Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Healthcare IT Security & Compliance Auditor

Open

State & Local

Response Deadline12/09/2026, 03:00:00 PM CST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Healthcare IT Security and Compliance Auditor subcontract for UT Health San Antonio involves performing critical security validation and compliance auditing for prime contractors. The selected provider will conduct assessments based on EIR IT Security requirements, validate read-only access controls, and ensure strict adherence to HIPAA and Texas records-retention laws. The primary deliverables for this engagement include comprehensive security validation reports and formal compliance certifications. This opportunity is categorized under NAICS code 541690 and requires specialized expertise in Texas state records laws. Interested parties must submit their responses by the deadline of December 9, 2026. The contract focuses on maintaining high security standards and regulatory alignment within the healthcare IT infrastructure of the institution.

General Info

Healthcare IT security auditing for UT Health San Antonio ensuring HIPAA and Texas compliance.

Agency

Texas → Ut Health San Antonio

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

TX, USA

Set-Aside

NONE

Documents

This scope was carved out of 745-27-P04.

The full solicitation package (7 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Archiving Software Implementation for axiUm Historical Data

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 2

subcontract

Response DeadlineDec 9

Submission deadline

Response Deadline

12/09/2026, 03:00:00 PM CSTin about 1 month

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyTexas → Ut Health San Antonio

ContactsNo contacts available

OfficeN/A

Organization / AgencyTexas → Ut Health San Antonio

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security validation and compliance auditing for prime contractors on UT Health San Antonio projects. Conducts assessments based on EIR IT Security requirements, audits for HIPAA and Texas records-retention compliance, and validates read-only access controls. Requires expertise in Texas state records laws. Delivers security validation reports and compliance certifications.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. Performance for this contract will take place in California. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 1 hour ago

DEADLINE

Quality Assurance (QA) ConsultancyThis Quality Assurance Consultancy subcontract for Oil & Gas Development Company Limited (OGDCL) focuses on the establishment and auditing of quality management systems for prime contractors operating on OGDCL projects in Pakistan. The selected consultant will be responsible for developing Quality Management Plans, conducting comprehensive system audits of contractor quality processes, and managing non-conformance reports to ensure operational standards are met. Key deliverables for this engagement include Approved Quality Plans, detailed Quality Audit Reports, and the formulation of corrective action plans. To qualify for this role, the consultant must hold an ISO 9001 Lead Auditor certification. Interested parties must submit their responses by November 23, 2026.

Oil & Gas Development Company Limited (OGDCL)

POSTED

about 10 hours ago

DEADLINE

Independent Security Assessment and Authorization (A&A)This subcontract opportunity is for the Independent Security Assessment and Authorization (A&A) project supporting the California Department of Consumer Affairs. The selected provider will perform independent third-party security testing and compliance auditing for prime contractors, ensuring adherence to NIST SP 800-53 and California SAM/SIMM standards. Key deliverables include annual security testing, vulnerability scanning, the generation of Independent Security Assessment Reports, and the validation of Plans of Action and Milestones. The procurement is categorized under NAICS code 541690. Interested parties must submit their responses by the deadline of December 8, 2026. Further details regarding the solicitation can be accessed through the Cal eProcure portal.

California Department of Consumer Affairs

POSTED

about 18 hours ago

DEADLINE

in about 1 month

Life Safety and Accessibility Compliance SpecialistThe Life Safety and Accessibility Compliance Specialist subcontract involves providing specialized regulatory reviews for prime contractors working on City of Hamilton corporate facility projects in Canada. The selected provider will be responsible for inspecting facilities to ensure fire and life safety code compliance and conducting AODA accessibility audits to identify and document physical barriers. The primary deliverables for this engagement are detailed deficiency reports and professional recommendations for necessary life safety and accessibility upgrades. To qualify for this role, the contractor must hold professional certification as either a Certified Fire Protection Specialist or an Accessibility Consultant. Interested parties must submit their responses by the deadline of December 8, 2026. This opportunity is categorized under NAICS code 541690 and is managed through the City of Hamilton's procurement system.

City of Hamilton

POSTED

about 23 hours ago

DEADLINE

in about 1 month

Digital Accessibility AuditorThe Digital Accessibility Auditor subcontract involves providing independent accessibility validation for prime contractors working on University of Maryland Global Campus projects. The selected provider will be responsible for testing learning modules and platforms to ensure full compliance with Section 508 and WCAG 2.1 AA standards. Key deliverables include the production of Accessibility Conformance Reports using VPAT version 2.4 or later, along with comprehensive audit documentation and the development of strategic remediation plans to address any identified accessibility gaps. This opportunity is categorized under NAICS code 541690 and was posted on November 6, 2026. Interested parties must submit their responses by the deadline of November 20, 2026, at 3:00 PM. The contract is managed through the state of Maryland's procurement system.

POSTED

about 23 hours ago

DEADLINE

CMMC Level 2 Compliance SupportThis subcontract for CMMC Level 2 Compliance Support focuses on providing cybersecurity assessments and remediation services for prime contractors associated with DLA Weapons Support Land Supply Chain projects. The primary objective is to conduct CMMC Level 2 self-assessments and implement necessary safeguards to protect covered defense information, ensuring strict adherence to DFARS 252.204-7012 and NIST SP 800-171 frameworks. The final deliverables include a comprehensive compliance report and a completed self-assessment. The project is managed under NAICS code 541690 for the Department of Defense and will be performed in Corpus Christi, Texas. Interested parties should note the response deadline of November 16, 2026, for this specific cybersecurity initiative.

DLA WEAPONS SUPPORT LAND SUPPLY CHAIN

POSTED

DEADLINE

Privacy Impact Assessment (PIA) SpecialistThe Regional District of Nanaimo is seeking a Privacy Impact Assessment Specialist to provide expert privacy consulting for prime contractors involved in data collection projects. The selected subcontractor will be responsible for developing critical documentation regarding survey methodology, data storage, security, and retention practices to ensure the successful completion and approval of a Privacy Impact Assessment. A deep professional knowledge of the Freedom of Information and Protection of Privacy Act is required for this role. The primary deliverables for the contract include a comprehensive data management plan and all necessary completed PIA documentation. This opportunity is based in Canada and is categorized under NAICS code 541690.

Regional District of Nanaimo

POSTED

DEADLINE

PPE Program Administration and Sizing ServicesThis subcontract for PPE Program Administration and Sizing Services supports prime contractors on Northern Wasco County PUD projects in The Dalles, Oregon. The selected provider will manage the administrative aspects of clothing programs, which includes conducting employee sizing sessions and ensuring the ordering and issuance of garments are completed within 10 business days. Additionally, the contractor is responsible for maintaining detailed records of garment types and ratings while delivering regular sizing records and inventory reports. Beyond logistics, the contractor must provide essential technical and regulatory guidance to ensure all protective clothing meets OSHA and OAR requirements. Interested parties should note that the response deadline for this opportunity is November 25, 2026, and the services fall under NAICS code 541690.

Northern Wasco County PUD

POSTED

DEADLINE

Global Fire Risk Assessment InspectionsThe Global Fire Risk Assessment Inspections subcontract, issued by FCDO Services, requires the performance of on-site fire risk assessments for prime contractors managing FCDO facility projects. The scope of work involves conducting physical inspections of both owned and rented buildings to identify potential hazards and evaluate overall safety compliance. These services will be delivered across a diverse global portfolio, including sites within the UK, British Overseas Territories, and various international posts. The primary deliverable for this engagement is the production of completed Fire Risk Assessment reports for every inspected site. Interested parties should note that the response deadline for this opportunity is December 11, 2026. The contract is categorized under NAICS code 541690, focusing on specialized professional services to ensure the safety and regulatory compliance of the agency's global infrastructure.

POSTED

DEADLINE

in about 1 month

HVIP Performance Measurement and Data AnalysisThe HVIP Performance Measurement and Data Analysis subcontract supports the New Jersey Department of Law and Public Safety by providing specialized data collection and performance measurement for prime contractors. The selected provider will be responsible for developing tracking tools to monitor performance measures and conducting detailed analyses to determine how specific interventions impact retaliation rates. This role requires a high level of expertise in evidence-based model evaluation and strict adherence to victim data privacy laws. Key deliverables for this engagement include the production of comprehensive data reports, performance metrics, and final implementation reports. Interested parties should note that the response deadline is November 24, 2026, and the project falls under NAICS code 541690.

NJ Department of Law and Public Safety

POSTED

DEADLINE

Clinical Research Statistical Analysis ServicesThis subcontract for Clinical Research Statistical Analysis Services supports prime contractors on NIH/NIMHD research network projects. The scope of work involves developing statistical analysis plans, performing analysis on harmonized datasets, and providing essential support to the Data and Safety Monitoring Board. All technical work must be executed using SAS, R, or Stata while strictly adhering to NIH statistical guidelines and peer-review standards to ensure the delivery of validated data outputs and comprehensive statistical analysis reports. The project is associated with the National Institutes of Health and the Department of Health and Human Services, with the place of performance located in Bethesda. Interested parties should note the response deadline of November 23, 2026. The opportunity is categorized under NAICS code 541690, focusing on specialized biostatistical expertise to maintain the integrity of clinical research data.

National Institutes Of Health Nichd

POSTED

DEADLINE

NIST Compliance and Security Control MappingThis subcontract opportunity, titled NIST Compliance and Security Control Mapping, is issued by the Department of Defense IT Contracting Division for security auditing and mapping of prototypes on DISA E-ICAM projects. The selected provider will be responsible for mapping prototype functions to NIST SP 800-53 controls and ensuring strict alignment with the DoD Enterprise ICAM Reference Design and Desired Solution Attributes. The scope of work requires the application of NIST SP 800-53 and NIST SP 800-162 frameworks to produce comprehensive compliance matrices and security validation documentation. Qualified candidates must possess NIST certification or expert-level knowledge in the specified frameworks. The solicitation was posted on November 6, 2026, with a response deadline of November 30, 2026. This requirement falls under NAICS code 541690 and is designed to support prime contractors in meeting federal security standards for critical identity, credential, and access management infrastructure.

It Contracting Division - PL84

POSTED

DEADLINE

More opportunities from Texas → Ut Health San Antonio

Same awarding agency

Secure Archival Software VendorUT Health San Antonio is seeking a subcontract vendor to supply and implement a secure, read-only archival platform designed for prime contractors. The selected provider must deliver an operational system featuring a searchable user interface to facilitate reporting, auditing, and the retrieval of historical data, while maintaining a guaranteed availability rate of 99.5 percent. To ensure data integrity and legal compliance, the software must meet all HIPAA standards and successfully pass the EIR IT Security Risk Assessment. Interested parties should note that the response deadline for this opportunity is December 9, 2026.

Software Publishers

POSTED

DEADLINE

in about 1 month

axiUm Data Extraction and Migration SpecialistThis subcontract opportunity is for an axiUm Data Extraction and Migration Specialist to perform ETL services for historical data on behalf of prime contractors for UT Health San Antonio. The scope of work involves extracting patient clinical, financial, billing, and insurance claims data from axiUm production environments, mapping data fields to maintain complex relationships, and migrating the information into an archival system. The final deliverable is a migrated dataset with fully verified data integrity. Qualified providers must possess specialized knowledge of Texas records-retention requirements and maintain strict HIPAA compliance throughout the process. The solicitation was posted on November 2, 2026, with a response deadline of December 9, 2026. This project falls under NAICS code 541511 and is managed by UT Health San Antonio.

Custom Computer Programming Services

POSTED

DEADLINE

in about 1 month

Archiving Software Implementation for axiUm Historical Data

Solicitation # 745-27-P04

The University of Texas Health Science Center at San Antonio is soliciting proposals for an archiving software implementation to migrate historical patient, financial, billing, and claims data from the axiUm production environment. This initiative supports the transition to Epic Wisdom by providing a secure, read-only, and searchable user interface for authorized users to conduct reporting, audits, and record retrieval while enabling the retirement of the legacy system. The selected contractor must ensure data completeness and maintain a 99.5% system availability rate, adhering to strict HIPAA regulations, Texas records-retention requirements, and University cybersecurity standards. Proposals will be evaluated based on the overall advantage to the University, with primary scoring weights assigned to the extent the services meet University needs, quality of services, cost, and the proposer's reputation. Required certifications include compliance with the Texas Family Code, non-discrimination and equal opportunity standards, and a prohibition on boycotting Israel. Contractors must perform quarterly OIG sanctions checks and provide criminal background screenings for all personnel. All submissions must be processed electronically through the Euna portal, with payment terms set at net thirty days upon receipt of a valid purchase order.

Computer Systems Design Services

POSTED

DEADLINE

in about 1 month

Information Security and TX-RAMP Compliance SpecialistThis subcontract for an Information Security and TX-RAMP Compliance Specialist involves performing security assessments and certifications for prime contractors working on UT Health San Antonio projects. The selected provider will be responsible for completing Risk Assessment Workbooks and ensuring all processes align with ISO 27005 and ISO 5/7 standards. A primary objective of the engagement is the management and delivery of TX-RAMP Level II Certification. Technical requirements include the validation of encryption protocols and Disaster Recovery architecture, specifically focusing on Recovery Time Objectives and Recovery Point Objectives. The contract is categorized under NAICS code 541690, with a response deadline of November 17, 2026. Final deliverables consist of the completed TX-RAMP Level II Certification and the associated Risk Assessment Workbook.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Software Validation and Regulatory Compliance ServicesThis subcontract for Software Validation and Regulatory Compliance Services supports prime contractors on UT Health San Antonio projects. The scope of work focuses on providing validation and quality assurance for regulated cellular therapy software, specifically executing user acceptance testing and validation scripts for CAR-T and TIL workflows. Key technical responsibilities include the configuration of Chain-of-Identity and Chain-of-Custody processes to ensure strict adherence to 21 CFR Part 11 and HIPAA compliance standards. The selected provider is responsible for delivering critical documentation, including Validation Summary Reports and UAT sign-off. This opportunity falls under NAICS code 541690 and is associated with UT Health San Antonio. Interested parties must submit their responses by the deadline of November 17, 2026.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Epic and Clinical Systems Integration ServicesThis subcontract for Epic and Clinical Systems Integration Services involves performing technical integration between cellular therapy lab software and enterprise ecosystems for prime contractors on UT Health San Antonio projects. The scope of work focuses on developing bidirectional interfaces with Epic EHR, LIMS, and ERP systems utilizing HL7, FHIR, APIs, and web services. Key technical requirements include configuring identity management through Active Directory and mapping critical patient, product, and manufacturing data to ensure the delivery of fully operational and validated data interfaces. The opportunity is categorized under NAICS code 541512 and was posted on October 9, 2026, with a response deadline of November 17, 2026. Interested parties can find further details through the UT Health San Antonio procurement portal.

Computer Systems Design Services

POSTED

DEADLINE

Cellular Therapy Lab Software

Solicitation # 745-27-P07

The University of Texas Health Science Center at San Antonio (UTHSA) is soliciting proposals under solicitation 745-27-P07 for a comprehensive Cellular Therapy transplant program platform. The required software must enable the documentation of processing actions, policy enforcement, equipment and supply monitoring, and audits. The solution must support autologous, allogeneic, CAR-T, and TIL workflows while maintaining chain-of-identity and chain-of-custody. Furthermore, the platform must integrate with EPIC and other enterprise systems and comply with strict regulatory environments, including HIPAA, FERPA, FDA considerations, state privacy laws, and emerging AI regulations. The contract is for an initial three-year term with the possibility of two additional one-year renewals. Award selection is based on the most advantageous proposal, with scoring weighted toward the quality of goods and services, cost, reputation, and the extent to which the solution meets university needs. Proposers must adhere to Texas government codes regarding non-boycott of Israel and non-discrimination against firearm entities, and may be required to obtain TX-RAMP Certification Level II. Payment is set at NET 30 days via ACH or Single-Use Account cards, and the university does not guarantee any specific volume of services. All proposals must be submitted electronically through the Euna procurement portal by November 17, 2026.

Software Publishers

POSTED

DEADLINE

IT Risk & AI Governance AuditorThe IT Risk and AI Governance Auditor subcontract for UT Health San Antonio involves performing critical risk assessments and security validations for prime contractors on hospital projects. The selected provider will be responsible for completing the UTHSA Risk Assessment Workbook and conducting detailed risk management analysis in accordance with ISO 27005:2011 standards. Additionally, the scope includes performing AI triage to evaluate cybersecurity risks, legal exposure, and data governance. To qualify for this engagement, personnel must hold professional certifications such as ISO 27001/27005, CISSP, or CISM. The primary deliverables for the contract are a signed Risk Assessment Workbook and a comprehensive AI Governance Triage Report. Interested parties must submit their responses by November 18, 2026, under NAICS code 541690.

Other Scientific and Technical Consulting Services

POSTED

about 1 month ago

DEADLINE

Joint Commission & Clinical Compliance SpecialistThis subcontract opportunity with UT Health San Antonio seeks a Joint Commission and Clinical Compliance Specialist to provide subject matter expertise for hospital projects. The selected contractor will be responsible for mapping Joint Commission standards to software workflows, reviewing internal policies to ensure digital alignment, and validating that system auditability adheres to all regulatory requirements. Key deliverables include a comprehensive compliance mapping document and validated system configuration requirements. Qualified candidates must possess CPHQ certification or equivalent expertise in accreditation. The solicitation was posted on October 8, 2026, with a response deadline of November 18, 2026. This engagement falls under NAICS code 541618 and focuses on ensuring that prime contractor software implementations meet stringent healthcare regulatory standards.

Other Management Consulting Services

POSTED

about 1 month ago

DEADLINE

Healthcare IT Implementation ServicesThis subcontract for Healthcare IT Implementation Services involves providing technical configuration and deployment support for prime contractors on UT Health San Antonio hospital projects. The selected provider will be responsible for developing detailed work plans with milestones, managing project timelines using PMP or Agile methodologies, and ensuring all software configurations align with university policies and Joint Commission standards. The primary objective is the delivery of a fully operational software system, accompanied by a comprehensive Project Work Plan and Implementation Reports. This engagement falls under NAICS code 541511 and is managed by UT Health San Antonio, with a response deadline set for November 18, 2026.

Custom Computer Programming Services

POSTED

about 1 month ago

DEADLINE

Hospital Competencies Management Software ProviderThis subcontract opportunity with UT Health San Antonio seeks a provider to supply a software platform designed for prime contractors to track clinical competencies and manage clinical ladder programs. The selected vendor will deliver a functional competency management system via SaaS, PaaS, or an on-premises deployment, featuring auditable reporting tools that align with Joint Commission standards and clinical education workflows. The provider must ensure strict adherence to ISO 27005:2011 and UTHSA AI Governance triage requirements. Interested parties should note that the response deadline is November 18, 2026, and the project falls under NAICS code 513210.

Software Publishers

POSTED

about 1 month ago

DEADLINE

Cybersecurity & Compliance AuditorThis subcontract opportunity with UT Health San Antonio seeks a Cybersecurity and Compliance Auditor to provide independent security validation and auditing for prime contractors. The selected provider will be responsible for reviewing data encryption, access controls, and cyber liability protections to ensure platform compliance with NIST, PCI DSS, and University Rule UTS 165. The final deliverables for this engagement include a comprehensive security audit report and a formal compliance certification. Qualified candidates must hold a CISSP or CISA certification to perform these services. The solicitation was posted on October 8, 2026, with a response deadline of November 19, 2026. This project falls under NAICS code 541690 and is managed through the UT Health San Antonio procurement system.

Other Scientific and Technical Consulting Services

POSTED

about 1 month ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS