控制与测试负责人
Controls and Testing Lead
此职位可能在发布截止日期前就已招满。有兴趣的候选人请尽快申请。Koniag IT Systems, LLC，一家Koniag Government Services公司，正在寻找一名Controls and Testing Lead来支持KITS及我们的政府客户。该职位为远程办公。
该职位要求候选人能够获得公共信任（Public Trust）。
福利包括医疗保险、牙科保险、视力保险、401(k)退休计划、带薪休假、带薪育儿假、人寿保险和残疾保险、灵活支出账户、通勤福利以及学费报销。
Koniag IT Systems, LLC（KITS），一家Koniag Government Services（KGS）公司，正在寻找一名注重细节的Controls and Testing Lead，以支持美国空军（DAF）ICAM项目管理办公室（PMO）的SOC 1审计准备任务。该职位负责Test of Design（TOD）和Test of Operating Effectiveness（TOE）方法论、差距分析和控制可追溯性方面的技术严谨性。理想的候选人应具备分析能力，细致严谨，并且有将复杂的身份治理和财务控制要求转化为可辩护、可审计证据的经验。该职位需要具备获得并维持一个信任职位/公共信任认定的能力，以支持KITS及我们的政府客户。
Controls and Testing Lead将负责DAF ICAM SOC 1审计准备项目的差距分析、TOD/TOE执行、风险评估和控制可追溯性。主要职责包括但不限于：
- 进行现状差距分析和模拟审计程序，模仿IPA证据请求、检查、抽样和挑战。
- 分拆并执行所有关键ICAM控制的TOD和TOE，确认控制目标、执行者、频率、触发条件、证据和例外路径。
- 维护SOC 1控制可追溯性矩阵（CDRL D003），作为每个SOC/FIAR控制与其实施配置、政策、流程和证据来源之间的权威链接。
- 在审查期之前验证每个关键控制的人员完整性和准确性（C&A）方法。
- 撰写并维护SOC 1审计准备差距分析（CDRL D001），包括状况、标准、原因、风险、证据和建议措施。
- 对补救措施进行关闭验证，确认根本原因解决，并根据需要重新测试受影响的控制。
- 验证流程叙述、流程图和CUECs是否反映实际操作情况。
查看英文原文
This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Controls and Testing Lead to support KITS and our government customer. The position is remote.This position requires the candidate to be able to obtain a Public Trust.
Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement.
Koniag IT Systems, LLC (KITS), a Koniag Government Services (KGS) company, is seeking a detail-oriented Controls and Testing Lead to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) SOC 1 audit-readiness mission. This role owns the technical rigor behind Test of Design (TOD) and Test of Operating Effectiveness (TOE) methodology, gap analysis, and control traceability. The ideal candidate is analytical, meticulous, and experienced in translating complex identity-governance and financial-control requirements into defensible, auditable evidence. This position requires the ability to obtain and maintain a position of trust/public trust determination to support KITS and our government customer.
The Controls and Testing Lead will manage gap analysis, TOD/TOE execution, risk assessments, and control traceability for the DAF ICAM SOC 1 audit-readiness engagement. Principal responsibilities will include but are not limited to:
- Conduct current-state gap analyses and mock-audit procedures mirroring IPA evidence requests, walkthroughs, sampling, and challenge.
- Bifurcate and execute TOD and TOE for all key ICAM controls, confirming control objective, performer, frequency, trigger, evidence, and exception path.
- Maintain the SOC 1 Control Traceability Matrix (CDRL D003) as the authoritative link between each SOC/FIAR control and its implementing configuration, policy, process, and evidence source.
- Validate population completeness and accuracy (C&A) methods for each key control prior to the examination period.
- Draft and maintain the SOC 1 Audit Readiness Gap Analysis (CDRL D001), including condition, criteria, cause, risk, evidence, and recommended action.
- Perform closure validation on remediation actions, confirming root-cause resolution and retesting affected controls as needed.
- Validate that process narratives, flowcharts, and CUECs reflect the current control environment before release to auditors.
- Support quality review of all audit artifacts prior to Government release.
- Coordinate with the ICAM Controls SME on identity-governance-specific control testing (SoD, provisioning/de-provisioning, privileged access).
Education and Experience:
Required:
- Bachelor's degree in Accounting, Information Systems, Computer Science, or related field from an accredited college or university.
- 6+ years of experience in IT controls testing, internal audit, or SOC 1/SOC 2 readiness engagements.
- Demonstrated experience executing TOD and TOE procedures under SSAE 18 or comparable attestation standards.
- Certified Information Systems Auditor (CISA) or equivalent credential.
Required Skills and Competencies:
- Strong working knowledge of Risk Control Matrices (RCMs), Management Description of the System (MDS) documentation, and Complementary User Entity Controls (CUECs).
- Experience designing and executing sample-based testing methodologies appropriate to control frequency and population size.
- Ability to document and defend test workpapers that are reproducible by Government reviewers and IPAs.
- Strong analytical and root-cause analysis skills for control deficiencies and audit findings.
- Proficiency in Microsoft Excel for maintaining dynamic control traceability matrices.
- Excellent written communication skills for drafting NFRs, gap analyses, and remediation recommendations.
Security Requirement:
· Ability to obtain and maintain a public trust/position of trust determination.
Desired Skills and Competencies:
- Experience with federal financial statement audits or FIAR-related remediation.
- Familiarity with identity governance platforms (Okta, SailPoint IdentityIQ) and their control implications.
- Experience with Segregation of Duties (SoD) rule-set testing and privileged access review.
- Prior experience supporting DoD or federal civilian agency SOC 1 examinations.
- Experience with POA&M development and CAP tracking tools.
Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at or by calling 703-488-9377 to request accommodations.
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352
Originally posted on Himalayas