# Governance, Risk and Compliance Consultant

Canonical: https://abierto.us/opportunities/gctof2403

- Solicitation number: GCTOF-24-03
- Notice type: Solicitation
- Status: Closed. Deadline was June 28, 2024 at 1:00 PM EDT
- Department: Department of the Air Force
- Agency: Department of the Air Force
- Contracting office: FA2218 Afimsc A37R (FA2218)
- NAICS: 541519 Other Computer Related Services
- Product or service code: DJ10 Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
- Place of performance: JBSA Randolph, Texas
- County: Bexar County (FIPS 48029). https://abierto.us/counties/bexar-county-tx-48029
- First posted: April 30, 2024
- Last posted: May 28, 2024
- SAM.gov: https://sam.gov/workspace/contract/opp/9499f1c7f3e249a180d215178bb4a8c8/view

## Description

The contractor acts as a Governance, Risk, and Compliance (GRC) Consultant for AFIMSC under a non-personal service contract. The contractor's responsibilities include:

1. Ensuring the Chaplain Corps Accounting Section (CCAC) achieves and maintains an Authorization to Operate (ATO) for its current and future cloud-based accounting systems. This involves consistent progress in attaining ATO and avoiding lapses.

2. Conducting detailed assessments of the organization's GRC posture, focusing on cybersecurity controls, policies, and procedures in compliance with various DoD, Air Force, and local policies.

3. Evaluating and ensuring compliance with designated accounting software and network requirements, identifying weaknesses, and coordinating migrations to cloud-based services with appropriate security measures like FEDRAMP.

4. Developing and recommending strategies to address compliance gaps, vulnerabilities, and risks in alignment with DoD and Air Force standards, and providing action plans to address identified issues.

5. Offering guidance and expertise on interpreting and applying relevant standards and frameworks, ensuring alignment with organizational objectives, and providing advice on governance practices for improved performance.

6. Collaborating with cross-functional teams to design, implement, and maintain effective risk management processes and controls, ensuring seamless integration into daily operations and alignment with the organization’s strategic goals.

7. Assisting in the documentation and maintenance of security controls, policies, and procedures, updating these as necessary to reflect changes in regulations or emerging threats, and maintaining records for audit purposes.

8. Regularly conducting reviews and audits to assess compliance with established frameworks, identify areas for improvement, and monitor the effectiveness of risk management controls.

9. Providing training and knowledge transfer sessions on GRC principles, compliance requirements, and risk management best practices to internal stakeholders.

10. Maintaining relevant certifications and proficiency with tools like eMASS and ITIPS, demonstrating experience with the Risk Management Framework and NIST publications related to security and privacy controls, and guidance on applying these frameworks to federal information systems.

## Publications

- April 30, 2024: Solicitation, due June 28, 2024 at 1:00 PM EDT. Notice 514222472cf5411283af091da0feb7f2. https://sam.gov/workspace/contract/opp/514222472cf5411283af091da0feb7f2/view
- May 8, 2024: Solicitation, due June 28, 2024 at 1:00 PM EDT. Notice 2092445a1a3d48f2a22c67921e3fa7d1. https://sam.gov/workspace/contract/opp/2092445a1a3d48f2a22c67921e3fa7d1/view
- May 8, 2024: Solicitation, due June 28, 2024 at 1:00 PM EDT. Notice d865d942dd9146298651942da06afa2f. https://sam.gov/workspace/contract/opp/d865d942dd9146298651942da06afa2f/view
- May 28, 2024: Solicitation, due June 28, 2024 at 1:00 PM EDT. Notice 9499f1c7f3e249a180d215178bb4a8c8. https://sam.gov/workspace/contract/opp/9499f1c7f3e249a180d215178bb4a8c8/view

## Points of contact

- Ana Mendez-Garner, AFIMSC.HC.ResourceManagement@us.af.mil, 2109698190
- Portmann Werner, AFIMSC.HC.ResourceManagement@us.af.mil, 2109695776

---
Source: SAM.gov Contract Opportunities bulk extract. Confirm deadlines on SAM.gov before responding. Cite https://abierto.us/opportunities/gctof2403.