Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cyber Compliance & Risk Management (vCISO)

Active

Federal

Response Deadline10/30/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cyber Compliance and Risk Management (vCISO) subcontract, issued by the United States Holocaust Memorial Museum Procurement Division, seeks a provider to deliver strategic cybersecurity leadership and governance for prime contractors. The scope of work focuses on cyber compliance management, the implementation of risk management frameworks, and the execution of vulnerability and high-risk system assessments. Key deliverables include security governance roadmaps, compliance certifications, and detailed risk assessment reports. Performance for this contract will take place in Washington, DC, under NAICS code 541690. Qualified candidates must possess CISSP-ISSAP or ISSEP certifications to meet the technical requirements of the role. The solicitation was posted on October 5, 2026, with a response deadline set for October 30, 2026.

General Info

Agency

United States Holocaust Memorial Museum → Ushmm Procurement Division

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

Washington, DC, 20024, USA

Set-Aside

NONE

Documents

This scope was carved out of 95476727RFI-MSSP.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

USHMM-RFI-2027-MSSP

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 5

subcontract

Response DeadlineOct 30

Submission deadline

Response Deadline

10/30/2026, 09:00:00 PM UTCin 24 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyUnited States Holocaust Memorial Museum → Ushmm Procurement Division

ContactsNo contacts available

OfficeN/A

Organization / AgencyUnited States Holocaust Memorial Museum → Ushmm Procurement Division

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Provides strategic cybersecurity leadership and governance for prime contractors on USHMM projects. Performs cyber compliance management, risk management framework implementation, high-risk system assessments, and vulnerability assessments. Requires CISSP-ISSAP/ISSEP certifications. Delivers risk assessment reports, compliance certifications, and security governance roadmaps.

Similar Contracts

Same NAICS industry code

Healthcare Needs Assessment and Demographic ConsultantThe Healthcare Needs Assessment and Demographic Consultant subcontract involves providing specialized data collection and demographic analysis for prime contractors working on Alabama Department of Veterans Affairs projects. The selected consultant will analyze veteran populations based on age, sex, service type, and medical requirements to pinpoint service gaps and forecast long-range demand. A critical component of the role includes utilizing demographic modeling software to rank and prioritize geographic areas for the construction of new facilities. Qualified candidates must possess at least three years of experience in healthcare needs assessments and will be responsible for delivering detailed data analysis reports. This opportunity, categorized under NAICS code 541690, was posted on October 5, 2026, with a response deadline of November 5, 2026.

Agency Administration

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Cybersecurity ConsultantThe City of Peterborough is seeking a Cybersecurity Consultant for a subcontracting engagement to validate security controls and role-based access controls for prime contractors on various software projects. The scope of work includes testing configurable permissions, reviewing backup protocols, and ensuring that data export capabilities remain non-proprietary. To achieve this, the consultant will utilize security scanning and penetration testing software while adhering to SOC2 or ISO 27001 frameworks. The primary deliverables for this engagement are a comprehensive security validation report and a permission matrix audit. Interested parties should note that the solicitation was posted on October 5, 2026, with a response deadline of October 27, 2026. This opportunity falls under NAICS code 541690.

City Of Peterborough

POSTED

about 16 hours ago

DEADLINE

QA/QC Program ReviewerThe Lower Colorado River Authority is seeking a subcontractor for a QA/QC Program Reviewer role to provide independent review and monitoring of EPC contractor Quality Assurance and Quality Control programs for transmission projects. The selected provider will be responsible for evaluating the adequacy of QA/QC programs, monitoring project execution relative to contractual milestones, and reporting any quality deviations. Key deliverables include the submission of detailed QA/QC audit reports and regular project status reports. To qualify for this engagement, the contractor must hold an ISO 9001 or similar quality management certification. This opportunity is categorized under NAICS code 541690. Interested parties must submit their responses by the deadline of November 6, 2026.

LOWER COLORADO RIVER AUTHORITY (LCRA)

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Archaeological Archive Storage & Preservation SpecialistThis subcontract opportunity with Historic England seeks an Archaeological Archive Storage and Preservation Specialist to provide expert research and define evidence-based storage systems for prime contractors. The selected specialist will be responsible for establishing critical requirements for physical infrastructure, preservation standards, and long-term sustainability for historical archives. This role requires deep technical knowledge of archival-grade materials and climate control standards specifically tailored for archaeological finds to ensure the delivery of precise specifications for repository design and storage environments. The solicitation was posted on October 5, 2026, with a response deadline of November 2, 2026. Classified under NAICS code 541690, this project focuses on the technical intersection of archival science and infrastructure design to protect significant historical assets. Interested parties can find further details through the provided government tender link.

Historic England

POSTED

about 18 hours ago

DEADLINE

Aviation Mission Planning and Technical AssistanceThis subcontract, titled Aviation Mission Planning and Technical Assistance, supports the Department of Defense and Ustranscom-Aq by providing specialized technical assistance for aviation lift support planning on DPAA projects in Papua New Guinea. The selected provider will be responsible for developing comprehensive Mission Aviation Lift Support Plans, establishing budget and resupply requirements, and creating pre-mission Communications Plans. A critical component of the role involves utilizing aviation planning software to secure necessary airport authorizations and landing rights from Papua New Guinea authorities. The contract requires a high level of expert knowledge regarding Papua New Guinea airspace regulations to ensure all operational blueprints and landing rights are approved. Interested parties should note that the response deadline is November 2, 2026. The work falls under NAICS code 541690, focusing on the delivery of approved operational frameworks and regulatory compliance for prime contractors operating within the region.

POSTED

about 22 hours ago

DEADLINE

Respirator Fit Testing

Solicitation # 36C24527Q0010

The Department of Veterans Affairs, through Network Contracting Office 5, is seeking a contractor to provide industrial hygiene support for the Louis A. Johnson Medical Center in Clarksburg, West Virginia. The primary objective is to conduct quantitative respirator fit testing for approximately 700 to 1,000 employees. The contractor is responsible for providing all necessary equipment, such as TSI PortaCount machines, consumables, and Controlled Air Purifying Respirators for those requiring alternatives to N95 masks. Additionally, the scope may include training VA personnel on qualitative fit testing techniques. All services must adhere to the OSHA Respiratory Protection Standard 29 CFR 1910.134, the OSHA Act of 1970, and other applicable environmental and health standards. This procurement is a total small business set-aside under NAICS code 541690, with a response deadline of October 12, 2026. The contract structure consists of a base period from October 30, 2026, to October 29, 2027, with four subsequent one-year option periods extending through October 2031. Award decisions will be based on a comparative evaluation of technical capability, relevant past performance, and pricing reasonableness, rather than a low-price technically acceptable or trade-off process. Selected contractors must comply with strict data security and confidentiality requirements, including the protection of medical records under Title 38 U.S.C. and the use of electronic invoicing via the VAAR.

245-NETWORK Contract Office 5 (36C245)

POSTED

about 22 hours ago

DEADLINE

Medical Economics and Rate-Setting ConsultantThis subcontract opportunity is for a Medical Economics and Rate-Setting Consultant to support prime contractors on Pennsylvania Department of Human Services Medicaid projects. The selected consultant will be responsible for performing advanced medical economics analysis, which includes evaluating expenditure and utilization trends, distinguishing between acquisition and reimbursement costs, and analyzing value-based service incentives. A primary objective of the role is to develop evidence-based methodologies to inform rate-setting decisions and deliver comprehensive reports and recommendations. The position requires specialized expertise in actuarial reporting and Medicaid managed care delivery systems. Interested parties should note that the solicitation was posted on October 5, 2026, with a response deadline of November 13, 2026. The work falls under NAICS code 541690 and is focused on supporting the state of Pennsylvania's healthcare financial infrastructure.

Department of Human Services

POSTED

DEADLINE

in about 1 month

LIPTM00183, INIS IPT, Sole-Source SETA, Large ContractThe Naval Information Warfare Systems Command Atlantic is forecasting a large sole-source contract for Systems Engineering and Technical Assistance under the LIPTM00183 INIS IPT project. This requirement falls under NAICS code 541690 and is scheduled for posting around September 27, 2026. The work will be performed in Charleston and is managed by Contracting Officer Christopher M. Brown. This acquisition is designated as a sole-source effort, indicating a specific provider is expected to deliver the technical assistance required for the program.

POSTED

DEADLINE

Healthcare Data Analytics and Algorithm DevelopmentThis subcontract, titled Healthcare Data Analytics and Algorithm Development, involves supporting prime contractors on Maryland Department of Health Medicaid projects. The scope of work focuses on the development of complex algorithms and sampling methodologies to perform data mining on Medicaid claim information. The selected provider will be responsible for creating sampling frameworks for two-year audit cycles and executing automated reviews of claims to produce flagged claim lists and detailed sampling reports. The project requires specialized expertise in healthcare data mining and the statistical sampling of large-scale datasets. Managed under the Maryland Office of Procurement and Support Services with NAICS code 541690, the solicitation was posted on October 3, 2026, with a response deadline of November 20, 2026.

OFFICE OF PROCUREMENT AND SUPPORT SERVICES

POSTED

DEADLINE

in about 2 months

Toll Systems Consulting & ManagementThe Toll Systems Consulting and Management subcontract focuses on providing specialized consulting and project management services for prime contractors working on Maryland Transportation Authority Electronic Toll Collection projects. The scope of work involves managing tolling systems across various Maryland facilities and providing critical oversight for the implementation of tolling technology. Key deliverables include the production of project management reports, comprehensive system oversight, and the development of tolling operational plans. This opportunity is categorized under NAICS code 541690 and is associated with the Maryland Transportation Authority. Interested parties should note that the response deadline is December 7, 2026. Further details regarding the procurement process can be accessed through the Maryland eMMA portal.

Maryland Transportation Authority

POSTED

DEADLINE

Emergency Preparedness Program DesignerThis subcontract opportunity is for an Emergency Preparedness Program Designer to provide strategic design and content development for prime contractors working with the Fraser Valley Regional District. The selected provider will be responsible for creating a comprehensive four-phase guide encompassing mitigation, preparedness, response, and recovery, as well as designing the PREP program framework and its associated Pathways to Resilience modules. Successful candidates must possess specialized expertise in climate resilience and British Columbia Emergency Management Systems. The project focuses on delivering a structured Four-Phased Emergency Preparedness Guide and a complete PREP Program design. Interested parties must submit their responses by October 30, 2026.

Fraser Valley Regional District

POSTED

DEADLINE

Campus Historic Preservation Plan (CHPP) ConsultantThis subcontract opportunity is for a Campus Historic Preservation Plan Consultant to support prime contractors on facility projects within the University System of Georgia. The selected consultant will be responsible for researching campus history, analyzing physical forms, and identifying specific buildings and landscapes designated for preservation in accordance with the Board of Regents guidelines. The primary deliverable for this engagement is the completion of a comprehensive Campus Historic Preservation Plan. Qualified candidates must hold a Professional Planner license or a Historic Preservation Certification. This procurement is categorized under NAICS code 541690 and is managed by the Board of Regents of the University System of Georgia. Interested parties should note the response deadline of November 3, 2026.

Board Of(university System of Georgia) Regents

POSTED

DEADLINE

More opportunities from United States Holocaust Memorial Museum → Ushmm Procurement Division

Same awarding agency

Endpoint Management & Identity/PAM ServicesThe Endpoint Management and Identity/PAM Services subcontract, issued by the United States Holocaust Memorial Museum Procurement Division, focuses on managing device security and user access for prime contractors. The scope of work involves performing Apple endpoint management via Jamf and implementing Identity systems alongside Privileged Access Management policies. Key deliverables include a fully managed endpoint fleet and the provision of identity access logs. Qualified candidates must possess high-level technical expertise, specifically Jamf Level 300/400 and certifications in Identity and PAM. This opportunity is categorized under NAICS code 541519 and will be performed in Washington, DC. Interested parties must submit their responses by October 30, 2026.

Other Computer Related Services

POSTED

about 22 hours ago

DEADLINE

Cloud Security Architecture & DevSecOpsThe Cloud Security Architecture and DevSecOps subcontract is issued by the United States Holocaust Memorial Museum Procurement Division for projects based in Washington, DC. The selected provider will be responsible for designing and securing cloud infrastructure for prime contractors, specifically focusing on the implementation of DevSecOps practices and the protection of cloud-native environments utilizing AWS or other major cloud platforms. Key deliverables include the creation of secure cloud architecture diagrams, the development of automated CI/CD security pipelines, and the execution of cloud configuration audits. To qualify for this engagement, the contractor must hold an AWS Certified Security - Specialty certification. Interested parties must submit their responses by October 30, 2026, in accordance with the solicitation posted on October 5, 2026. The work falls under NAICS code 541511, emphasizing specialized computer systems design services.

Custom Computer Programming Services

POSTED

about 22 hours ago

DEADLINE

Managed Security Service Provider (MSSP) OperationsThe Managed Security Service Provider (MSSP) Operations subcontract, issued by the United States Holocaust Memorial Museum Procurement Division, involves providing comprehensive security operations and monitoring for prime contractors. The selected provider will manage a complex tool stack of over 25 security tools to deliver continuous monitoring, threat detection, and incident response services. To ensure operational excellence, personnel are required to hold General Governance and Incident Response certifications. The contract mandates 24/7/365 security coverage, including the delivery of detailed incident reports and the execution of threat mitigation actions. Performance will take place in Washington, DC, under NAICS code 541519. Interested parties must respond by October 30, 2026.

Other Computer Related Services

POSTED

about 22 hours ago

DEADLINE

USHMM-RFI-2027-MSSP

Solicitation # 95476727RFI-MSSP

The United States Holocaust Memorial Museum (USHMM) is conducting market research through Request for Information USHMM-RFI-2027-MSSP to identify commercial capabilities for comprehensive Managed IT Security, Multi-Cloud/DevSecOps Architecture, Network Engineering, and Managed Security Service Provider (MSSP) operational services. The objective is to evaluate vendors capable of sustaining current security infrastructure while executing a four-phase transformation to a modernized state. This lifecycle includes assuming daily operations, performing gap analyses and threat modeling, architecting a Zero Trust security posture with a Government Owned Contractor Operated (GOCO) Security Operations Center framework, and completing a seamless transition within 30 to 60 days. The scope of work involves managing a security stack of over 25 tools, supporting 1,200 endpoints and 800 users with an average of 4,000 monthly tickets, and providing strategic leadership via a Chief Information Security Officer. Technical requirements emphasize expertise in AWS and GCP multi-cloud environments, Jamf Apple endpoint management, and compliance with NIST SP 800-53 r5, PCI DSS v4.2.1, and the CISA Zero Trust Maturity Model. USHMM is seeking feedback on the feasibility of a Firm-Fixed-Price monthly fee structure and requests burdened hourly labor rates for the Washington, DC area. Responses must be submitted in PDF or Word format, limited to 15 pages, to Contracting Officer Mary Green by October 30, 2026.

Computer Systems Design Services

POSTED

about 22 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS