PCI DSS Qualified Security Assessor Services

The City of New York’s Department of Finance is seeking a Qualified Security Assessor (QSA) firm to perform PCI DSS Level 1 certification services for its Treasury Division and the Office of Technology and Innovation. The work includes strategic scoping, evidence collection via a secure portal, independent assessment of six payment channels, and issuance of ROC/AOC reports, with an annual on‑call support commitment. The contract is a five‑year sealed‑bid with an optional renewal period, and the anticipated contract value is about $611,000 over the base term. • Provide full‑cycle PCI DSS QSA services (scoping, evidence review, reporting) for DOF and OTI. • Assess six distinct payment channels separately and deliver individual ROC/SAQ documentation. • Maintain a secure PCI certification portal, support on‑call QSA assistance (~1 hour/week), and comply with NYC‑specific security and reporting requirements. • Submit a single all‑inclusive price (total $≈ $611k for the five‑year term) via PASSPort by July 1 2026. • Contract length: 5 years (12/14/2026 – 12/13/2031) with renewal options possible.