BILLING-3196 - USA (Denver, Colorado) - Payment Card Industry Compliance Services - Deadline October 2,2026

(1) Vendor needs to provide payment card industry compliance services to the government authority located in Denver, CO.– Provide the following PCI compliance services:• SERVICE GROUP 1: PCI Qualified Security Assessor (QSA)• SERVICE GROUP 2: PCI Penetration Testing• Conduct an annual on–site PCI–agency assessment covering security, confidentiality, integrity, and availability of cardholder data during an agreed–upon timeframe.• Prepare and complete all required PCI deliverables, including the Report on Compliance (ROC), Attestation of Compliance (AOC), Self–Assessment Questionnaires, and supporting evidence.• Identify and map risks, vulnerabilities, and gaps against the latest PCI–agency version and provide actionable remediation recommendations.• Provide quarterly advisory sessions to review policy, process, environmental changes, remediation status, system configuration, compliance risk, and program governance to strengthen ongoing PCI compliance.• Provide weekly updates during ROC assessment periods• Assist with development of a structured, auditable remediation tracker with ownership, timelines, and closure validation.(2) The contract period will be for one year.(3) All the questions must be submitted no later than September 14, 2026.