[Hiring] Controls and Testing Lead @Koniag Government Services, LLC

Role Description

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a detail-oriented Controls and Testing Lead to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) SOC 1 audit-readiness mission. This role owns the technical rigor behind Test of Design (TOD) and Test of Operating Effectiveness (TOE) methodology, gap analysis, and control traceability. The ideal candidate is analytical, meticulous, and experienced in translating complex identity-governance and financial-control requirements into defensible, auditable evidence. This position requires the ability to obtain and maintain a position of trust/public trust determination to support KITS and our government customer.

The Controls and Testing Lead will manage gap analysis, TOD/TOE execution, risk assessments, and control traceability for the DAF ICAM SOC 1 audit-readiness engagement.

Principal responsibilities will include but are not limited to:

• Conduct current-state gap analyses and mock-audit procedures mirroring IPA evidence requests, walkthroughs, sampling, and challenge.
• Bifurcate and execute TOD and TOE for all key ICAM controls, confirming control objective, performer, frequency, trigger, evidence, and exception path.
• Maintain the SOC 1 Control Traceability Matrix (CDRL D003) as the authoritative link between each SOC/FIAR control and its implementing configuration, policy, process, and evidence source.
• Validate population completeness and accuracy (C&A) methods for each key control prior to the examination period.
• Draft and maintain the SOC 1 Audit Readiness Gap Analysis (CDRL D001), including condition, criteria, cause, risk, evidence, and recommended action.
• Perform closure validation on remediation actions, confirming root-cause resolution and retesting affected controls as needed.
• Validate that process narratives, flowcharts, and CUECs reflect the current control environment before release to auditors.
• Support quality review of all audit artifacts prior to Government release.
• Coordinate with the ICAM Controls SME on identity-governance-specific control testing (SoD, provisioning/de-provisioning, privileged access).

Qualifications

• Bachelor's degree in Accounting, Information Systems, Computer Science, or related field from an accredited college or university.
• 6+ years of experience in IT controls testing, internal audit, or SOC 1/SOC 2 readiness engagements.
• Demonstrated experience executing TOD and TOE procedures under SSAE 18 or comparable attestation standards.
• Certified Information Systems Auditor (CISA) or equivalent credential.

Requirements

• Strong working knowledge of Risk Control Matrices (RCMs), Management Description of the System (MDS) documentation, and Complementary User Entity Controls (CUECs).
• Experience designing and executing sample-based testing methodologies appropriate to control frequency and population size.
• Ability to document and defend test workpapers that are reproducible by Government reviewers and IPAs.
• Strong analytical and root-cause analysis skills for control deficiencies and audit findings.
• Proficiency in Microsoft Excel for maintaining dynamic control traceability matrices.
• Excellent written communication skills for drafting NFRs, gap analyses, and remediation recommendations.

Benefits

• Medical, dental, and vision insurance.
• 401(k) retirement plan.
• Paid time off.
• Paid parental leave.
• Life and disability insurance.
• Flexible spending accounts.
• Commuter benefits.
• Tuition reimbursement.