Virtual and Fractional Chief Information Security Officer Services

The Vendor is required to provide virtual/fractional chief information security officer (vCISO) services.
- This engagement will provide cybersecurity leadership, strategic guidance, and expert advisory support to enhance the City's cybersecurity maturity and resilience.
- The Virtual/Fractional CISO service will:
•    Conduct cybersecurity maturity and risk assessments.
•    Develop and maintain a cybersecurity roadmap aligned with institute CSF or equivalent frameworks.
•    Provide executive-level guidance and board reporting.
•    Oversee or support improvements to patch, vulnerability, and endpoint security.
•    Evaluate and recommend cost-effective tools and services.
•    Guide grant funding strategy and compliance efforts.
•    Help develop and enforce security policies, standards, and procedures.
•    Advise on cybersecurity risks in IT/business projects.
•    Assist in succession planning and the potential transition to a full-time, internal CISO by defining role requirements, evaluating candidates, and ensuring continuity of the cybersecurity program.
- The vCISO service will also ensure that incident response activities align with regulatory expectations and industry best practices, including logging, forensics, and post-incident review.
- The vCISO service will support or lead the execution of tabletop exercises and simulation drills to test and improve organizational readiness for cybersecurity incidents.
- Provide expert cybersecurity leadership and strategic planning.
- Identify cost-effective tools and approaches suitable for constrained public-sector budgets.
- Help define and implement cybersecurity policies, standards, and procedures.
- Assist in meeting compliance obligations and insurance requirements.
- Identify and/or support the acquisition of State and Federal grant funding.
- Serve as an advisor to IT and business initiatives with security relevance.

- Contract Period/Term: 1 year
- Questions/Inquires Deadline: September 24, 2025