Overview


Cybersecurity & Data Privacy
Pittsburgh, Pennsylvania, United StatesPosted about 2 months agoDeadline: March 31st, 2026

Fit Score


Settle Intelligence

Settle helps teams find, evaluate, and respond to public RFPs. We continuously surface new opportunities, score them against your company strengths, and draft proposal responses so you can focus on the work that wins business.

SUMMARY


The University is soliciting proposals for IT internal auditing services, including risk assessments, application security reviews, and audit report preparation for its Pittsburgh, Pennsylvania location.

KEY REQUIREMENTS


BUDGET

Estimate

$300,000 – $1,500,000

CONTRACT DURATION


36 months

TIMELINE


March 9th, 2026: Distribution of the RFQ

March 16th, 2026: Notification of interest to participate due

March 19th, 2026: Pre-response questions due

March 23rd, 2026: Responses to questions emailed to Providers

March 31st, 2026: Responses due

TBD: Post-RFQ Response Provider Discussions

QUESTION DEADLINE


March 19th, 2026

Issuing Agency


University of Pittsburgh

Organization overview and procurement intelligence available on paid plans.

DESCRIPTION


The government authority located in Pittsburgh, Pennsylvania is seeking a vendor to provide comprehensive IT internal auditing services. The selected contractor will assist in risk assessments of the University's IT environment and conduct application security reviews for key systems, such as Oracle Financials and the PeopleSoft student system.

Responsibilities include developing and executing the IT internal audit plan, delivering a complete set of audit workpapers and reports using the University's standard formats, and supervising IT audit staff throughout scoping, planning, and the overall audit process. The contractor will also be expected to share relevant knowledge gained during the audits to support continuous improvement of IT controls.

All questions regarding the RFP must be submitted no later than March 19, 2026.

Source attribution

This Settle analysis is based on the issuing organization’s public RFP listing.

Similar RFPs