HIPAA/SOC 2 Compliance & Security Auditor

This subcontract opportunity is for a HIPAA/SOC 2 Compliance and Security Auditor to support prime contractors working on projects for the Maryland Department of Health and Mental Hygiene. The selected provider will be responsible for performing independent security attestations and audits, specifically validating the implementation of encryption standards, multi-factor authentication, single sign-on, and role-based access controls. The scope of work includes conducting rigorous audits using penetration testing tools to ensure adherence to SOC 2 Type II, HIPAA, and NIST standards. The contractor is expected to deliver formal security attestation reports and compliance certifications. Interested parties should note the response deadline of October 29, 2026, and the associated NAICS code 541690.