Cybersecurity & Compliance Assurance

The contract seeks a subcontractor to provide comprehensive cybersecurity services for the FOIA platform, focusing on vulnerability assessments and penetration testing to identify and mitigate security weaknesses. The contractor must ensure full alignment with NIST guidelines, the Risk Management Framework, and Department of Defense cybersecurity policies, maintaining rigorous standards for threat detection, risk mitigation, and system integrity. This work requires specialized expertise in federal cybersecurity frameworks and the ability to deliver actionable findings and remediation strategies in a high-security environment. All tasks must be performed in support of a DoD mission-critical system and are subject to strict compliance deadlines, with proposals due by August 13, 2026. The work falls under NAICS code 541611 for computer systems design services and is structured as a subcontract, indicating it supports a larger prime contract under the Department of Defense. The contractor is expected to operate with full awareness of federal information security requirements and deliver results that uphold the confidentiality, integrity, and availability of sensitive data managed by the FOIA platform.