GRC Careers › GRC RFP & Fractional Work Hub › Post an RFP
One flat launch fee of $50 for each approved posting. Consultants and firms browse without charge.
Every posting is read by a person before it goes live. If we cannot publish yours, you are refunded.
21 open now, nearest deadline first. Every listing links to the issuing organization's own documents; respond to the issuer directly.
This New Jersey municipal insurance pool wants a cyber risk consultant for 2027 to assess every member town against carrier and fund minimum security requirements, write a gap analysis and remediation plan for each one, and consolidate the results for the…
PEJIF, a New Jersey public entity insurance pool, is hiring a cyber risk consultant for 2027 under its own contract.
APHCA, which represents Alabama's community health centers, seeks cybersecurity, compliance, and IT support for six rural health organizations under its Rural Health Transformation Program work.
The University of Arkansas System Internal Audit Department wants a co-source IT audit partner for audits starting in fiscal year 2027, performed under the IIA Global Internal Audit Standards.
Carlynton School District near Pittsburgh wants an independent firm for a cybersecurity risk assessment, vulnerability assessment and penetration test of its IT environment, with a prioritized remediation roadmap for staff and the school board.
Nassau Community College, a SUNY campus on Long Island, seeks a firm to run a managed governance, risk, compliance and cybersecurity program for the college.
CEDA, the nonprofit Community Action Agency for Cook County, Illinois, wants a consultant to update its agency-wide enterprise risk assessment, including cyber risk, and to deliver the annual internal audit work that follows from it.
The New York City Police Pension Fund wants a firm to provide virtual CISO services: maturing its cybersecurity program, strengthening governance and accountability, building risk metrics and dashboards, and improving incident response and recovery.
Marina Coast Water District, a public water and wastewater agency on the Monterey Bay, wants a cybersecurity consulting firm to build and test a Cybersecurity Incident Response and Recovery Plan with its staff, including playbooks, training and a tabletop…
The Supreme Court of Ohio wants a contractor to assess and audit the court's cybersecurity processes, documentation, governance and protocols, working with court leadership and the Office of Legal Counsel.
The City of Ogdensburg wants a qualified firm to run a full cybersecurity risk assessment of its municipal drinking water and wastewater systems, paid for by a New York State EFC SECURE Program grant.
GovAI, a 501(c)(3) nonprofit, runs a three-month, bipartisan fellowship in Washington, D.C.
TestPros, an independent IT assessment firm, wants a part-time 1099 or corp-to-corp consultant to run HIPAA security risk assessments of websites, apps and platforms, with a focus on minors' data, at $50 to $85 an hour.
TestPros wants a part-time 1099 or corp-to-corp privacy consultant to assess digital products against COPPA, state children's privacy laws and Age-Appropriate Design Code rules, including PIAs and DPIAs, at $50 to $85 an hour.
Blue Lake Rancheria, a tribal government in Humboldt County, seeks a consultant to update its Tribal Cybersecurity Plan against the NIST Cybersecurity Framework and CISA guidance, including a gap analysis, governance and incident response updates, and an…
Blue Lake Rancheria wants a firm to run two penetration tests of tribal IT systems, a baseline and a retest after remediation, covering external and internal networks and staff social engineering, with findings scored by CVSS and remediation guidance.
CCCERA, the public pension system for Contra Costa County employees, wants a firm to write cybersecurity policies aligned with NIST SP 800-53, formalize an incident response plan, run a tabletop exercise, and build a third-party risk management program that…
TestPros wants part-time ISO 27001 subject matter experts, 1099 or corp-to-corp, to lead ISMS design and upkeep, run risk assessments and risk treatment plans, and conduct internal audits ahead of certification, at $60 to $105 an hour.
TestPros, an independent IT assessment firm, wants a senior consultant for a short-term, part-time 1099 or corp-to-corp project: CCPA/CPRA privacy assessments, gap analyses, readiness reviews and privacy program work for client engagements, at $50 to $70 an…
TestPros wants experienced SOC 2 Type 2 assessors on a project basis, 1099 or corp-to-corp, to test controls against the AICPA Trust Services Criteria and run gap and readiness assessments, at $50 to $90 an hour.
Chugach Electric Association, Alaska's largest member-owned electric cooperative, wants a firm to set up an enterprise data governance program: a framework aligned to DAMA-DMBOK, a data classification standard, data ownership and stewardship, a source-system…
Questions before you post? Email [email protected]
GRC Careers · governance, risk, compliance and AI governance