School District of Jefferson County Public Schools

Buyer seeks a qualified co-sourcing partner to supplement their Internal Audit Department for IT audit services. The services will assess and strengthen IT governance, cybersecurity posture, data protection strategies, and overall IT risk management. The selected vendor will work with a team of five to six full-time internal audit staff with diverse backgrounds to enhance capacity and expertise for comprehensive IT audit coverage.

• 4/15/2025 - Pre-proposal questions deadline
• 4/18/2025 - Response to questions posted
• 5/12/2025 - Proposal Due Date
• 7/1/2025 - Contract period start

• At least 5 years of experience providing IT audit services
• Experience with school districts or similar public sector entities
• Staff with certifications like CISA, CISSP, CRISC, CISM
• Knowledge of IT governance frameworks and cybersecurity standards

• Evaluate IT governance framework including policies and alignment with industry standards
• Conduct cybersecurity risk assessments of network, endpoint, and cloud security
• Assess compliance with FERPA and other relevant regulations
• Evaluate security of ERP and Student Information Systems
• Perform penetration testing and vulnerability assessments
• Develop a multi-year IT audit roadmap based on risk assessments
• Assess security controls for personally identifiable information
• Evaluate incident response plans and disaster recovery strategies
• Review system backup, recovery, and redundancy strategies
• Assess emerging technology risks including AI and remote learning platforms