IT Security & Compliance Services

The contract seeks ongoing IT security and compliance services to maintain TX-RAMP Level II certification for Ut Health San Antonio, ensuring continuous adherence to Texas and federal data protection standards. This includes conducting regular risk assessments, facilitating SOC 2 Type II audits, and maintaining comprehensive documentation to demonstrate control effectiveness and compliance with regulatory requirements. The services must be performed in alignment with industry best practices and must support the entity’s ability to safeguard sensitive health and personal data across its IT infrastructure. The opportunity is structured as a subcontract with a NAICS code of 541512, indicating information technology consulting services, and is posted on BonfireHub with a response deadline of August 24, 2026. There is no specified set-aside type, and performance location details are not provided, though the agency is located in Texas. All deliverables must directly support the ongoing compliance posture of the organization, with a focus on documentation integrity, audit readiness, and proactive identification of security gaps to mitigate risk under both state and federal regulatory frameworks.