Description
The Oregon Health Authority is seeking a qualified, CPA‑licensed auditor to conduct annual SOC 2 Type 2 “controls audits” of the Medicaid Management Information System (MMIS) components designed, built, or operated by Gainwell LLC. The contract will run for an initial five‑year term with the possibility of two‑year extensions, requiring a final audit report each fiscal year to be delivered by September 30 of the following year. The award will be based on technical criteria (experience, implementation plan, references) and price, with a maximum of 20 points for cost. The award process is competitive sealed‑proposal.
• Perform SOC 2 Type 2 audits for FY 2026‑27 through FY 2030‑31 (potentially FY 2031‑32 and FY 2032‑33).
• Deliver final audit reports electronically (plus one printed copy) by September 30 each year.
• Provide a CPA‑licensed lead auditor, meet Oregon professional‑services insurance requirements, and comply with numerous state statutes (e.g., anti‑discrimination, pay‑equity, false‑claims).
• The contract is a personal/professional services agreement with OHA, subject to standard termination, record‑retention, and indemnity clauses.