IT Security Vulnerability Analysis and Assessment

This subcontract opportunity with the Government of Canada's Department of Health involves providing IT security vulnerability analysis and assessment services within the National Capital Region. The selected provider will be responsible for managing the security vulnerability lifecycle for prime contractors, which includes performing assessments, reviewing first-party and third-party management solutions, and utilizing scanning tools such as Qualys or Nessus. Key deliverables include the production of cyber security assessment reports and the provision of strategic guidance on tool implementation. Qualified candidates must possess Secret level security clearance to perform this work. The contract falls under NAICS code 541519 and requires the delivery of comprehensive vulnerability assessment reports and strategy documents. Interested parties should note the response deadline of December 1, 2026.