---
title: "Third Vulnerability Analyst"
ocid: "ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Financial Conduct Authority"
published: "2026-08-13"
---

# Third Vulnerability Analyst

Buyer: Financial Conduct Authority  
Current stage: Award  
OCID: ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351.json)

## Summary

The Financial Conduct Authority (FCA) procured a third vulnerability analyst to support an increased workload. The requirement is for specialist information technology services, specifically vulnerability analysis and related consulting, software development, internet and support services. The work is delivered for the FCA in London, at its Endeavour Square location in E20. The role is a service requirement rather than a supply or construction project, and is intended to add analyst capacity to the FCA’s existing vulnerability management activity. Businesses relevant to this requirement include cyber security consultancies, vulnerability assessment specialists and technology service providers able to supply an appropriately skilled analyst resource for the FCA’s operational needs.

This procurement has been completed and the contract was awarded to SOFTCAT LTD - FCA on 12 June 2026. It was run as a selective call-off from a framework agreement, rather than as an open tender. The initial estimated value was £90,000, while the awarded value was £120,000. The contract period runs from 1 July 2026 to 23 December 2026. The tender deadline was 2 June 2026 at 12:00. The procurement was evaluated through the framework call-off process. The award is active and the tender status is complete. The opportunity was not identified as suitable for small or medium-sized enterprises or voluntary, community and social enterprises.

For suppliers that did not win this award, the procurement demonstrates a defined FCA demand for additional vulnerability-analysis capacity to manage increased workload. A credible competitor for a future requirement would need to provide a suitably capable vulnerability analyst and demonstrate practical ability to deliver specialist cyber security services within an FCA environment. Relevant businesses are likely to be established technology consultancies, managed security providers or specialist cyber security firms with access to experienced analysts and the capacity to provide focused resource for a time-limited assignment. Because the route used was a framework call-off and the requirement was not marked as suitable for SMEs, suppliers would need an appropriate framework position or a route to participate through an eligible framework provider.

## Notice

Third Vulnerability Analyst required in order to cope with increased workload, ideally to start at the beginning of July for an initial period of 6 months.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/76b95bbc-4e7c-4be0-8203-ed1f9721d6d4 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 13 Aug 2026 |
| Submission deadline | 2 Jun 2026 |
| Future notice date | Not specified |
| Award date | 12 Jun 2026 |
| Contract period | 1 Jul 2026 - 23 Dec 2026 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £90,000 |
| Lots value | Not specified |
| Awards value | £120,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Financial Conduct Authority |
| Locality | LONDON |
| Postcode area | East London |
| Postcode | E20 1JN |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI41 Hackney and Newham |
| Local authority | Newham |
| Electoral ward | Stratford Olympic Park |
| Westminster constituency | Stratford and Bow |
| Delivery location | TLI London |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Softcat Plc |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 13 Aug 2026 at 08:00 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/76b95bbc-4e7c-4be0-8203-ed1f9721d6d4

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/76b95bbc-4e7c-4be0-8203-ed1f9721d6d4
  13th August 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-90a3226b-5cc2-48d6-8843-956628466351.json.