Junior SOC 2 & ISO Auditor

Key Responsibilities

• SOC 2 Client Audits

• Support SOC 2 Type I and Type II audit and readiness engagements.

• Understand SOC 2 Trust Services Criteria and applicable client controls.

• Coordinate with client teams for collection of audit evidence.

• Review evidence for completeness, accuracy, relevance, and period of coverage.

• Assist in testing controls and documenting testing results.

• Maintain SOC 2 control matrices, evidence trackers, audit workpapers, and issue trackers.

• Identify missing evidence, control gaps, exceptions, and potential observations.

• Follow up with clients for pending evidence and clarifications.

• Support preparation of audit findings and remediation recommendations.

• Participate in client meetings, walkthroughs, and audit discussions under Senior Auditor guidance.

• ISO/IEC 27001:2022 Client Assessments

• Support ISO 27001:2022 implementation, gap assessment, and internal audit activities.

• Review information security policies, procedures, risk assessments, SoA, and control implementation.

• Assist in assessing controls relating to:

• Access Management

• Asset Management

• Incident Management

• Vulnerability Management

• Backup and Business Continuity

• Supplier Management

• Change Management

• Security Awareness

• Logging and Monitoring

• Document gaps, observations, and non-conformities.

• Support corrective action and remediation tracking.

• ISO 9001:2015 – Client/Internal Audit Support

• Support audits against ISO 9001:2015 requirements.

• Review documented processes, procedures, records, and quality objectives.

• Verify implementation of defined processes.

• Assist in identifying process gaps, observations, and non-conformities.

• Maintain audit checklists and supporting evidence.

• Support corrective action follow-up and closure.

• IBN Internal Audit

• Conduct/support periodic internal audits of IBN's own processes and controls.

• Review implementation of IBN policies, SOPs, security controls, and documented processes.

• Perform internal checks covering areas such as:

• IT and cybersecurity controls

• User access and employee lifecycle

• Asset management

• HR and employee documentation

• Vendor management

• Backup and business continuity

• Incident management

• Information security policies

• Quality processes

• Maintain internal audit evidence and working papers.

• Identify gaps and prepare internal audit observations.

• Coordinate with IBN teams for corrective actions and closure.

• Prepare periodic internal audit status reports for management.

• Documentation & Reporting

• Maintain audit documentation in an organized and audit-ready manner.

• Prepare evidence trackers, control matrices, checklists, and workpapers.

• Document audit observations and supporting evidence.

• Track open issues and corrective actions.

• Assist Senior Auditors in preparing client and internal audit reports.

• Ensure confidentiality and appropriate handling of client information and audit evidence.

Requirements & Tech Stack

• Basic to intermediate understanding of SOC 2.
• Basic understanding of ISO/IEC 27001:2022 and ISO 9001:2015.
• Understanding of information security, IT controls, risk, compliance, and audit concepts.
• Good analytical and problem-solving skills.
• Strong attention to detail.
• Good documentation and report-writing skills.
• Good verbal and written communication.
• Ability to coordinate professionally with clients and internal teams.
• Good working knowledge of MS Excel, Word and PowerPoint.

Qualifications

• ISO 27001 Foundation / Internal Auditor certification (preferred)
• ISO 9001 Foundation / Internal Auditor certification (preferred)
• SOC 2 training or certification (preferred)
• CISA / CISM / Security+ or GRC-related certification – pursuing or completed (preferred)
• Exposure to ITGC, VAPT, SOC operations, cloud security, IAM, or cybersecurity is an advantage.