Data Security and Compliance Oversight

The contract titled Data Security and Compliance Oversight requires ongoing support to ensure cybersecurity compliance with the HIPAA Security Rule across both clinical and IT operations that handle protected health information and personally identifiable information. Core responsibilities include conducting regular risk assessments, performing vulnerability scans, and maintaining audit readiness to meet federal compliance standards. The scope encompasses continuous monitoring and remediation efforts to safeguard sensitive data within environments managed by the Maine office of the Department of Health and Human Services. The work is structured as a subcontract under NAICS code 541612, with responses due by June 17, 2026, and the solicitation was posted on May 18, 2026. Performance of the contracted services is expected to align with the operational needs of the agency’s Maine branch, though specific location details are not provided.