PCI DSS Qualified Security Assessor Services

The New York City Department of Finance is seeking a Qualified Security Assessor (QSA) firm to provide professional services for the City's annual Payment Card Industry Data Security Standard (PCI DSS) certification. The selected contractor will be responsible for conducting assessments, testing, validation, and documentation to ensure PCI DSS compliance for the Department of Finance and other city agencies that accept credit card payments. This includes completing all mandated PCI DSS reports and certifications. The selected firm must possess current QSA credentials and demonstrate significant experience in performing PCI DSS assessments for large, complex organizations. The services will involve strategic scoping, evidence review and scoring, and report issuance, with payment milestones tied to the completion of these phases. The period of performance is expected to be annual, typically running 8-10 months per certification cycle, with a potential need for one hour of QSA support per week for 40 weeks for ongoing guidance.