IT Security Compliance and Audit Support

The contract requires comprehensive IT security compliance and audit support services for the Department of Veterans Affairs, focusing on readiness for unannounced audits by the VA, the Office of Inspector General, or third-party auditors. The contractor must be prepared to respond immediately to audit findings, promptly remediate any identified deficiencies, and develop or update Information System Security Plans that align with VA-specific security requirements. All efforts must ensure adherence to federal and VA-mandated security controls, policies, and procedures, with particular emphasis on maintaining continuous compliance in dynamic environments. The work is critical to sustaining the integrity and security of VA information systems and must be performed with strict attention to timelines, documentation accuracy, and regulatory alignment. This is a subcontract under the NAICS code 541611, issued by the Technology Acquisition Center NJ, with a response deadline of May 12, 2026. The performance location and point of contact details are not specified, indicating the work may be performed remotely or across multiple sites as needed. The contractor is expected to provide proactive and reactive support to uphold the VA’s security posture, including documentation readiness, policy enforcement, and continuous improvement of security controls. Failure to meet obligations may result in non-compliance consequences, making timely and thorough execution of audit support, remediation, and ISSP development essential to the success of this engagement.