IT & Data Security Compliance Support

The contract seeks a subcontractor to deliver comprehensive IT and data security services focused on secure data storage, end-to-end encryption for data both in transit and at rest, and robust access control mechanisms to ensure only authorized personnel can interact with sensitive information. The provider must ensure full compliance with NIST guidelines and Vermont-specific privacy regulations, maintaining systems that are consistently audit-ready to support regulatory reviews and demonstrate adherence to state and federal standards. All solutions must be designed to meet rigorous cybersecurity requirements without compromising performance or scalability. The opportunity is categorized under NAICS code 541512 and is open for bidding with a deadline of August 26, 2026, with a posting date of July 1, 2026. It is issued by the Vermont Department of Economic Development and does not specify a set-aside designation or location for performance. The subcontractor is expected to integrate seamlessly with existing state infrastructure, provide documentation and support for continuous compliance monitoring, and maintain an ongoing commitment to data integrity, confidentiality, and availability in alignment with both national and state-mandated frameworks.