SOC 1 Audit Lead (REMOTE)

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible.

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a SOC 1 Audit Lead to support KITS and our government customer. The position is remote.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.

Koniag IT Systems, LLC (KITS), a Koniag Government Services (KGS) company, is seeking an experienced SOC 1 Audit Lead to support the Department of the Air Force (DAF) Identity, Credential, and Access Management (ICAM) Program Management Office (PMO). This position serves as the accountable lead for audit-readiness planning, Government coordination, and technical findings under a SOC 1 (SSAE 18) audit-readiness and remediation engagement. The ideal candidate brings financial-audit rigor and DoD/DoW FIAR experience, combined with the ability to operate within a structurally firewalled advisory function that is organizationally separate from teams that build and operate the controls under examination. This position requires the ability to obtain and maintain a position of trust/public trust determination and a CAC with NIPRNet access to support KITS and our government customer.

The SOC 1 Audit Lead will serve as the primary interface between KITS, the DAF ICAM PMO, and the Independent Public Accountant (IPA), operating through a firewalled reporting chain separate from Operations & Support (O&S), Development, and Enablement teams. 

Principal responsibilities will include but are not limited to:

• Lead audit-readiness planning, control universe development, and audit calendar management for annual SOC 1 Type 1 and Type 2 examinations.
• Serve as the accountable owner of the bifurcated monthly SOC 1 Status Report (CDRL D002), delivered directly to the Program Manager and Contracting Officer, bypassing the delivery-side Program Manager.
• Provide a single, controlled intake point for inquiries from the IPA, OIG, GAO, and third-party auditors; log, scope, assign, and track all requests to closure.
• Coordinate and facilitate auditor walkthroughs, orientation sessions, and evidence presentations.
• Maintain the readiness dashboard covering control status, artifact status, open gaps, testing progress, PBC readiness, and NFR/CAP status.
• Present options, data, test results, and technical findings to the Government while preserving the Government's decision authority over control adequacy, risk acceptance, and audit strategy.
• Oversee compliance with the OCI Mitigation Plan (D007), including personnel isolation, NDA administration, and annual firewall certification.
• Escalate firewall breaches or audit-readiness risks to the PCO/COR within required notification windows.
• Coordinate review of upstream service-provider SOC reports (e.g., Okta, AWS) with the ICAM Controls SME.

Education and Experience:
Required:

• Bachelor's degree in Accounting, Finance, Information Systems, or related field from an accredited college or university.
• 8+ years of experience in SOC 1/SSAE 18 audit readiness, IT audit, or financial-controls compliance, including direct service-organization audit experience.
• Demonstrated experience with DoD/DoW Financial Improvement and Audit Remediation (FIAR) methodology or equivalent federal audit remediation frameworks.
• Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or equivalent credential.

Required Skills and Competencies:

• Exceptional written and oral communication skills, with the ability to translate technical audit findings for both technical and non-technical stakeholders, including Government decision-makers and IPAs.
• Deep understanding of SSAE 18 (Clarified Section 320), OMB Circular A-123 Appendix D, and Test of Design (TOD)/Test of Operating Effectiveness (TOE) methodology.
• Experience managing PBC (Provided by Client) request cycles, evidence packages, and auditor liaison functions.
• Ability to operate within a structurally firewalled advisory function, maintaining independence from delivery-side personnel.
• Experience developing and maintaining Notice of Findings and Recommendations (NFR) and Corrective Action Plan (CAP) tracking.
• Strong organizational skills to manage multiple concurrent CDRL deliverables and Government review cycles.

Security Requirement:

• Ability to obtain and maintain a public trust/position of trust determination.

Desired Skills and Competencies:

• Prior experience supporting a DoD or federal civilian ICAM, IAM, or identity governance audit engagement.
• Familiarity with Okta and SailPoint IdentityIQ platforms and their role in IT General Controls (ITGCs).
• Experience with CFO Act of 1990 and FFMIA of 1996 compliance obligations.
• Experience managing OCI firewall constructs on federal contracts.
• Prior CPARS-rated performance on federal audit-compliance or financial-management support contracts.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352