Controls and Testing Lead (REMOTE)

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Controls and Testing Lead to support KITS and our government customer. The position is remote.This position requires the candidate to be able to obtain a Public Trust.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

Koniag IT Systems, LLC (KITS), a Koniag Government Services (KGS) company, is seeking a detail-oriented Controls and Testing Lead to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) SOC 1 audit-readiness mission. This role owns the technical rigor behind Test of Design (TOD) and Test of Operating Effectiveness (TOE) methodology, gap analysis, and control traceability. The ideal candidate is analytical, meticulous, and experienced in translating complex identity-governance and financial-control requirements into defensible, auditable evidence. This position requires the ability to obtain and maintain a position of trust/public trust determination to support KITS and our government customer.

The Controls and Testing Lead will manage gap analysis, TOD/TOE execution, risk assessments, and control traceability for the DAF ICAM SOC 1 audit-readiness engagement.

 Principal responsibilities will include but are not limited to:

• Conduct current-state gap analyses and mock-audit procedures mirroring IPA evidence requests, walkthroughs, sampling, and challenge.
• Bifurcate and execute TOD and TOE for all key ICAM controls, confirming control objective, performer, frequency, trigger, evidence, and exception path.
• Maintain the SOC 1 Control Traceability Matrix (CDRL D003) as the authoritative link between each SOC/FIAR control and its implementing configuration, policy, process, and evidence source.
• Validate population completeness and accuracy (C&A) methods for each key control prior to the examination period.
• Draft and maintain the SOC 1 Audit Readiness Gap Analysis (CDRL D001), including condition, criteria, cause, risk, evidence, and recommended action.
• Perform closure validation on remediation actions, confirming root-cause resolution and retesting affected controls as needed.
• Validate that process narratives, flowcharts, and CUECs reflect the current control environment before release to auditors.
• Support quality review of all audit artifacts prior to Government release.
• Coordinate with the ICAM Controls SME on identity-governance-specific control testing (SoD, provisioning/de-provisioning, privileged access).

Education and Experience:
Required:

• Bachelor's degree in Accounting, Information Systems, Computer Science, or related field from an accredited college or university.
• 6+ years of experience in IT controls testing, internal audit, or SOC 1/SOC 2 readiness engagements.
• Demonstrated experience executing TOD and TOE procedures under SSAE 18 or comparable attestation standards.
• Certified Information Systems Auditor (CISA) or equivalent credential.

Required Skills and Competencies:

• Strong working knowledge of Risk Control Matrices (RCMs), Management Description of the System (MDS) documentation, and Complementary User Entity Controls (CUECs).
• Experience designing and executing sample-based testing methodologies appropriate to control frequency and population size.
• Ability to document and defend test workpapers that are reproducible by Government reviewers and IPAs.
• Strong analytical and root-cause analysis skills for control deficiencies and audit findings.
• Proficiency in Microsoft Excel for maintaining dynamic control traceability matrices.
• Excellent written communication skills for drafting NFRs, gap analyses, and remediation recommendations.

Security Requirement:

• Ability to obtain and maintain a public trust/position of trust determination.

Desired Skills and Competencies:

• Experience with federal financial statement audits or FIAR-related remediation.
• Familiarity with identity governance platforms (Okta, SailPoint IdentityIQ) and their control implications.
• Experience with Segregation of Duties (SoD) rule-set testing and privileged access review.
• Prior experience supporting DoD or federal civilian agency SOC 1 examinations.
• Experience with POA&M development and CAP tracking tools.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352