When is the submission deadline?

Submissions are due October 27, 2026. Questions must be submitted by October 14, 2026.

It was issued by Nassau Community College. The work is located in Garden City, New York, United States.

Who is a good fit for this opportunity?

Cybersecurity consulting and managed program management firm. Proven experience with governance, risk, and compliance programs. Expertise in enterprise technology and application inventory management. Experience coordinating executive stakeholders, technical teams, and remediation initiatives. Capability in third-party and vendor risk management. Strong background supporting government, higher education, or similarly complex organizations.

Managed Governance, Risk, Compliance and Cybersecurity Program Management Services (Due October 27, 2026)

Overview

Cybersecurity & Data Privacy

Garden City, New York, United StatesPosted: September 30, 2026Deadline: October 27, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A government authority in Garden, New York, is seeking managed services to strengthen cybersecurity governance, risk and compliance management, asset inventories, remediation oversight, and executive reporting. The consultant will actively manage cybersecurity programs, projects, stakeholders, and vendor risks.

KEY REQUIREMENTS

Must have been providing cybersecurity consulting, vCISO, GRC, or cybersecurity program management services for a minimum of five years.
Must have provided cybersecurity services to at least five institutions of similar size and complexity within the last five years.
Must have provided cybersecurity services to at least three public institutions of higher education within the last five years.
Must have experience providing cybersecurity governance, risk management, compliance, or vCISO services to at least three higher education institutions.
Must identify a proposed Lead vCISO with a minimum of ten years of cybersecurity experience and at least five years in a cybersecurity leadership role.
Must implement a written sexual harassment prevention policy and provide annual training to all employees.
Must be able to provide a completed Higher Education Community Vendor Assessment Toolkit (HECVAT).
Must provide an Accessibility Conformance Report (ACR) with a complete Voluntary Product Assessment Tool (VPAT).

CONTRACT DURATION

12 months

TIMELINE

Technical questions due by October 14th, 2026.

Proposal due date is October 27th, 2026.

QUESTION DEADLINE

October 14, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Nassau Community College

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The government authority in Garden, New York, seeks a qualified consultant to provide managed governance, risk, compliance, and cybersecurity program management services. The engagement is intended to establish and maintain a mature cybersecurity governance program, develop an accurate enterprise technology and information asset inventory, clarify accountability for cybersecurity risks and remediation activities, and improve board-level and executive visibility into cybersecurity risks and program progress.

The selected consultant will provide active cybersecurity program management rather than limited advisory recommendations. Responsibilities include maintaining a comprehensive cybersecurity program plan, developing and managing project plans for cybersecurity initiatives, coordinating stakeholders and project resources, conducting status meetings, tracking action items, monitoring remediation progress, and documenting ownership for cybersecurity risks, systems, applications, services, vendors, and remediation activities in coordination with organizational leadership. Services will also address enterprise asset and application inventory management and third-party and vendor risk management.

Questions must be submitted by October 14, 2026. Proposals are due October 27, 2026.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due October 27, 2026. Questions must be submitted by October 14, 2026.
Who issued this RFP?: It was issued by Nassau Community College. The work is located in Garden City, New York, United States.
Who is a good fit for this opportunity?: Cybersecurity consulting and managed program management firm
Proven experience with governance, risk, and compliance programs
Expertise in enterprise technology and application inventory management
Experience coordinating executive stakeholders, technical teams, and remediation initiatives
Capability in third-party and vendor risk management
Strong background supporting government, higher education, or similarly complex organizations

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works