SOC 1 Audit Lead

• This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible.
• Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a SOC 1 Audit Lead to support KITS and our government customer. The position is remote.
• Principal responsibilities will include but are not limited to:
• Lead audit-readiness planning, control universe development, and audit calendar management for annual SOC 1 Type 1 and Type 2 examinations.
• Serve as the accountable owner of the bifurcated monthly SOC 1 Status Report (CDRL D002), delivered directly to the Program Manager and Contracting Officer, bypassing the delivery-side Program Manager.
• Provide a single, controlled intake point for inquiries from the IPA, OIG, GAO, and third-party auditors; log, scope, assign, and track all requests to closure.
• Coordinate and facilitate auditor walkthroughs, orientation sessions, and evidence presentations.
• Maintain the readiness dashboard covering control status, artifact status, open gaps, testing progress, PBC readiness, and NFR/CAP status.
• Present options, data, test results, and technical findings to the Government while preserving the Government's decision authority over control adequacy, risk acceptance, and audit strategy.
• Oversee compliance with the OCI Mitigation Plan (D007), including personnel isolation, NDA administration, and annual firewall certification.
• Escalate firewall breaches or audit-readiness risks to the PCO/COR within required notification windows.
• Coordinate review of upstream service-provider SOC reports (e.g., Okta, AWS) with the ICAM Controls SME.
• Bachelor's degree in Accounting, Finance, Information Systems, or related field from an accredited college or university.
• 8+ years of experience in SOC 1/SSAE 18 audit readiness, IT audit, or financial-controls compliance, including direct service-organization audit experience.
• Demonstrated experience with DoD/DoW Financial Improvement and Audit Remediation (FIAR) methodology or equivalent federal audit remediation frameworks.
• Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or equivalent credential.
• Exceptional written and oral communication skills, with the ability to translate technical audit findings for both technical and non-technical stakeholders, including Government decision-makers and IPAs.
• Deep understanding of SSAE 18 (Clarified Section 320), OMB Circular A-123 Appendix D, and Test of Design (TOD)/Test of Operating Effectiveness (TOE) methodology.
• Experience managing PBC (Provided by Client) request cycles, evidence packages, and auditor liaison functions.
• Ability to operate within a structurally firewalled advisory function, maintaining independence from delivery-side personnel.
• Experience developing and maintaining Notice of Findings and Recommendations (NFR) and Corrective Action Plan (CAP) tracking.
• Strong organizational skills to manage multiple concurrent CDRL deliverables and Government review cycles.
• Ability to obtain and maintain a public trust/position of trust determination.
• Prior experience supporting a DoD or federal civilian ICAM, IAM, or identity governance audit engagement.

None flagged.