Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity & Compliance Auditor

Active

State & Local

Response Deadline11/19/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity with UT Health San Antonio seeks a Cybersecurity and Compliance Auditor to provide independent security validation and auditing for prime contractors. The selected provider will be responsible for reviewing data encryption, access controls, and cyber liability protections to ensure platform compliance with NIST, PCI DSS, and University Rule UTS 165. The final deliverables for this engagement include a comprehensive security audit report and a formal compliance certification. Qualified candidates must hold a CISSP or CISA certification to perform these services. The solicitation was posted on October 8, 2026, with a response deadline of November 19, 2026. This project falls under NAICS code 541690 and is managed through the UT Health San Antonio procurement system.

General Info

Cybersecurity auditor needed for UT Health San Antonio to ensure NIST and PCI compliance.

Agency

Texas → Ut Health San Antonio

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

TX, USA

Set-Aside

NONE

Documents

This scope was carved out of 745-27-P01.

The full solicitation package (15 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Organizational Design and Workplace Planning Platform

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 8

subcontract

Response DeadlineNov 19

Submission deadline

Response Deadline

11/19/2026, 09:00:00 PM UTCin 26 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyTexas → Ut Health San Antonio

ContactsNo contacts available

OfficeN/A

Organization / AgencyTexas → Ut Health San Antonio

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent security validation and auditing for prime contractors on UT Health San Antonio projects. Audits platform compliance with NIST, PCI DSS, and University Rule UTS 165. Reviews data encryption, access controls, and cyber liability protections. Requires CISSP or CISA certification. Delivers a comprehensive security audit report and compliance certification.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project is for the Inland Empire Utilities Agency and involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries regarding this opportunity should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 12 hours ago

DEADLINE

Roofing Technical Consultant / Specification WriterThis subcontract opportunity is for a Roofing Technical Consultant and Specification Writer to provide specialized expertise in roofing membranes and materials for prime contractors working on Texas A&M University System facility projects. The selected consultant will be responsible for developing technical specifications for Issued for Construction documents, evaluating product substitutions based on cost and energy efficiency, and ensuring all designs adhere to FM Global Standards for fire protection. Key deliverables include the provision of technical specifications, material performance standards, and detailed product evaluation reports. Interested parties should note that the response deadline for this engagement is December 10, 2026.

Texas A&M University System

POSTED

DEADLINE

in about 2 months

OSINT Data Processing and Exploitation SupportThis subcontract for OSINT Data Processing and Exploitation Support involves providing technical processing and exploitation of PAI/CAI for prime contractors on NATO Communications and Information Agency projects. The scope of work includes data normalization, foreign language translation, entity extraction, and the fusion of disparate data streams to deliver processed intelligence reports. Performance of these duties requires proficiency in OSINT tradecraft, adherence to NATO intelligence standards, and the use of Natural Language Processing tools and data visualization platforms. The project is associated with the Bureau of Industry and Security under the Department of Commerce, with the place of performance located in Belgium. The opportunity was posted on October 23, 2026, with a response deadline of November 4, 2026. It is categorized under NAICS code 541690.

Bureau Of Industry And Security

POSTED

DEADLINE

Mortgage-Backed Securities (MBS) Risk Analytics & ReportingThis subcontract opportunity, titled Mortgage-Backed Securities (MBS) Risk Analytics and Reporting, supports the Department of Housing and Urban Development within the Ginnie Mae Support Division. The selected provider will perform critical risk management and data analysis for prime contractors, focusing on a massive portfolio valued at 2.1 trillion dollars, which encompasses 11 million loans and 675,400 MBS pools. The scope of work involves the development and maintenance of Risk and Information Analytics Reports, requiring the use of specialized financial modeling tools and MBS risk analysis services to deliver between 25 and 35 specific reports. The project is categorized under NAICS code 541690 and will be performed in Alexandria, Virginia. Interested parties should note that the response deadline is November 6, 2026. This engagement is essential for maintaining oversight and analytical rigor over a significant portion of the federal mortgage-backed securities landscape.

Cpo : Gnma Support Division

POSTED

DEADLINE

Data Analytics & VisualizationThis subcontract opportunity, titled Data Analytics and Visualization, supports prime contractors on Department of the Air Force CDAO projects under the Department of Defense. The primary objective is to perform advanced analysis and develop decision-support products, including AI-enabled analytic capabilities and dashboards utilizing business intelligence tools such as Tableau and PowerBI to address specific mission requirements. Qualified candidates must possess a TS/SCI security clearance to deliver the required analytic reports and visualization products. The solicitation was posted on October 23, 2026, with a response deadline of November 2, 2026, and is categorized under NAICS code 541690.

POSTED

DEADLINE

ISO 50001 WR-ALC Sole Source

Solicitation # FA857127Q0008

Solicitation FA857127Q0008 is a combined contract for the Department of Defense, specifically the Maintenance Contracting AFSC PZIM, to provide Strategic Energy Manager expertise at Robins Air Force Base, Georgia. The primary objective is to support the sustainment of the International Organization for Standardization (ISO) 50001 Energy Management System (EnMS) certification for the WR-ALC. The scope of work includes program management, SharePoint sustainment, metering data analysis, significant energy uses support, training, internal audits, and nonconformance actions briefings. The contractor is responsible for providing all necessary personnel, equipment, tools, and materials to ensure annual certification is maintained. The contract utilizes a mix of Firm Fixed Price and Cost No Fee pricing arrangements, with various deliverables managed through a Contract Data Requirements List (CDRL), including status reports for ISO guide book updates, annual audits, and EMS training. Performance is centered at Robins AFB, with a delivery schedule that includes both monthly deliverables and long-term tasks extending over 12-month periods. Evaluation for award includes a price preference for HUBZone small business concerns. Compliance requirements include registration in the System for Award Management (SAM), adherence to Cybersecurity Maturity Model Certification (CMMC) levels, and strict following of DoD information security marking standards. Invoicing and payment must be processed electronically through the Wide Area WorkFlow (WAWF) system.

FA8571 Maintenance Contracting Afsc Pzim

POSTED

DEADLINE

RFP Consulting Services Cardiologist (26-27047)

Solicitation # 26-27047

The Department of Health Care Access and Information (HCAI) is seeking a consulting cardiologist to support the California Cardiovascular Outcomes Reporting Program (CCORP). The selected consultant will provide expertise on the Society of Thoracic Surgeons Adult Cardiac Surgery Database (STS ACSD) and CCORP data elements, as well as the interpretation of patient medical records. This support is essential for HCAI to fulfill its mandate under Health and Safety Code sections 128745-128750, which requires the annual publication of risk-adjusted outcomes reports for approximately 124 California licensed hospitals performing CABG surgery. Key deliverables include participating in up to six Clinical Advisory Panel Meetings to provide guidance on data element coding, analysis, and risk-adjusted model building. The contract term is scheduled from November 27, 2026, through July 31, 2029, with a secondary reference to a term ending December 17, 2029. To be eligible, bidders must hold a current California medical license in good standing, provide board certification in cardiology or cardiovascular surgery, and demonstrate at least three years of experience in medical record review and two years of experience with clinical registries such as the STS National Database or NCDR. Award will be granted to the lowest responsive and responsible bidder, with evaluation weights split equally between credentials/experience and cost. Administrative requirements include maintaining commercial general liability insurance of at least $1,000,000 per occurrence and adhering to strict data security protocols, including the signing of confidentiality statements and completion of security awareness training. Invoices are to be submitted monthly in arrears on the contractor's letterhead. The agreement is subject to budget appropriation and may be terminated if sufficient funds are not provided in the state budget act. Proposals must be submitted via email by November 27, 2026, and must include all required certifications, a curriculum vitae, and documentation of board certification.

Health Care Access and Informa

POSTED

DEADLINE

in about 1 month

Cloud Security & Risk Management AuditorThe Cloud Security and Risk Management Auditor subcontract supports prime contractors on projects for the New York State Office of Information Technology Services. The primary scope of work involves performing security validation and supply chain risk management, specifically focusing on compliance validation for FedRAMP, SOC 2, and HIPAA. Additionally, the role requires the analysis of Software Bill of Materials and Hardware Bill of Materials using specialized vulnerability scanners to ensure system integrity. Qualified candidates must possess FedRAMP knowledge and hold professional certifications such as CISSP or CISA. Key deliverables for this engagement include comprehensive security risk assessments, compliance validation reports, and detailed SBOM audits. The solicitation was posted on October 23, 2026, with a response deadline of November 6, 2026, falling under NAICS code 541690.

NYS Office of Information Technology Services

POSTED

DEADLINE

Policy Brief and White Paper AuthorThis subcontract opportunity is for a Policy Brief and White Paper Author to support New York State OCFS/NYSCB projects. The selected contractor will synthesize primary research and case management findings into actionable policy recommendations specifically for VR services. This process involves consulting with the NY State Rehabilitation Council and integrating agency feedback to produce a final comprehensive white paper and policy brief intended for prime contractors. The project is categorized under NAICS code 541690 and requires the execution of a NYSCB Confidentiality Agreement. Interested parties must submit their responses by November 20, 2026, for this engagement with the New York State Office of Children and Family Services.

NYS Office of Children & Family Services

POSTED

DEADLINE

2027 Primary Care Officer Grant Support

Solicitation # QQ-130497

The Virginia Department of Health is soliciting a Scientist Contractor to serve as a Deputy Shortage Designation Manager for the Virginia Primary Care Office. The primary objective is to support the national update of Health Professional Shortage Areas scheduled for September 2025. Key responsibilities include utilizing the federal Shortage Designation Management System to edit census tract boundaries and contiguous areas based on the 2020 Decennial Census, managing over 250 HPSA designations, performing annual attestations for approximately 10,000 provider records, and assisting Federally Qualified Health Centers with concurrent updates. Additionally, the contractor will manage grant deliverables, including a statewide needs assessment, and provide technical assistance for National Health Service Corps site applications. The contract is valued at a maximum threshold of 78,000 dollars for 1,200 annual hours, billed at a rate of 65.00 dollars per hour. Award priority is given to DSBSD-certified micro and small businesses, with the contract being awarded to the lowest responsive and responsible bidder. Performance is subject to strict compliance with HIPAA and PII data privacy regulations, and personnel must undergo background checks. Bidders must submit their proposals as a single PDF via the eVA platform and certify compliance with ethics, non-discrimination, and immigration laws. Invoicing is handled through specific VDH channels, with payments under 10,000 dollars eligible for the Small Purchase Charge Card.

Virginia Department of Health

POSTED

DEADLINE

Healthcare Outcomes & ROI AnalystThis subcontract opportunity for a Healthcare Outcomes and ROI Analyst supports prime contractors working on projects for the Oklahoma Office of Management and Enterprise Services. The selected provider will be responsible for establishing data-collection structures and performing critical analyses, including return on investment, feasibility, patient outcomes, and cost avoidance. Additionally, the role involves creating documentation-of-care standards and delivering comprehensive outcome-measurement frameworks and ROI reports. Technical requirements for the project include proficiency in data validation using tools such as Tableau, SAS, or SPSS. The contract falls under NAICS code 541690. Interested parties should note the response deadline of November 18, 2026, for this Oklahoma state agency initiative.

Oklahoma Office of Management and Enterprise Services

POSTED

DEADLINE

IT Security & Compliance ConsultantLOFT Community Services is seeking an IT Security and Compliance Consultant for a subcontracting role to perform security assessments and compliance audits for prime contractors. The primary objective is to evaluate the technical and security capabilities of a proposed ERP platform to ensure all outcomes are transparent, defensible, and auditable. The selected consultant must possess specialized expertise in Canadian privacy standards as well as SOC2 or similar security frameworks to deliver a comprehensive security assessment report and compliance certification. This opportunity was posted on October 22, 2026, with a response deadline of November 18, 2026. The work is categorized under NAICS code 541690 and will be performed within Canada. Interested parties can find further details through the Ontario Tenders portal.

LOFT Community Services

POSTED

DEADLINE

More opportunities from Texas → Ut Health San Antonio

Same awarding agency

Information Security and TX-RAMP Compliance SpecialistThis subcontract for an Information Security and TX-RAMP Compliance Specialist involves performing security assessments and certifications for prime contractors working on UT Health San Antonio projects. The selected provider will be responsible for completing Risk Assessment Workbooks and ensuring all processes align with ISO 27005 and ISO 5/7 standards. A primary objective of the engagement is the management and delivery of TX-RAMP Level II Certification. Technical requirements include the validation of encryption protocols and Disaster Recovery architecture, specifically focusing on Recovery Time Objectives and Recovery Point Objectives. The contract is categorized under NAICS code 541690, with a response deadline of November 17, 2026. Final deliverables consist of the completed TX-RAMP Level II Certification and the associated Risk Assessment Workbook.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Software Validation and Regulatory Compliance ServicesThis subcontract for Software Validation and Regulatory Compliance Services supports prime contractors on UT Health San Antonio projects. The scope of work focuses on providing validation and quality assurance for regulated cellular therapy software, specifically executing user acceptance testing and validation scripts for CAR-T and TIL workflows. Key technical responsibilities include the configuration of Chain-of-Identity and Chain-of-Custody processes to ensure strict adherence to 21 CFR Part 11 and HIPAA compliance standards. The selected provider is responsible for delivering critical documentation, including Validation Summary Reports and UAT sign-off. This opportunity falls under NAICS code 541690 and is associated with UT Health San Antonio. Interested parties must submit their responses by the deadline of November 17, 2026.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Epic and Clinical Systems Integration ServicesThis subcontract for Epic and Clinical Systems Integration Services involves performing technical integration between cellular therapy lab software and enterprise ecosystems for prime contractors on UT Health San Antonio projects. The scope of work focuses on developing bidirectional interfaces with Epic EHR, LIMS, and ERP systems utilizing HL7, FHIR, APIs, and web services. Key technical requirements include configuring identity management through Active Directory and mapping critical patient, product, and manufacturing data to ensure the delivery of fully operational and validated data interfaces. The opportunity is categorized under NAICS code 541512 and was posted on October 9, 2026, with a response deadline of November 17, 2026. Interested parties can find further details through the UT Health San Antonio procurement portal.

Computer Systems Design Services

POSTED

DEADLINE

Cellular Therapy Lab Software

Solicitation # 745-27-P07

The University of Texas Health Science Center at San Antonio (UTHSA) is soliciting proposals under solicitation 745-27-P07 for a comprehensive Cellular Therapy transplant program platform. The required software must enable the documentation of processing actions, policy enforcement, equipment and supply monitoring, and audits. The solution must support autologous, allogeneic, CAR-T, and TIL workflows while maintaining chain-of-identity and chain-of-custody. Furthermore, the platform must integrate with EPIC and other enterprise systems and comply with strict regulatory environments, including HIPAA, FERPA, FDA considerations, state privacy laws, and emerging AI regulations. The contract is for an initial three-year term with the possibility of two additional one-year renewals. Award selection is based on the most advantageous proposal, with scoring weighted toward the quality of goods and services, cost, reputation, and the extent to which the solution meets university needs. Proposers must adhere to Texas government codes regarding non-boycott of Israel and non-discrimination against firearm entities, and may be required to obtain TX-RAMP Certification Level II. Payment is set at NET 30 days via ACH or Single-Use Account cards, and the university does not guarantee any specific volume of services. All proposals must be submitted electronically through the Euna procurement portal by November 17, 2026.

Software Publishers

POSTED

DEADLINE

IT Risk & AI Governance AuditorThe IT Risk and AI Governance Auditor subcontract for UT Health San Antonio involves performing critical risk assessments and security validations for prime contractors on hospital projects. The selected provider will be responsible for completing the UTHSA Risk Assessment Workbook and conducting detailed risk management analysis in accordance with ISO 27005:2011 standards. Additionally, the scope includes performing AI triage to evaluate cybersecurity risks, legal exposure, and data governance. To qualify for this engagement, personnel must hold professional certifications such as ISO 27001/27005, CISSP, or CISM. The primary deliverables for the contract are a signed Risk Assessment Workbook and a comprehensive AI Governance Triage Report. Interested parties must submit their responses by November 18, 2026, under NAICS code 541690.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Joint Commission & Clinical Compliance SpecialistThis subcontract opportunity with UT Health San Antonio seeks a Joint Commission and Clinical Compliance Specialist to provide subject matter expertise for hospital projects. The selected contractor will be responsible for mapping Joint Commission standards to software workflows, reviewing internal policies to ensure digital alignment, and validating that system auditability adheres to all regulatory requirements. Key deliverables include a comprehensive compliance mapping document and validated system configuration requirements. Qualified candidates must possess CPHQ certification or equivalent expertise in accreditation. The solicitation was posted on October 8, 2026, with a response deadline of November 18, 2026. This engagement falls under NAICS code 541618 and focuses on ensuring that prime contractor software implementations meet stringent healthcare regulatory standards.

Other Management Consulting Services

POSTED

DEADLINE

Healthcare IT Implementation ServicesThis subcontract for Healthcare IT Implementation Services involves providing technical configuration and deployment support for prime contractors on UT Health San Antonio hospital projects. The selected provider will be responsible for developing detailed work plans with milestones, managing project timelines using PMP or Agile methodologies, and ensuring all software configurations align with university policies and Joint Commission standards. The primary objective is the delivery of a fully operational software system, accompanied by a comprehensive Project Work Plan and Implementation Reports. This engagement falls under NAICS code 541511 and is managed by UT Health San Antonio, with a response deadline set for November 18, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Hospital Competencies Management Software ProviderThis subcontract opportunity with UT Health San Antonio seeks a provider to supply a software platform designed for prime contractors to track clinical competencies and manage clinical ladder programs. The selected vendor will deliver a functional competency management system via SaaS, PaaS, or an on-premises deployment, featuring auditable reporting tools that align with Joint Commission standards and clinical education workflows. The provider must ensure strict adherence to ISO 27005:2011 and UTHSA AI Governance triage requirements. Interested parties should note that the response deadline is November 18, 2026, and the project falls under NAICS code 513210.

Software Publishers

POSTED

DEADLINE

Change Management & Training ProviderThis subcontract opportunity with UT Health San Antonio seeks a Change Management and Training Provider to support software implementations for prime contractors. The selected provider will be responsible for developing comprehensive training programs, user manuals, and quick-reference guides tailored for HR staff and executives. Key operational duties include executing change management strategies and providing critical support during User Acceptance Testing to ensure seamless user adoption. All deliverables, including training materials and manuals, must strictly adhere to PDAA accessibility standards. The provider is required to submit formal training completion reports as part of their performance obligations. Interested parties should note the response deadline of November 19, 2026, for this engagement categorized under NAICS code 611430.

Professional and Management Development Training

POSTED

DEADLINE

Organizational Design & Workforce Planning ConsultantThis subcontract opportunity for an Organizational Design and Workforce Planning Consultant supports UT Health San Antonio by providing functional configuration of organizational modeling capabilities. The selected prime contractor will be responsible for defining workforce attributes and management structures, as well as configuring executive dashboards, reporting relationships, and spans of control to ensure alignment with strategic objectives. Key deliverables include comprehensive design blueprints and fully configured organizational models. The project falls under NAICS code 541612 and requires the contractor to maintain professional liability insurance. Interested parties must submit their responses by the deadline of November 19, 2026. This engagement focuses on optimizing the platform's structural capabilities to improve workforce planning and organizational oversight for the institution.

Human Resources Consulting Services

POSTED

DEADLINE

HRIS Integration and Data Enablement SpecialistThe HRIS Integration and Data Enablement Specialist subcontract for UT Health San Antonio focuses on the technical integration and consolidation of workforce data from various HRIS systems. The selected provider will be responsible for developing API connections, performing data mapping and normalization, and establishing a current-state workforce baseline to deliver a validated data pipeline. This role requires deep expertise in enterprise systems such as Workday, Oracle, and SAP, while ensuring strict adherence to NIST and PCI DSS compliance standards. This opportunity falls under NAICS code 541511 and was posted on October 8, 2026, with a response deadline of November 19, 2026. The project supports prime contractors on software implementation initiatives within the Texas state agency framework. Interested parties can find further details through the provided Bonfire hub portal.

Custom Computer Programming Services

POSTED

DEADLINE

Organizational Design and Workplace Planning Platform

Solicitation # 745-27-P01

UT Health San Antonio is soliciting proposals under solicitation number 745-27-P01 for an enterprise-level Organizational Design and Workforce Planning Platform. The goal is to transition from manual, fragmented workforce planning to an integrated, data-driven approach. The selected solution must provide capabilities for modeling and managing organizational requirements, integrate workforce data from multiple HRIS systems concurrently, and offer configurable dashboards and reporting tools for executives, HR, and finance. The scope of work includes implementation, configuration, data enablement, training, and ongoing technical and functional support, with a specific requirement for user acceptance testing and a reliable current-state baseline to support future-state planning and merger integration. Proposals are due by November 19, 2026, at 3:00 PM Central Prevailing Time and must be submitted exclusively through the Euna procurement portal. Evaluation is based on the most advantageous proposal, with scored criteria focusing on the cost of goods and services (20 points) and the reputation of the proposer and its offerings (20 points). Mandatory requirements include the completion of the Policy Driven Adoption for Accessibility (PDAA) vendor self-assessment, as failure to do so results in automatic elimination. Additionally, proposers must certify compliance with Texas laws regarding Historically Underutilized Businesses, the boycott of Israel, and business dealings with prohibited entities such as Iran or Sudan. Contract administration involves payment via electronic funds transfer (EFT/ACH) with net 30-day terms, requiring invoices to reference a valid purchase order. The contractor must adhere to strict confidentiality and data security standards, including NIST and PCI DSS, and comply with University Rule UTS 165 regarding computer system access. While the university does not guarantee a specific volume of services or compensation, the selected vendor will be expected to provide a detailed pricing and delivery schedule and maintain all required insurance coverage throughout the term of the agreement.

Human Resources Consulting Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS