SOQ-26-2530 - Governance, Risk, and Compliance (GRC) System Implementation

The City of Aurora, Colorado is seeking a qualified provider to deliver a cloud‑based Governance, Risk, and Compliance (GRC) platform to replace its current OneTrust solution. The contract will cover licensing, configuration, integration with existing information security tools, migration of data, training, and ongoing support. The solution must support future technology risk management, governance, compliance, and vendor risk management needs for the city’s Information Security Office. This is a Statement of Qualifications (SOQ) solicitation, meaning the City will evaluate vendors’ experience, technical approach, and capability before award. • Provide a SaaS GRC solution that meets current and future risk‑management requirements. • Migrate existing OneTrust data and integrate with the Information Security Office’s workflows. • Deliver implementation services, user training, and post‑implementation support. • Demonstrate relevant experience with municipal or governmental GRC deployments. • Submit qualifications electronically by the specified deadline.