Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cloud Security & Risk Management Auditor

Active

State & Local

Response Deadline11/06/2026, 05:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

New York → NYS Office of Information Technology Services

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

NY, USA

Set-Aside

NONE

Documents

This scope was carved out of 2140200.

The full solicitation package (4 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI C001012 - Cloud Broker Management & Operation Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 23

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 05:00:00 AM UTCin 13 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew York → NYS Office of Information Technology Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyNew York → NYS Office of Information Technology Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security validation and supply chain risk management for prime contractors on New York State Office of Information Technology Services (ITS) projects. Validates compliance for FedRAMP, SOC 2, and HIPAA; analyzes SBOM and HBOM using vulnerability scanners. Requires CISSP or CISA certifications and FedRAMP knowledge. Delivers security risk assessments, compliance validation reports, and SBOM audits.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. This effort supports a project for the Inland Empire Utilities Agency focused on Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. Eligible entities include SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and DOT certified Disadvantaged Business Enterprises. Interested parties must respond by the deadline of November 17, 2026. Primary inquiries regarding this solicitation should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 5 hours ago

DEADLINE

Data Analytics & VisualizationThis subcontract opportunity, titled Data Analytics and Visualization, supports prime contractors on Department of the Air Force CDAO projects under the Department of Defense. The primary objective is to perform advanced analysis and develop decision-support products, including AI-enabled analytic capabilities and dashboards utilizing business intelligence tools such as Tableau and PowerBI to address specific mission requirements. Qualified candidates must possess a TS/SCI security clearance to deliver the required analytic reports and visualization products. The solicitation was posted on October 23, 2026, with a response deadline of November 2, 2026, and is categorized under NAICS code 541690.

POSTED

about 9 hours ago

DEADLINE

2026 Regional Transportation Plan & Sustainable Communities StrategyThe 2026 Regional Transportation Plan and Sustainable Communities Strategy (RTP/SCS) is a long-range planning initiative led by the Stanislaus Council of Governments (StanCOG) to guide transportation improvements in Stanislaus County through 2049. This forecast project, categorized under NAICS code 541690, fulfills state and federal legal mandates and incorporates the Sustainable Communities Strategy to meet greenhouse gas emission requirements established by Senate Bill 375. The plan identifies specific transportation improvement projects and land use scenarios designed to reduce environmental impacts and meet air quality conformity standards. The project involves a comprehensive environmental review process under CEQA guidelines, including a Programmatic Environmental Impact Report (PEIR) developed with assistance from Rincon Consultants, Inc. This analysis addresses critical environmental factors such as air quality, biological and cultural resources, wildfire risks, and noise. The process includes a public review and comment period from July 10, 2026, to August 24, 2026, with public hearings scheduled for July and August 2026. Final adoption by StanCOG is expected in September 2026, followed by submission to state and federal agencies. Primary points of contact include Francisco Martin, Director of Planning at StanCOG, and Eric VonBerg, Supervising Planner at Rincon Consultants.

Stanislaus Council of Governments

POSTED

about 14 hours ago

DEADLINE

Policy Brief and White Paper Author

NYS Office of Children & Family Services

POSTED

about 17 hours ago

DEADLINE

RFP Consulting Services Cardiologist (26-27047)

Solicitation # 26-27047

The Department of Health Care Access and Information (HCAI) is seeking a consulting cardiologist to support the California Cardiovascular Outcomes Reporting Program (CCORP). The selected consultant will provide expertise on the Society of Thoracic Surgeons Adult Cardiac Surgery Database (STS ACSD) and CCORP data elements, as well as the interpretation of patient medical records. This support is essential for HCAI to fulfill its mandate under Health and Safety Code sections 128745-128750, which requires the annual publication of risk-adjusted outcomes reports for approximately 124 California licensed hospitals performing CABG surgery. Key deliverables include participating in up to six Clinical Advisory Panel Meetings to provide guidance on data element coding, analysis, and risk-adjusted model building. The contract term is scheduled from November 27, 2026, through July 31, 2029, with a secondary reference to a term ending December 17, 2029. To be eligible, bidders must hold a current California medical license in good standing, provide board certification in cardiology or cardiovascular surgery, and demonstrate at least three years of experience in medical record review and two years of experience with clinical registries such as the STS National Database or NCDR. Award will be granted to the lowest responsive and responsible bidder, with evaluation weights split equally between credentials/experience and cost. Administrative requirements include maintaining commercial general liability insurance of at least $1,000,000 per occurrence and adhering to strict data security protocols, including the signing of confidentiality statements and completion of security awareness training. Invoices are to be submitted monthly in arrears on the contractor's letterhead. The agreement is subject to budget appropriation and may be terminated if sufficient funds are not provided in the state budget act. Proposals must be submitted via email by November 27, 2026, and must include all required certifications, a curriculum vitae, and documentation of board certification.

Health Care Access and Informa

POSTED

about 23 hours ago

DEADLINE

in about 1 month

2027 Primary Care Officer Grant Support

Solicitation # QQ-130497

The Virginia Department of Health is soliciting a Scientist Contractor to serve as a Deputy Shortage Designation Manager for the Virginia Primary Care Office. The primary objective is to support the national update of Health Professional Shortage Areas scheduled for September 2025. Key responsibilities include utilizing the federal Shortage Designation Management System to edit census tract boundaries and contiguous areas based on the 2020 Decennial Census, managing over 250 HPSA designations, performing annual attestations for approximately 10,000 provider records, and assisting Federally Qualified Health Centers with concurrent updates. Additionally, the contractor will manage grant deliverables, including a statewide needs assessment, and provide technical assistance for National Health Service Corps site applications. The contract is valued at a maximum threshold of 78,000 dollars for 1,200 annual hours, billed at a rate of 65.00 dollars per hour. Award priority is given to DSBSD-certified micro and small businesses, with the contract being awarded to the lowest responsive and responsible bidder. Performance is subject to strict compliance with HIPAA and PII data privacy regulations, and personnel must undergo background checks. Bidders must submit their proposals as a single PDF via the eVA platform and certify compliance with ethics, non-discrimination, and immigration laws. Invoicing is handled through specific VDH channels, with payments under 10,000 dollars eligible for the Small Purchase Charge Card.

Virginia Department of Health

POSTED

DEADLINE

Healthcare Outcomes & ROI AnalystThis subcontract opportunity for a Healthcare Outcomes and ROI Analyst supports prime contractors working on projects for the Oklahoma Office of Management and Enterprise Services. The selected provider will be responsible for establishing data-collection structures and performing critical analyses, including return on investment, feasibility, patient outcomes, and cost avoidance. Additionally, the role involves creating documentation-of-care standards and delivering comprehensive outcome-measurement frameworks and ROI reports. Technical requirements for the project include proficiency in data validation using tools such as Tableau, SAS, or SPSS. The contract falls under NAICS code 541690. Interested parties should note the response deadline of November 18, 2026, for this Oklahoma state agency initiative.

Oklahoma Office of Management and Enterprise Services

POSTED

DEADLINE

IT Security & Compliance ConsultantLOFT Community Services is seeking an IT Security and Compliance Consultant for a subcontracting role to perform security assessments and compliance audits for prime contractors. The primary objective is to evaluate the technical and security capabilities of a proposed ERP platform to ensure all outcomes are transparent, defensible, and auditable. The selected consultant must possess specialized expertise in Canadian privacy standards as well as SOC2 or similar security frameworks to deliver a comprehensive security assessment report and compliance certification. This opportunity was posted on October 22, 2026, with a response deadline of November 18, 2026. The work is categorized under NAICS code 541690 and will be performed within Canada. Interested parties can find further details through the Ontario Tenders portal.

LOFT Community Services

POSTED

DEADLINE

Data Scientist / Waste Characterization AnalystThis subcontract opportunity is for a Data Scientist or Waste Characterization Analyst to support prime contractors on projects for Seattle Public Utilities. The selected party will be responsible for analyzing large solid waste datasets to determine density, capture rates, and the prevalence of banned materials. Technical requirements include the use of R or Python to develop production-ready, well-annotated code, with version control managed through GitHub to ensure replication and transparency. The primary deliverables consist of annotated code and comprehensive longitudinal trend assessments. Interested parties must submit their responses by November 13, 2026. This engagement falls under NAICS code 541690 and focuses on providing specialized data analysis to improve waste management insights for the agency.

Seattle Public Utilities

POSTED

DEADLINE

General Subject Matter Expertise SupportThis subcontract opportunity, titled General Subject Matter Expertise Support, is issued by the Department of Homeland Security under the Mitigation SECTION(MIT60). The contract seeks to provide prime contractors with specialized technical expertise to support FEMA NFIP operations, specifically focusing on flood insurance law and FEMA regulations. Selected providers will deliver expert analysis, advisory services, technical memos, and advisory reports to ensure regulatory compliance and operational efficiency. Performance for this contract will take place in Washington, and candidates are required to possess advanced degrees or professional certifications in public policy, hydrology, or insurance. Interested parties must submit their responses by December 10, 2026. The procurement falls under NAICS code 541690, reflecting the requirement for specialized scientific and technical consulting services.

Mitigation SECTION(MIT60)

POSTED

DEADLINE

in about 2 months

Energy Financing & Performance ConsultingThe Energy Financing and Performance Consulting subcontract, issued by the Department of Defense under the W6QM Micc Tsc agency, focuses on providing specialized energy auditing and financial structuring for prime contractors working on Army Installation Management Command projects. The primary objective is the development of Energy Savings Performance Contracts and Utility Energy Service Contracts specifically designed to fund critical HVAC upgrades. The scope of work includes calculating the return on investment for energy-efficient systems and establishing a comprehensive, executable funding and resourcing model to support a five-year plan. This effort falls under NAICS code 541690, with a response deadline set for November 30, 2026.

POSTED

DEADLINE

in about 1 month

Safety Program ManagementThis Small Business Set Aside subcontract for Safety Program Management supports prime contractors on Air Force Test Center facility projects at the Arnold Engineering Development Center. The scope of work focuses on facility safety inspections and hazard abatement, requiring the performance of 425 annual inspections, detailed hazard investigations, and quarterly traffic surveys. To ensure professional oversight, the contractor must possess a Certified Safety Professional certification or an equivalent credential. Administrative requirements include the delivery of monthly inspection reports and quarterly traffic surveys in accordance with CDRL A054. The contract is managed under NAICS code 541690 and is issued through the Department of Defense via the AEDC Procurement Branch.

FA9101 Aedc Pkp Procrmnt Branch

POSTED

DEADLINE

More opportunities from New York → NYS Office of Information Technology Services

Same awarding agency

QA, Testing, and User Acceptance Testing (UAT) Services

Other Computer Related Services

POSTED

about 17 hours ago

DEADLINE

System Implementation & Integration Services

Custom Computer Programming Services

POSTED

about 17 hours ago

DEADLINE

System Design Services

Computer Systems Design Services

POSTED

about 17 hours ago

DEADLINE

Business Requirements & Iterative Development Services

Administrative Management and General Management Consulting Services

POSTED

about 17 hours ago

DEADLINE

Cloud Managed Services / Help Desk Support

Other Computer Related Services

POSTED

about 17 hours ago

DEADLINE

Cloud Broker Portal Developer/Operator

Custom Computer Programming Services

POSTED

about 17 hours ago

DEADLINE

Cloud Governance & Legal Compliance Consultant

Offices of Lawyers

POSTED

about 17 hours ago

DEADLINE

Cloud Financial Operations (FinOps) Specialist

Administrative Management and General Management Consulting Services

POSTED

about 17 hours ago

DEADLINE

Implementation & Development Services for Department of Health (DOH) Lead Rental System

Solicitation # 2140195

The New York State Office of Information Technology Services is seeking implementation and development services for the Department of Health to create a Lead Rental Registry. This system is required by Public Health Law Section 1377 to track residential rental dwellings with two or more units built before 1980 in designated Communities of Concern. The project will utilize an Agile methodology and must be built using the Microsoft Power Platform, integrating Dataverses and SharePoint for document management, and utilizing NY.Gov ID and Active Directory for identity and access management. Key deliverables include business requirements, system design, integration, quality assurance, user acceptance testing, and a three-month warranty and post go-live support period. This is a discretionary procurement limited to New York State certified Minority and Women-owned Business Enterprises or Service-Disabled Veteran-Owned Businesses. Proposals must be submitted electronically by November 20, 2026, to the designated contacts, Jessica Zeccardi and Elizabeth Conroy. Award selection is based on the bidder's ability to meet programmatic needs, contingent upon a pass/fail completeness review and a responsibility determination via the New York State VendRep System. Contractors must adhere to strict communication restrictions, comply with HIPAA and CJIS security standards, and follow specific monthly invoicing procedures through the NYS OGS Business Services Center.

Custom Computer Programming Services

POSTED

about 17 hours ago

DEADLINE

RFI C001012 - Cloud Broker Management & Operation Services

Solicitation # 2140200

The New York State Office of Information Technology Services (ITS) has issued Request for Information (RFI) C001012, solicitation number 2140200, to gather data for improving its Cloud Broker Management and Operations Services Model. Following Cloud Computing Policy ITS-P19-002, which designates ITS as the state's Cloud Broker, the agency aims to determine a future approach for the procurement, management, and operation of New York State cloud services under a unified Enterprise Agreement model. The scope focuses on providing governed access to public and private clouds, including SaaS, PaaS, IaaS, and AI-enabled offerings, as well as security tools, marketplace transactions, and statewide reporting. The RFI seeks input from qualified vendors with expertise in cloud brokerage, subscription lifecycle management, Cloud Financial Operations (FinOps), third-party terms governance, and security compliance. Services are expected to align with NIST cloud broker concepts of service intermediation, aggregation, and arbitrage. Requirements include adherence to NYS ITS policies regarding encryption and access controls, with a preference for storage and support within the contiguous United States or FedRAMP authorized environments. This is a planning-only solicitation for data gathering purposes; no contracts will be awarded based on these submissions. Responses must be submitted as MS Word documents via email to the VSMO Enterprise Agreement Team by November 6, 2026, and must not exceed 30 pages.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 17 hours ago

DEADLINE

Project Management and Planning ServicesThis subcontract opportunity for Project Management and Planning Services supports prime contractors on projects for the New York State Office of Information Technology Services. The selected provider will be responsible for administrative and strategic planning, which includes developing comprehensive project plans and managing timelines to ensure all design, development, and testing milestones are achieved. Proficiency in management tools such as Jira or MS Project is required to deliver the final project plan and schedule. The contract is categorized under NAICS code 541611 and requires all personnel to complete New York State onboarding and obtain necessary security clearances. Interested parties should note the posting date of October 2, 2026, with a response deadline set for October 26, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Software Testing and Quality Assurance (QA)This subcontract for Software Testing and Quality Assurance supports prime contractors on projects for the New York State Office of Information Technology Services. The scope of work involves executing functional, user acceptance, and security testing, with a specific focus on verifying price posting and delinquency modules. The selected provider will utilize automated testing tools and bug tracking software to deliver comprehensive testing reports, bug logs, and final QA certification. To comply with project requirements, personnel must complete New York State onboarding, obtain necessary security clearances, and sign an ITS Confidentiality and Non-Disclosure Agreement. This opportunity falls under NAICS code 541519, with a response deadline set for October 26, 2026.

Other Computer Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS