CanadaBuys #20261030-C

Cybersecurity Professional Services for PSPC Cybersecurity Directorate Modernization

The Department of Public Works and Government Services Canada (PSPC) is seeking specialized cybersecurity professional services to support the modernization of its Cybersecurity Directorate. - Government Buyer: - Department of Public Works and Government Services Canada (PSPC), Cybersecurity Directorate - Contracting authority: Sara Bulhoes - Scope of Services: - Cybersecurity engineering and technical expertise - Threat and risk assessments (TRA), vulnerability analysis, and incident management - Digital forensics and forensic analysis - Technical documentation and development of standardized security requirements - Support for cybersecurity certification and accreditation - Cloud security risk management and application security - Support for emerging technologies, including artificial intelligence and advanced analytics - Resource Requirements: - Multiple Level 3 specialists required, including: - 3 x IT Security Threat and Risk Assessment and Certification and Accreditation Analyst Level 3 - 1 x IT Security Vulnerability Analysis Specialist Level 3 - 1 x Incident Management Specialist Level 3 - 1 x Computer Forensics Specialist Level 3 - Notable Requirements: - Minimum 'Secret' security clearance required for both the company and all personnel - Open only to qualified TBIPS Supply Arrangement (SA) Holders under Tier 1 - Subject to multiple international trade agreements (CFTA, CETA, CPTPP, WTO-GPA, etc.) - No specific OEMs or product vendors are named; the procurement is for professional services only - Place of Performance: - National Capital Region (NCR), with primary offices at 140 O'Connor Street, Ottawa, ON

Description

The Department of Public Works requires cybersecurity professional services to support the modernization of PSPC’s Cybersecurity Directorate. The contractor will provide specialized IT security expertise on an as-needed basis to enhance cybersecurity processes, tools, and capabilities, especially in emerging technologies such as cloud services and AI. Services include cybersecurity engineering, risk assessments, incident management, forensic analysis, technical documentation, and development of security standards. Resources will collaborate with PSPC staff to strengthen security operations and facilitate knowledge transfer. The contract duration is 36 months starting from July 31, 2026.

View original listing