IT Security & Privacy Auditor

This subcontract opportunity for an IT Security and Privacy Auditor involves performing security assessments for prime contractors managing SaaS implementations at the University of Washington. The primary scope of work includes validating data encryption and access controls against HIPAA and NIST standards through penetration testing and security scanning tools. Additionally, the auditor must verify that authentication and data modification audit logs are tamper-evident in accordance with Requirement AUD-001. The selected contractor will be responsible for delivering a comprehensive Security Assessment Report and Audit Log Validation. This project is categorized under NAICS code 541519 and is performed in King County. Interested parties must submit their responses by the deadline of November 20, 2026.