Experience: 0-2 Years

Position: Junior SOC 2 & ISO Auditor

Department: Cybersecurity / GRC / Compliance

Primary Focus: SOC 2 Client Audits & IBN Internal Audits

Role Overview

IBN is looking for a Junior SOC 2 & ISO Auditor to support client audit and compliance engagements, as well as IBN's internal audit and compliance activities.

The primary responsibility will be supporting SOC 2 assessments and audits, with additional exposure to ISO/IEC 27001:2022 and ISO 9001:2015. The candidate will work closely with Senior Auditors/GRC Consultants and client stakeholders to collect evidence, perform control reviews, identify gaps, maintain audit documentation, and track remediation.

Key Responsibilities

1. SOC 2 Client Audits

- Support SOC 2 Type I and Type II audit and readiness engagements.
- Understand SOC 2 Trust Services Criteria and applicable client controls.
- Coordinate with client teams for collection of audit evidence.
- Review evidence for completeness, accuracy, relevance, and period of coverage.
- Assist in testing controls and documenting testing results.
- Maintain SOC 2 control matrices, evidence trackers, audit workpapers, and issue trackers.
- Identify missing evidence, control gaps, exceptions, and potential observations.
- Follow up with clients for pending evidence and clarifications.
- Support preparation of audit findings and remediation recommendations.
- Participate in client meetings, walkthroughs, and audit discussions under Senior Auditor guidance.

1. ISO/IEC 27001:2022 Client Assessments

- Support ISO 27001:2022 implementation, gap assessment, and internal audit activities.
- Review information security policies, procedures, risk assessments, SoA, and control implementation.
- Assist in assessing controls relating to:

- Access Management

- Asset Management

- Incident Management

- Vulnerability Management





- Backup and Business Continuity

- Supplier Management

- Change Management

- Security Awareness

- Logging and Monitoring
- Document gaps, observations, and non-conformities.
- Support corrective action and remediation tracking.

1. ISO 9001:2015 – Client/Internal Audit Support

- Support audits against ISO 9001:2015 requirements.
- Review documented processes, procedures, records, and quality objectives.
- Verify implementation of defined processes.
- Assist in identifying process gaps, observations, and non-conformities.
- Maintain audit checklists and supporting evidence.
- Support corrective action follow-up and closure.

1. IBN Internal Audit

- Conduct/support periodic internal audits of IBN's own processes and controls.
- Review implementation of IBN policies, SOPs, security controls, and documented processes.
- Perform internal checks covering areas such as:

- IT and cybersecurity controls
- User access and employee lifecycle

- Asset management

- HR and employee documentation

- Vendor management

- Backup and business continuity

- Incident management

- Information security policies

- Quality processes
- Maintain internal audit evidence and working papers.
- Identify gaps and prepare internal audit observations.
- Coordinate with IBN teams for corrective actions and closure.
- Prepare periodic internal audit status reports for management.

1. Documentation & Reporting

- Maintain audit documentation in an organized and audit-ready manner.




- Prepare evidence trackers, control matrices, checklists, and workpapers.
- Document audit observations and supporting evidence.
- Track open issues and corrective actions.
- Assist Senior Auditors in preparing client and internal audit reports.
- Ensure confidentiality and appropriate handling of client information and audit evidence.

Required Skills

- Basic to intermediate understanding of SOC 2.
- Basic understanding of ISO/IEC 27001:2022 and ISO 9001:2015.
- Understanding of information security, IT controls, risk, compliance, and audit concepts.
- Good analytical and problem-solving skills.
- Strong attention to detail.
- Good documentation and report-writing skills.
- Good verbal and written communication.
- Ability to coordinate professionally with clients and internal teams.
- Valuable working knowledge of MS Excel, Word and PowerPoint.

Preferred Qualifications

- ISO 27001 Foundation / Internal Auditor certification.
- ISO 9001 Foundation / Internal Auditor certification.
- SOC 2 training or certification.
- CISA / CISM / Security+ or GRC-related certification – pursuing or completed.
- Exposure to ITGC, VAPT, SOC operations, cloud security, IAM, or cybersecurity is an advantage.

Ideal Candidate

- A detail-oriented and proactive candidate who wants to build a career in SOC 2 auditing, GRC, cybersecurity compliance, and ISO audits.
- The candidate should be comfortable working with both external clients and IBN's internal teams, be willing to learn different control frameworks, and have the ability to maintain high-quality audit documentation and follow through on evidence and remediation activities.
- Primary KPI: Quality and timely completion of SOC 2 audit activities, evidence review, documentation, client coordination, and IBN internal audit assignments.

📌 Junior SOC 2 & ISO Auditor (Pune)
🏢 IBN Technologies
📍 Pune