Junior SOC 2 Type 2 Auditor

Clearwater; Pune District; On-site; INR 550,000 - 850,000; Full time

Job summary

Clearwater is seeking a Junior SOC 2 Type 2 Auditor to support planning, execution, and documentation of SOC 2 Type 2 audits. You will work with control owners, internal teams, external auditors to assess design and operating effectiveness of controls and ensure audit evidence is maintained.

The ideal candidate should have a good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks, with strong attention to detail and documentation skills.

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity, accounting, or risk management.
• 1–2 years in IT audit, information security, or compliance.
• Understanding of SOC 2 Trust Services Criteria.
• Familiarity with ITGC controls and audit concepts.
• Strong documentation and analytical skills.

Responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Review and test controls related to security, availability, confidentiality, processing integrity, and privacy.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness.
• Review evidence for completeness, accuracy, and relevance.
• Identify gaps and communicate them to stakeholders.
• Maintain audit workpapers and evidence trackers.
• Follow up with control owners for missing evidence.
• Assist in preparing audit findings and remediation actions.
• Track remediation plans and closure of deficiencies.
• Participate in walkthroughs with IT, Security, Engineering, HR, Legal, Finance.
• Maintain SOC 2 policies and supporting documentation.

Skills

SOC 2

IT audit

Documentation

Analytical skills

Communication

Collaboration

Attention to detail

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

GRC platforms

Audit management tools

Job description

Position Overview

Clearwater is looking for a Junior SOC 2 Type 2 Auditor to support the planning, execution, and documentation of SOC 2 Type 2 audits. The role will work closely with internal teams, control owners, external auditors, and compliance stakeholders to assess the design and operating effectiveness of controls and ensure appropriate audit evidence is maintained.

The ideal candidate should have good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks, with strong attention to detail and documentation skills.

Key Responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Assist in reviewing and testing controls related to security, availability, confidentiality, processing integrity, and privacy, as applicable.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors.
• Review evidence for completeness, accuracy, relevance, and appropriate audit periods.
• Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders.
• Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
• Follow up with control owners to obtain missing or updated evidence.
• Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
• Support management in tracking remediation plans and closure of identified control deficiencies.
• Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams.
• Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation.
• Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Risk Management, or a related field.
• 1–2 years of experience in IT audit, information security, GRC, risk, compliance, or a related field; relevant internship or equivalent experience may be considered.
• Good understanding of SOC 2 Trust Services Criteria.
• Familiarity with IT General Controls (ITGC), including:
• Access management
• Change management
• Logical security
• Backup and recovery
• Incident management
• Risk management
• Vendor management
• Security awareness
• Basic understanding of audit concepts, including control objectives, control testing, evidence evaluation, exceptions, and remediation.
• Strong documentation and analytical skills.
• Excellent attention to detail and ability to work with large volumes of evidence.
• Good written and verbal communication skills.
• Ability to work collaboratively with multiple teams and stakeholders.

Preferred Qualifications

• Experience supporting a SOC 2 Type 2 audit.
• Familiarity with AICPA Trust Services Criteria.
• Exposure to ISO 27001, HIPAA, HITRUST, PCI DSS, NIST, or other security/compliance frameworks.
• Experience with GRC or audit management platforms.
• Certifications such as Security+, CISA, ISO 27001 Foundation/Lead Auditor, or similar are a plus.
• Familiarity with cloud environments such as AWS, Azure, or GCP is beneficial.

Reporting Structure

Reports to: GRC Compliance Manager

Level: Junior / Entry-Level

Employment Type: Full-Time, WFO, Pune

Experience: 1–2 years

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process.

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.