Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance Auditor

Active

State & Local

Response Deadline11/06/2026, 08:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Washington → Information Technology Department

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

WA, USA

Set-Aside

NONE

Documents

This scope was carved out of 1479146A.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFI - City of Seattle Utilities Customer Service System

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 9

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 08:00:00 AM UTCin 25 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyWashington → Information Technology Department

ContactsNo contacts available

OfficeN/A

Organization / AgencyWashington → Information Technology Department

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Validates security, privacy, and regulatory compliance for prime contractors on City of Seattle ITD projects. Reviews SOC 1 and SOC 2 reports and verifies PCI DSS and TCPA compliance for payment processing and communications. Uses security auditing tools. Delivers compliance validation reports and security certifications.

Similar Contracts

Same NAICS industry code

LIPTM00417__ENI IPT_NEW TO (FOE)_EXP ISR SUPT_N6523620F3023_SRC_CPFFScientific Research Corporation is awarded a new task order under the Naval Information Warfare Systems agency, specifically through Niwc Atlantic. This contract, identified as a bridge to N6523619D4809, focuses on providing expanded ISR support for the ENI IPT. The work is classified under NAICS code 541690 and utilizes a cost-plus-fixed-fee contract type. The performance of this contract will take place in North Charleston. Administrative oversight is managed by Contracting Officer Lisa R. Matthews and Secondary Point of Contact Shanicqua N. Middleton. The project is listed as a forecast with a posted date of October 11, 2026.

POSTED

DEADLINE

Digital Forensics and Incident Response (DFIR)This subcontract for Digital Forensics and Incident Response supports prime contractors on California Department of State Hospitals projects by providing deep-dive investigations into security breaches. The selected provider will identify the causes of improper data acquisition, determine if triggers for California Civil Code 1798.29 and 1798.82 have been met, and develop comprehensive corrective action plans to contain breaches. Due to the nature of the work, specialized expertise in HIPAA and CCPA regulations is required. The contractor is responsible for delivering detailed written breach investigation reports within 10 working days. This opportunity is categorized under NAICS code 541690 and is associated with the state of California. Interested parties should note the response deadline of October 23, 2026.

California Department of State Hospitals

POSTED

DEADLINE

Independent Cost Estimator / Quantity SurveyorThis subcontract opportunity with Civida is for an Independent Cost Estimator or Quantity Surveyor to provide pricing validation and elemental cost estimates for affordable row housing projects. The selected professional will be responsible for analyzing Class B, C, and D cost estimates and performing value engineering to ensure project costs remain aligned with approved budgets through the use of specialized cost estimation software. Qualified candidates must hold a Quantity Surveyor designation or be a Certified Cost Professional. Key deliverables for the contract include the submission of detailed elemental cost estimates and comprehensive value engineering reports. The response deadline for this solicitation is November 6, 2026.

POSTED

DEADLINE

Door Hardware ConsultantThe Region of Peel is seeking a Door Hardware Consultant for a subcontracting role to support police facility renovation projects. The selected consultant will be responsible for providing specialized hardware specifications and detailed door-hardware schedules to prime contractors, while offering expert advice on security solutions tailored to meet specific police operational requirements. Qualified candidates must possess extensive expertise in commercial and institutional security hardware and be able to obtain the necessary police security clearance. The primary deliverables for this engagement include comprehensive technical recommendations and a detailed door-hardware schedule. Responses for this opportunity are due by November 3, 2026.

POSTED

DEADLINE

Tijuana River Valley Chemical Pollution Impact Investigation: Retrospective Epidemiological Study

Solicitation # 13417

The County of San Diego Public Health Services is soliciting quotes for RFQ 13417 to design, implement, and conduct a Retrospective Epidemiological Study as part of the Tijuana River Valley Chemical Pollution Impact Investigation. The primary objective is to assess health effects resulting from past emissions in the Tijuana River Valley by defining geographic exposure zones, linking de-identified hospital, cancer, and mortality data, and evaluating historical health outcomes over a look-back period of at least 10 years. The anticipated contract term is an initial base period of 15 months, with performance focused on San Diego County. The County will award the contract based on best value, evaluating technical merit, experience, capacity, compliance history, availability, and price, while also considering cultural competency and sustainability. Required deliverables include a Quality Assurance/Quality Control plan due within 120 days of execution and final processed data in approved formats. Contractors must comply with HIPAA, California state confidentiality laws, and the County's Trauma-Informed System. Proposals must be submitted via BuyNet by October 30, 2026, and must include specific required forms, a technical exhibit, and a firm fixed price payment schedule.

County of San Diego

POSTED

DEADLINE

Healthcare Cybersecurity Compliance ConsultantThe Healthcare Cybersecurity Compliance Consultant subcontract involves performing security validation and compliance auditing for prime contractors working on Central Texas Community Health Center projects. The scope of work focuses on validating safeguards against data exfiltration and insider threats, auditing role-based access controls, and ensuring strict adherence to HIPAA, SOC II, and NIST frameworks for data both at rest and in transit. The successful provider will be responsible for delivering comprehensive security validation reports and official compliance certifications. Qualified candidates must hold CISSP or CISA certifications to meet the technical requirements of the role. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026, with a response deadline of November 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation RFP2026-09-001.

CENTRAL TEXAS COMMUNITY HEALTH CENTER

POSTED

DEADLINE

Third-Party Security Assessment & Compliance AuditorThe Third-Party Security Assessment and Compliance Auditor subcontract for Norfolk County involves providing independent security validation and penetration testing for prime contractors working on municipal projects. The selected provider will utilize specialized toolsets to audit environments for SOC 2 Type II and ISO 27001 alignment, while also verifying PCI DSS compliance for payment gateways. The primary deliverables include formal compliance certification audits and detailed independent penetration test reports. This opportunity is categorized under NAICS code 541690 and was posted on October 9, 2026. Interested parties must submit their responses by the deadline of November 3, 2026. The contract is managed by Norfolk County and focuses on ensuring rigorous security standards across its municipal infrastructure and payment systems.

POSTED

DEADLINE

Regional Demographic and Geographic AnalystThe Region of Waterloo is seeking a Regional Demographic and Geographic Analyst for a subcontracting role to support prime contractors on strategic planning projects. The selected provider will be responsible for conducting targeted demographic and geographic analyses, utilizing regional census data and specialized modeling software to evaluate how local and global trends affect diverse population groups and Area Municipalities. The primary deliverable for this engagement is a comprehensive Geographic and Demographic impact analysis that will be integrated into the final strategic report. Interested parties must submit their responses by October 30, 2026, in accordance with the solicitation posted on October 9, 2026, under NAICS code 541690.

Region of Waterloo

POSTED

DEADLINE

Cybersecurity Compliance and ATO Support

Information Technology Division

POSTED

DEADLINE

Economic Methodologist & Data Scientist

Department Of Commerce Noaa

POSTED

DEADLINE

R--Technical Services Support

Solicitation # 89243126RSC000172

The Department of Energy Office of Science is soliciting a single contractor to provide comprehensive technical security support services in Oak Ridge, Tennessee. This 8(a) set-aside contract, under NAICS code 541690, supports the Office of Safety and Security, the Office of Science Consolidated Service Center, and the Oak Ridge Office of Environmental Management. The primary mission is to implement and administer Safeguards and Security programs to protect critical national security assets, including personnel, information, and Category I-IV Special Nuclear Material. The scope of work encompasses personnel security, industrial security, information security, and general program support, with a specific requirement to administer the personal identity verification and credentialing program under Homeland Security Presidential Directive-12. The contractor is required to provide experienced management, including a Program Manager designated as Key Personnel, and must implement a comprehensive Quality Control Plan subject to government review and approval. All personnel must obtain and maintain appropriate access authorizations and adhere to strict protocols for handling classified information and Controlled Unclassified Information, such as UCNI, ECI, PII, and OUO. Performance must comply with all applicable DOE directives and federal, state, and local laws. The contractor is also responsible for maintaining a federally mandated Worker Safety and Health Program and providing regular activity reports to the Contracting Officer's Representative.

Sc Oak Ridge Office

POSTED

DEADLINE

FY27 - EXPERT REVIEW BOARS

Solicitation # FY27-EXPERT-REVIEW-BOARDS

The Department of Agriculture, through the Risk Management Agency (RMA), is issuing a Sources Sought Notice to identify qualified private sector entities for addition to a general pool of Blanket Purchase Agreements (BPAs). The objective is to secure independent reviewers with specialized expertise as actuaries or underwriters to evaluate insurance policies, plans of insurance, and related modifications. These services are critical for ensuring the proper functioning of insurance programs and include providing actuarial services related to loss adjustment and rating plans, all performed in accordance with the Federal Crop Insurance Act and relevant statutory authorities under 7 USC Chapter 36 and 7 USC 1508. Interested respondents must demonstrate technical competence in financial implications of future contingent events for actuarial roles, or experience in insurance policy design and risk classification for underwriting roles. Submissions must include basic company information such as CAGE Code, SAM UEI number, and active SAM status, along with a detailed capability statement and identification of business size and socioeconomic category. Responses are due by September 30, 2027, and should be submitted via email to the designated Contract Specialist and Contracting Officer. This effort is categorized under NAICS code 541690 and is managed by the Fpac Bus Cntr-Acq Division in Washington, DC.

Fpac Bus Cntr-Acq Division

POSTED

DEADLINE

More opportunities from Washington → Information Technology Department

Same awarding agency

Utility-Specific Translation Services

Translation and Interpretation Services

POSTED

DEADLINE

Digital Accessibility Consultant

Custom Computer Programming Services

POSTED

DEADLINE

IAM and SSO Configuration Specialist

Other Computer Related Services

POSTED

DEADLINE

Oracle Utilities Systems Integrator

Computer Systems Design Services

POSTED

DEADLINE

RFI - City of Seattle Utilities Customer Service System

Solicitation # 1479146A

The City of Seattle, through its Information Technology Department, has issued Request for Information 1479146A to explore modern customer engagement and management solutions for Seattle City Light and Seattle Public Utilities. This RFI is for informational purposes only to help the city refine requirements for a potential future competitive solicitation; therefore, no contract will be awarded based on this specific request. The city is seeking a Utilities Customer Service Portal that provides holistic digital self-service account management, enhanced case management for representatives, and robust analytics to improve the overall customer experience across electric, water, wastewater, drainage, and solid waste services. The desired solution must integrate with the Oracle Utilities solution stack and comply with the city standard for identity management using Oracle Identity Cloud Service and Single Sign-On protocols. Key functional requirements include secure login, billing and usage history, chatbot support, multilingual translation, and program enrollment for discounted rates or conservation. Technical and regulatory compliance is critical, with mandates for ADA and WCAG 2.1 accessibility, PCI standards, SOC 1 and SOC 2 reports, and adherence to the Telephone Consumer Protection Act. Responses are due by November 6, 2026, via the City's Procurement Portal and must include organization qualifications, responses to specific customer experience and technical user stories, typical cost structures, and implementation and change management approaches.

Computer Systems Design Services

POSTED

DEADLINE

SAP S/4 HANA Landscape AnalystThe SAP S/4 HANA Landscape Analyst subcontract involves evaluating technical environments for prime contractors working with the City of Tacoma Information Technology Department. The selected provider will audit SAP S/4 HANA and over 15 supplemental platforms to detect unnecessary customizations, variations, and complexities. The primary goal is to produce a Current State Validation report and a Technical Gap Analysis, which will serve as the foundation for prioritized roadmaps and business cases for future technology investments. Qualified candidates must hold SAP Certified Application Associate status and maintain a vendor-neutral approach to their analysis. This opportunity falls under NAICS code 541511 and is managed by the Information Technology Department in Washington. Interested parties must submit their responses by the deadline of November 17, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

in about 1 month

HR/Payroll Data Governance SpecialistThis subcontract opportunity for an HR/Payroll Data Governance Specialist supports the City of Tacoma Information Technology Department in establishing robust data architecture and governance frameworks. The primary objective is to create master data foundations and standardize processes across HR, Payroll, and Retirement ecosystems, specifically analyzing data quality across more than 15 fragmented platforms with SAP S/4 HANA serving as the anchor ERP. The selected contractor will utilize the Data Governance Institute framework or a similar methodology to deliver a comprehensive Data Governance Framework and a Master Data Definition document. Interested parties must submit their responses by November 17, 2026, under NAICS code 541512.

Computer Systems Design Services

POSTED

DEADLINE

in about 1 month

Public Safety Payroll and FLSA Compliance ConsultantThe Public Safety Payroll and FLSA Compliance Consultant subcontract involves a specialized assessment of payroll and timekeeping requirements for prime contractors working on City of Tacoma Information Technology Department projects. The consultant will focus on analyzing work periods under FLSA section 207(k), evaluating complex scheduling, and reviewing premium and callback pay. A critical component of the project includes assessing the integration of UKG Telestaff with SAP S/4 HANA through field visits and interviews to ensure operational efficiency. The selected provider must possess expert knowledge of public safety labor laws and FLSA section 207(k) regulations. The primary deliverables for this engagement are a comprehensive requirements document and a detailed gap analysis. Interested parties should note the response deadline of November 17, 2026, for this specialized administrative and technical consulting effort.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 month

Technology Landscape Assessment

Solicitation # HR26-0214F

The City of Tacoma Information Technology Department is seeking a vendor-neutral consultant to conduct a Technology Landscape Assessment of its HR, Payroll, and Retirement systems. The primary objective is to align fragmented technology functions, currently anchored by SAP S/4 HANA and over 15 other platforms, into a cohesive strategy. The consultant will validate current pain points, define shared goals, and determine if system gaps are caused by technology limitations or issues with process design, data quality, and governance. A critical component of the scope involves assessing complex public safety requirements, including FLSA section 207(k) work periods and scheduling. Key deliverables include a strategic framework for data governance, criteria for technology standardization versus differentiation, a prioritized roadmap, and requirements for future requests for proposals. This solicitation, numbered HR26-0214F, has an estimated value of 250,000 dollars and a response deadline of November 17, 2026. The resulting contract will be for a one-year period with an option to renew for one additional year, requiring a signed agreement before March 2027. Performance will follow a hybrid model with some on-site work required. Evaluation will be conducted by a Selection Advisory Committee, which may select one or more consultants based on their qualifications and interviews. Awardees must comply with City of Tacoma standard terms, including specific insurance requirements, Washington State prevailing wage laws, and sustainability standards. Invoicing is managed through SAP Ariba or electronic submission to the accounts payable department.

Human Resources Consulting Services

POSTED

DEADLINE

in about 1 month

Power Platform Analytics and User Adoption ServicesThe Power Platform Analytics and User Adoption Services subcontract supports the City of Seattle Information Technology Department by implementing monitoring tools and change management strategies for prime contractors. The selected provider will utilize Power BI to create monitoring reports, metrics, and alerts, while also developing stakeholder engagement plans and materials to drive user adoption. Qualified candidates must possess demonstrated experience in IT change management and data analytics. Key deliverables for this engagement include the production of monitoring dashboards, detailed metric reports, and comprehensive change management and adoption plans.

Marketing Consulting Services

POSTED

DEADLINE

Power Platform Training and CoE EstablishmentThis subcontract focuses on providing technical training and enablement for prime contractors working on projects for the City of Seattle Information Technology Department. The scope of work includes the creation of training materials, the delivery of workshops, and the provision of coaching and mentoring for departmental users. A primary objective of the contract is the establishment of a Center of Excellence using the Microsoft CoE Starter Kit to ensure a sustainable operational model. Qualified providers must possess demonstrated experience in adult learning principles and the implementation of Centers of Excellence. Key deliverables for the engagement include comprehensive training manuals, conducted workshops, and a fully functioning CoE operational model. The project is categorized under NAICS code 611430 and is managed by the Information Technology Department in Washington.

Professional and Management Development Training

POSTED

DEADLINE

Power Platform Maintenance and Legacy App AssessmentThis subcontract for the City of Seattle Information Technology Department focuses on Power Platform maintenance and legacy application assessment. The selected provider will deliver technical support and performance tuning for prime contractors, specifically troubleshooting existing applications and flows while utilizing Power Platform monitoring tools. A primary objective of the engagement is to conduct comprehensive audits of legacy applications to ensure they align with current security and governance standards. The contractor must possess specialized experience in troubleshooting enterprise Power Platform environments to successfully deliver optimized applications and detailed performance tuning reports. This opportunity is categorized under NAICS code 541513, with a response deadline set for October 30, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS