Opportunity

CanadaBuys #1000274954

Health Canada cybersecurity and IT security professional services

Posted

November 10, 2026

Respond By

December 01, 2026

Identifier

1000274954

NAICS

541512

Health Canada is seeking task-based cybersecurity professionals to support its Digital Transformation Branch and the Public Health Agency of Canada. - Buyer: Health Canada, Digital Transformation Branch; services also support the Public Health Agency of Canada (PHAC). Public Services and Procurement Canada is referenced for the Contract Security Program. - Services requested: TBIPS cybersecurity resources for strategic security planning (C.1), threat and risk assessment and certification/accreditation (C3), security design (C7), security systems operations (C9), vulnerability analysis (C11), and incident management (C12), at the specified expertise levels. - Resource estimates: 2 each for C.1 Levels 2 and 3; 10 each for C3 Levels 2 and 3; 2 each for C7 Levels 2 and 3; 2 for C9 Level 2 and 5 for Level 3; 4 for C11 Level 3; and 2 for C12 Level 3. Pricing schedules separately estimate resource days by category and level; these are evaluation estimates, not guaranteed usage. - Work includes: Security assessments and authorization, cloud and AI security, DevSecOps testing, security architecture, network and endpoint security, vulnerability management, security operations, and incident investigation. Assignments are as needed through task authorizations and may include remote work in Canada. - Notable requirements: Corporate and personnel security requirements apply, including Secret-level clearance. No product OEMs, manufacturers, or specific commercial vendors are identified.

Description

Health Canada is seeking informatics professional services through Task Authorizations to support its Cybersecurity and Information Technology Service Delivery organization and the Public Health Agency of Canada. Work includes individual resources and project teams performing security assessments, vulnerability assessments, and other cybersecurity services. The requirement is limited to invited Tier 1 TBIPS Supply Arrangement holders qualified for the National Capital Region and specified security-related categories and expertise levels. One contract is intended for a two-year period.

View original listing