Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 days ago

Controls and Testing Lead (REMOTE)

kgs401 open roles

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowControls and Testing Lead (REMOTE)kgs · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on kgs's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.4%3 days
  3. 7.8%7 days
  4. 14.3%14 days
  5. 33.7%30 days
This job: posted 5 days ago

The posting

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Controls and Testing Lead to support KITS and our government customer. The position is remote.This position requires the candidate to be able to obtain a Public Trust.   Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. Koniag IT Systems, LLC (KITS), a Koniag Government Services (KGS) company, is seeking a detail-oriented Controls and Testing Lead to support the Department of the Air Force (DAF) ICAM Program Management Office (PMO) SOC 1 audit-readiness mission. This role owns the technical rigor behind Test of Design (TOD) and Test of Operating Effectiveness (TOE) methodology, gap analysis, and control traceability. The ideal candidate is analytical, meticulous, and experienced in translating complex identity-governance and financial-control requirements into defensible, auditable evidence. This position requires the ability to obtain and maintain a position of trust/public trust determination to support KITS and our government customer. The Controls and Testing Lead will manage gap analysis, TOD/TOE execution, risk assessments, and control traceability for the DAF ICAM SOC 1 audit-readiness engagement.  Principal responsibilities will include but are not limited to:

Conduct current-state gap analyses and mock-audit procedures mirroring IPA evidence requests, walkthroughs, sampling, and challenge. Bifurcate and execute TOD and TOE for all key ICAM controls, confirming control objective, performer, frequency, trigger, evidence, and exception path. Maintain the SOC 1 Control Traceability Matrix (CDRL D003) as the authoritative link between each SOC/FIAR control and its implementing configuration, policy, process, and evidence source. Validate population completeness and accuracy (C&A) methods for each key control prior to the examination period. Draft and maintain the SOC 1 Audit Readiness Gap Analysis (CDRL D001), including condition, criteria, cause, risk, evidence, and recommended action. Perform closure validation on remediation actions, confirming root-cause resolution and retesting affected controls as needed. Validate that process narratives, flowcharts, and CUECs reflect the current control environment before release to auditors. Support quality review of all audit artifacts prior to Government release. Coordinate with the ICAM Controls SME on identity-governance-specific control testing (SoD, provisioning/de-provisioning, privileged access).

Education and Experience:Required:

Bachelor's degree in Accounting, Information Systems, Computer Science, or related field from an accredited college or university. 6+ years of experience in IT controls testing, internal audit, or SOC 1/SOC 2 readiness engagements. Demonstrated experience executing TOD and TOE procedures under SSAE 18 or comparable attestation standards. Certified Information Systems Auditor (CISA) or equivalent credential.

  Required Skills and Competencies:

Strong working knowledge of Risk Control Matrices (RCMs), Management Description of the System (MDS) documentation, and Complementary User Entity Controls (CUECs). Experience designing and executing sample-based testing methodologies appropriate to control frequency and population size. Ability to document and defend test workpapers that are reproducible by Government reviewers and IPAs. Strong analytical and root-cause analysis skills for control deficiencies and audit findings. Proficiency in Microsoft Excel for maintaining dynamic control traceability matrices. Excellent written communication skills for drafting NFRs, gap analyses, and remediation recommendations.

  Security Requirement:

Ability to obtain and maintain a public trust/position of trust determination.

  Desired Skills and Competencies:

Experience with federal financial statement audits or FIAR-related remediation. Familiarity with identity governance platforms (Okta, SailPoint IdentityIQ) and their control implications. Experience with Segregation of Duties (SoD) rule-set testing and privileged access review. Prior experience supporting DoD or federal civilian agency SOC 1 examinations. Experience with POA&M development and CAP tracking tools.

  Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.   The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.   Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.   Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against kgs's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on kgs's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    kgs's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.