IT Security and Compliance Assessment Services

The contract titled IT Security and Compliance Assessment Services requires the contractor to conduct and maintain third-party security assessments for standards including SOC 2, HECVAT, and ISO 27001, while also providing support for DGOG reviews. These activities are essential to ensure ongoing compliance with industry and regulatory security frameworks and to demonstrate the organization’s commitment to robust data protection and risk management practices. The work involves ongoing evaluation, documentation, and coordination with internal and external stakeholders to maintain certification validity and address any findings or gaps identified during assessments. This subcontract is issued by the University of North Carolina at Chapel Hill under the North Carolina agency and falls under the NAICS code 541611 for Management Consulting Services. The solicitation was posted on June 29, 2026, with a response deadline of August 31, 2026. There is no set-aside designation specified, and the place of performance and point of contact details are not provided, indicating potential remote or flexible work arrangements. The contract is accessible through the provided online portal for further details and submission requirements.