Information Security & Data Protection Compliance (Subcontractor Support)

The contract seeks a subcontractor to provide third-party support for compliance with state-mandated data protection requirements under the jurisdiction of the South Carolina State Fiscal Accountability Authority. The scope includes completing the Service Provider Self-Assessment Questionnaire, ensuring audit readiness across all relevant systems and processes, developing and maintaining comprehensive data protection policies, and overseeing employee vetting procedures to meet regulatory standards. This work is critical to maintaining the agency’s adherence to state-level information security obligations and avoiding penalties or operational disruptions stemming from non-compliance. The opportunity is classified as a subcontract under NAICS code 541920, and responses are due by August 7, 2026. While no set-aside type or point of contact is specified, the work is expected to be performed in support of South Carolina state operations, with all deliverables aligned to enforce consistent and auditable compliance practices. The contract underscores the need for a vendor with demonstrated expertise in regulatory compliance frameworks and experience navigating public sector data protection mandates. All activities under this agreement must be conducted with precision and in full alignment with the state’s accountability and security protocols.