Job Description
Key Responsibilities
Support SOC 2 Type 2 audit activities from planning through completion.
Assist in reviewing and testing controls related to Security, Availability, Confidentiality, Processing Integrity, and Privacy, as applicable.
Collect, organize, and validate audit evidence from control owners.
Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors.
Review evidence for completeness, accuracy, relevance, and appropriate audit periods.
Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders.
Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
Follow up with control owners to obtain missing or updated evidence.
Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
Support management in tracking remediation plans and closure of identified control deficiencies.
Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance,



and other business teams.
Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation.
Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards.

Required Qualifications
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting, Risk Management, or a related field.
1–2 years of experience in IT Audit, Information Security, GRC, Risk, Compliance, or a related field. Relevant internship or equivalent experience may be considered.
Positive understanding of SOC 2 Trust Services Criteria.
Familiarity with IT General Controls (ITGC), including:
Access Management
Change Management
Logical Security
Backup and Recovery
Incident Management
Risk Management
Vendor Management
Security Awareness
Basic understanding of audit concepts, including control

📌 Junior Soc 2 Type 2 Auditor Pune
🏢 engineersmind
📍 Pune