Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Security Certification and SOC Compliance Auditor

Active

State & Local

Response Deadline11/06/2026, 05:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract opportunity is for a Security Certification and SOC Compliance Auditor to perform security audits for prime contractors working on Pennsylvania Department of Revenue projects. The selected provider will be responsible for conducting audits to produce SOC reports, verifying that US-only data residency is maintained, and validating that identifying information remains within the Department's confines. The primary deliverables for this engagement include a final SOC Report and a Security Validation Certification. To be eligible, the contractor must hold a CPA license or be a certified audit firm. This opportunity was posted on October 22, 2026, with a response deadline of November 6, 2026. The work falls under NAICS code 541219 and is managed by the state of Pennsylvania.

General Info

CPA firm to perform SOC audits and security certifications for Pennsylvania Department Revenue.

Agency

Pennsylvania → Department of Revenue

NAICS

541219 - Other Accounting Services

Place of Performance

PA, USA

Set-Aside

NONE

Documents

This scope was carved out of 0478-26.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Secure and Confidential Data Capturing

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 22

subcontract

Response DeadlineNov 6

Submission deadline

Response Deadline

11/06/2026, 05:00:00 AM UTCin 14 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyPennsylvania → Department of Revenue

ContactsNo contacts available

OfficeN/A

Organization / AgencyPennsylvania → Department of Revenue

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits for prime contractors on Pennsylvania Department of Revenue projects. Conducts audits to produce SOC reports, validates that identifying information does not leave the Department's confines, and verifies US-only data residency. Requires CPA or certified audit firm status. Delivers a final SOC Report and Security Validation Certification.

Similar Contracts

Same NAICS industry code

Program Financial Audit ServicesThe Program Financial Audit Services subcontract involves performing detailed financial audits of program expenditures for prime contractors working on Hawaii Department of Judiciary projects. The selected provider will be responsible for reviewing actual expenditures against approved budgets using Form SPOH-205, while verifying payroll taxes, fringe benefits, and contractual payments to ensure full compliance with Hawaii state procurement and financial reporting regulations. To qualify for this engagement, the service provider must hold a Certified Public Accountant license and be capable of delivering periodic or annual audit reports. This opportunity was posted on October 22, 2026, with a response deadline of December 3, 2026, falling under NAICS code 541219.

Department of Judiciary

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Program Audit and Financial Compliance ServicesThe Program Audit and Financial Compliance Services subcontract involves providing independent financial audit services for prime contractors working on projects for the State of Hawaii Department of Judiciary. The primary objective is to audit program expenditures to verify strict compliance with the Cost Principles for Purchase of Health and Human Services as outlined in Chapter 103F, HRS. The selected provider will be responsible for delivering periodic or annual audit reports to ensure financial accountability. To qualify for this engagement, the service provider must hold a valid Certified Public Accountant license and utilize professional auditing software. This opportunity is categorized under NAICS code 541219. Interested parties should note that the response deadline for this solicitation is December 3, 2026.

Department of Judiciary

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Program Audit and Fiscal Reporting ServicesThe Program Audit and Fiscal Reporting Services subcontract involves providing independent audit and fiscal tracking for prime contractors working on projects for the Hawaii Department of Judiciary. The selected provider will be responsible for auditing expenditures against approved budgets, verifying third-party payment reductions, and preparing comprehensive quarterly and year-end expenditure reports. Qualified candidates must hold a Certified Public Accountant certification and possess a thorough understanding of the Hawaii State Department of Taxation requirements. The primary deliverables for this engagement include verified expenditure summaries and detailed audit reports. The response deadline for this opportunity is December 3, 2026.

Department of Judiciary

POSTED

about 14 hours ago

DEADLINE

in about 1 month

Labor Compliance Monitoring and Auditing ServicesThis subcontract for Labor Compliance Monitoring and Auditing Services supports the City of Pasadena Public Works Department, Engineering division. The selected provider will be responsible for proactive monitoring and payroll auditing of prime contractors to ensure strict adherence to the Davis-Bacon Act, California Prevailing Wage laws, and the City of Pasadena Living Wage Ordinance. Key duties include reviewing certified payroll reports, performing on-site worker interviews to verify job classifications, and tracking any compliance deficiencies. The contractor will utilize California DIR registration and reporting systems to maintain oversight and must deliver monthly compliance reports along with final project closeout certifications. This opportunity was posted on October 22, 2026, with a response deadline of November 18, 2026. The services fall under NAICS code 541219.

Public Works Department, Engineering

POSTED

about 15 hours ago

DEADLINE

Payroll Processing and Tax AdministrationThis subcontract for the City of Mableton focuses on Payroll Processing and Tax Administration to support prime contractors on HRIS projects. The selected provider will be responsible for executing regular and off-cycle payroll runs, managing tax filings across multiple jurisdictions, and issuing year-end reporting forms through a dedicated payroll processing engine. The primary objective is to ensure the delivery of accurate payroll payments and strict adherence to all federal, state, and local tax laws. To qualify for this engagement, the provider must hold a Certified Payroll Professional certification. Interested parties should note that the response deadline is November 23, 2026. The contract falls under NAICS code 541219 and is managed through the state of Georgia's procurement system.

City of Mableton

POSTED

about 16 hours ago

DEADLINE

in about 1 month

Program Risk Management and Internal Controls SupportThe Program Risk Management and Internal Controls Support subcontract, issued by the Department of Defense under agency W40M USA Hca, focuses on providing specialized consulting for prime contractors involved in Army Recovery Care Program projects. The scope of work involves conducting Organizational Inspection Programs and Staff Assistance Visits at Definitive Care Units and Soldier Recovery Units to ensure adherence to DoD and OMB guidelines. Key deliverables include the creation of synchronized inspection schedules, the provision of internal controls training, and the delivery of comprehensive audit reports and risk assessments. To execute these services, personnel must maintain Public Trust clearance and strictly adhere to HIPAA compliance standards. This opportunity falls under NAICS code 541219 and was posted on October 22, 2026, with a response deadline of November 2, 2026.

POSTED

DEADLINE

IT Audit & Controls SpecialistThis subcontract opportunity is for an IT Audit and Controls Specialist to support prime contractors on projects for the State of Alaska Division of Legislative Audit. The role focuses on performing technical testing of IT General Controls and application controls within the CGI Advantage ERP and ALDER Data Warehouse. Specifically, the specialist will evaluate environments involving Oracle 19c, RHEL 7.9, and Windows 2019, ensuring compliance with TSP100-2017 Trust Services Criteria. The selected specialist must hold a CISA certification to qualify for the position. Key deliverables include the production of technical working papers, control testing matrices, and draft findings. This engagement falls under NAICS code 541219 and supports the legislative branch of the State of Alaska.

POSTED

DEADLINE

Planning-Level Estimating & Cost AnalystThis subcontract opportunity is for a Planning-Level Estimating and Cost Analyst to support prime contractors on Department of Energy projects at the Hanford Site. The selected provider will develop cost considerations for the FY2028 through FY2040 horizon, create estimating inputs for task order proposal packages, and coordinate scope assumptions to ensure all estimates are technically defensible. Key deliverables include cost basis documentation, tabular cost summaries, and detailed estimating inputs. This is a small business set-aside opportunity under NAICS Code 541611 for administrative and general management consulting. Due to the nature of the work, U.S. citizenship is required. Interested parties must submit their responses by November 9, 2026, following the posting date of October 22, 2026.

Department Of Energy

POSTED

DEADLINE

Fiscal Agency and Non-Profit Administrative ServicesThis subcontract for Fiscal Agency and Non-Profit Administrative Services supports prime contractors on City of Raleigh Parks, Recreation and Cultural Resources projects. The selected provider will manage the receipt and disbursement of donated funds for community and friends groups, oversee fee-barrier reduction funds, and ensure financial compliance for in-kind donations using specialized fund accounting software. A primary deliverable of the contract is the provision of audited fund accounts. The contract requires the provider to maintain specific insurance coverages, including Commercial General Liability at 1 million dollars per occurrence and 2 million dollars aggregate, as well as Auto and Workers Compensation insurance. Interested parties must submit their responses by November 3, 2026.

City of Raleigh

POSTED

DEADLINE

Health Insurance Premium Management & DisbursementThe Health Insurance Premium Management and Disbursement subcontract for the Texas Department of State Health Services involves the administration of monthly invoicing and payment of health insurance premiums for prime contractors. The scope of work includes processing premium payments for private and federal marketplace health insurance plans, as well as managing COBRA payments. To ensure operational efficiency and security, the contractor must utilize automated payment disbursement systems and provide documentation verifying their financial solvency. The selected provider is responsible for delivering processed premium payments and detailed disbursement reports to the agency. This opportunity is categorized under NAICS code 541219 and is managed by the state of Texas. Interested parties must adhere to the response deadline of November 19, 2026, to be considered for this financial management role.

Department of State Health Services

POSTED

DEADLINE

Bank Reconciliation and General Ledger Analysis ServicesThis subcontract for Bank Reconciliation and General Ledger Analysis Services involves performing high-volume reconciliation of bank activity to the general ledger for prime contractors working on projects in Chatham County, Georgia. The selected provider will be responsible for reconciling monthly statements, ACH, wires, and interfund transfers to detect control weaknesses and unexplained differences. Deliverables include detailed bank reconciliation reports and a comprehensive schedule of differences. Qualified candidates must possess a degree in accounting or financial analysis and demonstrate proficiency in specialized reconciliation software or advanced Excel. The solicitation was posted on October 21, 2026, with a response deadline of November 20, 2026. This opportunity falls under NAICS code 541219 and is managed through the state of Georgia's procurement system.

POSTED

DEADLINE

Forensic Audit and Fraud Investigation ServicesThis subcontract for Forensic Audit and Fraud Investigation Services involves providing specialized forensic testing and investigative accounting for prime contractors operating on projects within Chatham County, Georgia. The scope of work focuses on identifying fraud, waste, abuse, and misappropriation, with specific emphasis on investigating payroll issues, procurement irregularities, and duplicate payments. To execute these tasks, the provider must utilize advanced auditing tools and forensic data analytics software to produce a comprehensive forensic audit findings report. Qualified providers must operate under a Georgia-licensed CPA firm and possess a Certified Fraud Examiner certification. The solicitation was posted on October 21, 2026, with a response deadline of November 20, 2026. This engagement falls under NAICS code 541219 and is managed through the state of Georgia for the benefit of Chatham County.

POSTED

DEADLINE

More opportunities from Pennsylvania → Department of Revenue

Same awarding agency

Secure Data Keying and Validation ServicesThe Secure Data Keying and Validation Services subcontract involves providing remote data validation support for prime contractors working on projects for the Pennsylvania Department of Revenue. The scope of work requires personnel to access disparate data snippets through secure portals to perform manual keying and validation of sensitive information, which is then returned to the source system. Due to the nature of the sensitive data involved, all personnel must undergo background checks and strictly adhere to agency confidentiality agreements. This opportunity falls under NAICS code 561611, with a response deadline set for November 6, 2026.

Investigation and Personal Background Check Services

POSTED

DEADLINE

OpenText Intelligent Capture Integration SpecialistThis subcontract opportunity is for an OpenText Intelligent Capture Integration Specialist to support prime contractors on projects for the Pennsylvania Department of Revenue. The selected provider will be responsible for integrating existing OpenText Intelligent Capture environments with secure data capturing tools, mapping data fields for snippet processing, and managing the transition from legacy providers to deliver a fully integrated and tested end-to-end data capture workflow. Candidates must hold an OpenText certification to be eligible for this role. The solicitation was posted on October 22, 2026, with a response deadline of November 6, 2026. This technical configuration project falls under NAICS code 541512.

Computer Systems Design Services

POSTED

DEADLINE

Secure Data Snippet & Redaction Software ProviderThis subcontract agreement establishes a partnership for the provision of secure data snippet and redaction software to support prime contractors working on projects for the Pennsylvania Department of Revenue. The software is designed to capture confidential data from images, separate the information into disparate snippets at the source, and reassemble them following a validation process. To ensure seamless operation, the solution must integrate with OpenText Intelligent Capture and deliver a fully functional data capture workflow. Strict security and compliance standards are mandated, requiring the provider to maintain SOC report certification and guarantee that all data residency remains within the United States. This engagement falls under NAICS code 513210 and is managed through the Pennsylvania Department of Revenue, with a response deadline set for November 6, 2026.

Software Publishers

POSTED

DEADLINE

Secure and Confidential Data Capturing

Solicitation # 0478-26

The Commonwealth of Pennsylvania Department of Revenue has issued Request for Information 0478-26 to gather technical and cost data for a future procurement of a tool designed to manage secure and confidential data captured from scanned documents. This RFI is intended for planning purposes to help the Department formulate specifications, realistic timeframes, and cost structures for a formal solicitation. The primary objective is to identify solutions capable of capturing sensitive data from images, separating them into individual snippets to preserve confidentiality, and reassembling them while ensuring that no identifying information leaves the Department's confines. Interested vendors must submit a response by November 6, 2026, including a cover letter on company letterhead and a completed Secure and Confidential Data Capturing Questionnaire. The Department is seeking information regarding technical maturity, implementation timelines, data sovereignty within the United States, and adherence to stringent security standards, including the requirement for a SOC report. While this RFI does not constitute a formal offer for procurement or a contract award, the information provided will be used to evaluate vendor qualifications and define the requirements for a subsequent competitive solicitation. Rachel Peters serves as the sole point of contact for this effort.

POSTED

DEADLINE

Fulfillment and Logistics ServicesThis subcontract for Fulfillment and Logistics Services supports the Pennsylvania Department of Revenue by managing the physical distribution of forms. The selected provider will be responsible for the end-to-end warehouse process, including picking, packing, and shipping forms for prime contractors. Operations involve managing a physical warehouse, processing orders generated through an e-commerce portal, and utilizing warehouse management systems and logistics software to ensure efficient delivery to designated recipients in accordance with supply chain management standards. The opportunity is categorized under NAICS code 493110 and was posted on October 5, 2026. Interested parties must submit their responses by the deadline of October 27, 2026. Further details regarding the solicitation can be accessed through the Pennsylvania eMarketplace portal.

General Warehousing and Storage

POSTED

DEADLINE

Inventory Management & Reporting SoftwareThis subcontract for the Pennsylvania Department of Revenue focuses on the supply and implementation of back-end inventory tracking systems for prime contractors managing forms-ordering projects. The scope of work includes configuring inventory tracking modules, establishing management workflows through IMS and database management systems, and setting up automated reporting to monitor form consumption. All deliverables must adhere to strict data integrity and security standards to ensure a fully operational inventory management and reporting module. The project is categorized under NAICS code 541512 and was posted on October 5, 2026, with a response deadline of October 27, 2026. Interested parties can find further details through the Pennsylvania eMarketplace solicitation portal.

Computer Systems Design Services

POSTED

DEADLINE

E-Commerce Platform Development & IntegrationThis subcontract for the Pennsylvania Department of Revenue focuses on the development and integration of an e-commerce platform designed as a front-end online ordering portal for prime contractors. The scope of work includes designing user interfaces for form selection, implementing streamlined ordering workflows, and establishing mechanisms for site updates. The final deliverable is a fully functional, hosted portal that utilizes e-commerce software frameworks and API integration tools. Technical requirements emphasize strict adherence to secure coding standards and Section 508 accessibility compliance to ensure the portal is usable and secure for all parties. This project falls under NAICS code 541511, with a response deadline set for October 27, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Form Ordering System

Solicitation # DOR 387-26

The Commonwealth of Pennsylvania Department of Revenue has issued Request for Information DOR 387-26 to gather market research for the development of a future solicitation for a Forms Ordering System. The objective is to implement an online storefront that enables taxpayers, practitioners, and other stakeholders to place individual and bulk orders for business and personal tax forms and booklets, while also allowing Department of Revenue staff to enter orders manually. This RFI is intended for planning purposes to help the Commonwealth define technical specifications, realistic timeframes, and cost structures, and it does not constitute a formal solicitation or a commitment to award a contract. Interested vendors are asked to provide information regarding their experience with government e-commerce solutions, proposed system capabilities for inventory management and fulfillment, implementation timelines, high-level pricing, and product demonstrations. Responses are due by October 27, 2026, and must be submitted to the designated point of contact. All submissions are subject to the Pennsylvania Right-to-Know Law; however, vendors may request confidentiality for trade secrets or proprietary information by submitting a redacted version of their response along with a signed Trade Secret/Confidential Proprietary Notice.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS