritize remediation based on organizational impact.– Update and enforce cybersecurity policies and standards tailored to local government operations, ensuring compliance with relevant state and federal mandates– Oversee the implementation of technical and administrative safeguards to protect critical infrastructure, public safety networks, and citizen PII (Personally Identifiable Information).– Advise IT leadership on the deployment and management of monitoring tools to ensure rapid, real time detection of cybersecurity events and anomalies. – Budgetary planning assumptions and cost modeling for cybersecurity tooling, staffing, and operational expenses.– Develop, maintain, and regularly test an enterprise–wide Incident Response Plan (IRP) and Business Continuity Plan (BCP), lead response coordination in the event of a security breach.– Assess and monitor the cybersecurity posture of external vendors, contractors, and cloud service providers interacting with government networks. – Security–specific requirements, technical evaluation criteria, and vendor risk assessments for IT/cybersecurity procurements. – Evaluate the effectiveness of the existing employee cybersecurity awareness training and phishing simulation programs, updating content and strategy as needed to address evolving threats.(2) All the questions must be submitted no later than August 12, 2026. (3) The contract period will be for five years.