Data Systems & Information Security (ISSP/ATO)

The contract requires the development and maintenance of secure information systems to handle sensitive health data under the stringent security standards of the Department of Health and Human Services. Key responsibilities include creating a comprehensive Information System Security Plan, performing thorough risk assessments, and obtaining Authority to Operate by meeting all HHS compliance requirements. The work must ensure the confidentiality, integrity, and availability of health-related information systems, with a focus on continuous monitoring and mitigation of cybersecurity threats. All activities must align with federal healthcare data protections and regulatory frameworks governing biomedical and clinical data. This subcontract is issued under NAICS code 541512 for computer systems design services and is managed by the National Institutes of Health’s NHLBI division. Proposals must be submitted by June 18, 2026, and performance is expected to support federal health operations though specific locations are not identified. The scope demands expertise in federal information security protocols, experience with HHS ATO processes, and the ability to deliver documentation and controls that satisfy rigorous audit and compliance standards. Successful offerors must demonstrate proven capabilities in securing health information systems and managing end-to-end security lifecycle activities from planning through operational authorization.