Junior SOC 2 Type 2 Auditor

About the role

We are looking for a Junior SOC 2 Type 2 Auditor to support audit activities from planning through completion. The role offers hands‑on experience testing controls across the five Trust Services Criteria and collaborating with cross‑functional teams.

Key responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Assist in reviewing and testing controls related to Security, Availability, Confidentiality, Processing Integrity, and Privacy.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness under senior auditor supervision.
• Identify control gaps, exceptions, and missing evidence and communicate them to stakeholders.
• Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
• Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
• Participate in walkthroughs with IT, Security, Engineering, HR, Legal, Finance, and other business teams.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity, Accounting, Risk Management or related field.
• 1–2 years of experience in IT Audit, Information Security, GRC, Risk, Compliance or relevant internship.
• Good understanding of SOC 2 Trust Services Criteria and IT General Controls.
• Strong documentation, analytical, and communication skills.

Required skills

• SOC 2 Trust Services Criteria
• IT General Controls (Access Management, Change Management, Logical Security, Backup and Recovery, Incident Management, Risk Management, Vendor Management, Security Awareness)
• Cloud platforms: AWS, Azure, GCP
• Familiarity with GRC or audit management platforms