Junior SOC 2 Type 2 Auditor

engineersmind · India

Job Description

Key Responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Assist in reviewing and testing controls related to Security, Availability, Confidentiality, Processing Integrity, and Privacy, as applicable.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors.
• Review evidence for completeness, accuracy, relevance, and appropriate audit periods.
• Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders.
• Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
• Follow up with control owners to obtain missing or updated evidence.
• Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
• Support management in tracking remediation plans and closure of identified control deficiencies.
• Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams.
• Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation.
• Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting, Risk Management, or a related field.
• 1–2 years of experience in IT Audit, Information Security, GRC, Risk, Compliance, or a related field. Relevant internship or equivalent experience may be considered.
• Good understanding of SOC 2 Trust Services Criteria.
• Familiarity with IT General Controls (ITGC), including:
• Access Management
• Change Management
• Logical Security
• Backup and Recovery
• Incident Management
• Risk Management
• Vendor Management
• Security Awareness
• Basic understanding of audit concepts, including control objectives, control testing, evidence evaluation, exceptions, and remediation.
• Strong documentation and analytical skills.
• Excellent attention to detail and ability to work with large volumes of evidence.
• Good written and verbal communication skills.
• Ability to work collaboratively with multiple teams and stakeholders.

Preferred Qualifications

• Experience supporting a SOC 2 Type 2 audit.
• Familiarity with AICPA Trust Services Criteria.
• Exposure to ISO 27001, HIPAA, HITRUST, PCI DSS, NIST, or other security/compliance frameworks.
• Experience with GRC or audit management platforms.
• Certifications such as Security+, CISA, ISO 27001 Foundation/Lead Auditor, or similar are a plus.
• Familiarity with cloud environments such as AWS, Azure, or GCP is beneficial.