Audit Specialist

Job Description Everforth ECS is seeking an Audit Specialist to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax. Please note: This position is contingent upon contract award. The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI‑First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts. Responsibilities The Audit Specialist executes audit control, evidence management, and SOC1 readiness activities across the WDP Core Integration Task Order, ensuring that program documentation, governance artifacts, and Provided by Client evidence packages consistently satisfy audit standards, external auditor requirements, and Government-defined compliance obligations. In this role, the specialist contributes to a continuous audit-readiness posture by maintaining disciplined review workflows, corrective action tracking, and annual governance document updates that support the program's SOC1 Type 2 attestation cycle and ongoing reporting accuracy. Executes audit control and audit-readiness activities supporting program documentation, reporting, and SOC1 evidence preparation. Conducts detailed reviews of Monthly Status Reports, transition artifacts, Project Management Plan updates, and management documentation to validate alignment with approved formats, content requirements, and audit standards. Supports SOC1 audit preparation by organizing evidence packages, reviewing Provided by Client documentation, validating policy updates, and tracking corrective actions through resolution. Maintains audit review logs, issue‑tracking records, and documentation repositories supporting traceability, transparency, and external auditor engagement. Coordinates with project teams to resolve documentation discrepancies, update audit evidence, and implement corrective actions. Supports development and maintenance of the Audit Management Plan through controlled updates, version control, and review documentation. Contributes to annual updates of required governance documents, including Access Control, Contingency Plan, Continuous Monitoring, Incident Management, Password Policy, POA&M Policy, and Vulnerability Management. Delivers consistent audit execution supporting reporting accuracy, SOC1 readiness, and disciplined program delivery. Performs other duties as assigned. Required Skills Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI). 3 or more years of progressive experience in audit support, compliance, quality assurance, or a closely related discipline, with demonstrated experience supporting audit readiness activities for federal or defense programs operating under formal attestation or assessment requirements. Demonstrated experience supporting SOC1 Type 2 audit preparation activities, including organization and validation of Provided by Client evidence packages, coordination of auditor observation sessions, review of policy and control documentation, and tracking of corrective actions through resolution in alignment with a June 30 annual attestation period end date. Proven ability to conduct detailed quality and compliance reviews of Government‑facing program documentation, including Monthly Status Reports, Project Management Plan updates, and transition artifacts, to validate alignment with approved formats, content standards, and audit evidence requirements. Experience maintaining audit review logs, issue‑tracking registers, and version‑controlled documentation repositories that support external auditor engagement, Government oversight transparency, and end‑to‑end traceability of evidence submissions and corrective action status. Demonstrated ability to coordinate annual updates to required governance and policy documents, including Access Control, Contingency Plan, Continuous Monitoring, Incident Management, Password Policy, Plan of Action and Milestones Policy, and Vulnerability Management documentation, in compliance with program‑defined update cycles and Government review requirements. Proficiency with document management and collaboration platforms such as SharePoint Online and Confluence, including demonstrated experience enforcing version control, metadata standards, and audit‑ready retention practices within controlled program repositories. Strong problem‑solving and decision‑making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution. Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end‑users to executive management). Desired Skills Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Familiarity with SOC1 Type 2 audit frameworks, including working knowledge of Section III Management System Description preparation, auditor observation coordination, and evidence package organization practices specific to programs operating under annual attestation requirements. Background supporting audit readiness activities within a DevSecOps or Agile delivery environment, including familiarity with automated Body of Evidence generation, continuous compliance monitoring pipelines, and Security Technical Implementation Guide compliance tracking as they relate to audit evidence quality and documentation currency. Relevant professional certification in audit, quality, or compliance, such as the Certified Internal Auditor (CIA), Certified Quality Auditor (CQA), or CompTIA Security+ CE, demonstrating a structured and standards‑based approach to audit evidence management, governance documentation, and corrective action program support. Familiarity with Risk Management Framework compliance activities, including basic working knowledge of Plan of Action and Milestones management, security control documentation requirements, and audit evidence traceability standards as they apply to program‑level compliance reporting and external auditor engagement. Experience coordinating audit and compliance activities across cross‑functional program teams spanning program management, cybersecurity, quality assurance, and deliverables management disciplines, including demonstrated ability to consolidate inputs from multiple workstreams into coherent, audit‑ready evidence packages delivered on schedule. ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission‑critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We Value Attracting and developing top talent and high‑performing teams Fostering a culture that is engaging, accountable, and mission‑driven Meet the challenge. Make a difference with Everforth ECS! #J-18808-Ljbffr ECS