Bid Extension: Virtual Chief Information Security Officer (vCISO) Services

The New York City Police Pension Fund is seeking a qualified vendor to provide comprehensive virtual Chief Information Security Officer (vCISO) services. The contractor will act as the Fund’s senior cybersecurity advisor, delivering governance, risk management, incident response, metrics, and oversight of Managed Detection & Response (MDR) services, as well as conducting periodic penetration testing and training. The engagement is a three‑year fixed‑price contract with optional two‑year renewals, requiring a staffed team of a lead vCISO, senior advisors, and analysts, all holding relevant certifications. • Deliver a cyber‑security governance framework and annual roadmap aligned with NYC policies and NIST‑CSF. • Provide continuous risk‑management, third‑party oversight, incident‑response advisory, and MDR performance monitoring. • Produce regular KPI dashboards, executive reports, and quarterly penetration‑testing reports, plus training/awareness programs. • Maintain a staffed team (Lead vCISO, ≥2 senior advisors, ≥2 analysts) and comply with all NYC insurance, debarment, and M/WBE preferences.