Bid Extension: Virtual Chief Information Security Officer (vCISO) Services

The New York City Police Pension Fund is seeking a qualified firm to provide Virtual Chief Information Security Officer (vCISO) services. The contractor will act as the Fund’s strategic cybersecurity leader, delivering governance, risk‑management, policy development, incident‑response advisory, Managed Detection & Response (MDR) oversight, and regular penetration‑testing and vulnerability‑assessment activities. The engagement is a three‑year fixed‑price contract with two optional two‑year renewals, requiring on‑shore staff, 24/7 on‑call support for critical incidents, quarterly on‑site visits, and delivery of a cybersecurity KPI dashboard and annual Board presentations. • Core vCISO governance, roadmap, and executive advisory services • Annual risk assessments, compliance support, and MDR performance oversight • Quarterly penetration‑testing (web, internal, external) and post‑remediation retests, plus quarterly security‑awareness/phishing campaigns • Fixed‑price annual pricing with ≤ 3 % escalation; optional tabletop exercises and additional training available via separate work orders