Enterprise Risk Management Program (ERM)

The Department of Housing and Urban Development (HUD), through its Government National Mortgage Association (Ginnie Mae), is seeking contractor support to enhance, administer, and execute a comprehensive Enterprise Risk Management (ERM) Program. The contractor will provide program management support, ERM program execution, governance enhancement, and special projects while ensuring compliance with federal statutes, regulations, and industry standards including OMB Circular A-123, COSO frameworks, and NIST cybersecurity standards. Key qualifications include a Senior Manager/Director with eight years of risk management or mortgage banking experience, at least one full-time Senior Consultant with six years of relevant experience, and additional Consultants with a minimum of two years of experience, with all key personnel required to hold certifications such as CPA, CISA, CIA, CFE, COSO, CGFM, PMP, CISSP, CISM, CCSP, CRISC, or CORP. Contractors must hold a GSA Multiple Award Schedule contract with SIN 541611 in Management and Financial Consulting, Acquisition and Grants Management Support, and Business Program and Project Management Services. Interested parties must submit responses to Cheri Redding (Cheri.L.Redding@hud.gov) and Diane Toledo-Gaskins (Diane.e.Toledo-Gaskins@hud.gov) by April 30, 2026 at 2:00 PM EST.

This pre-solicitation notice contains no set-aside designations, and no incumbent contractor is identified in the documentation. The contemplated contract includes a 12-month base period with four optional 12-month extensions for a total potential performance period of five years. The applicable NAICS code is 541611 (Administrative Management and General Management Consulting Services) with a $24.5 million size standard, and the PSC code is R408 (Program Management Support). The contractor will be responsible for delivering weekly status reports and minutes, monthly risk appetite assessments, quarterly risk dashboards, annual governance document updates, semi-annual enterprise risk assessments and reports, and annual fraud risk profile reports. Performance will be conducted primarily at the contractor's facility during standard business hours (8:00 AM–5:00 PM, Monday–Friday), and the contractor bears full responsibility for all facilities, equipment, and materials required to perform the work.