vCISO Support Services

A government authority in San Mateo, California is seeking a vendor to provide virtual Chief Information Security Officer (vCISO) support services. The selected firm will provide professional cybersecurity leadership and advisory services to support the agency’s security program over a five-year contract term.

The scope includes establishing and maintaining a comprehensive cybersecurity governance program, defining organizational risk tolerances, security metrics, and executive reporting structures. The vendor will conduct ongoing risk assessments of digital assets, identify vulnerabilities, prioritize remediation efforts, and update cybersecurity policies and standards to align with local government operations and applicable state and federal requirements.

The engagement also includes overseeing technical and administrative safeguards for critical infrastructure, public safety networks, and personally identifiable information; advising IT leadership on monitoring tools for real-time threat detection; supporting cybersecurity budget planning; and developing, maintaining, and testing incident response and business continuity plans. Additional responsibilities include assessing third-party cybersecurity posture, supporting security requirements and vendor risk assessments for technology procurements, and evaluating employee cybersecurity awareness and phishing simulation programs.