Role - IT Auditor (GRC/SOC)

Qualification - Fresher Graduate - B.com / B.SC / BCA or relevant

CTC - 3.6 LPA

Must have -

1. Excellent Communication skill
2. Basic understanding of GRC and cyber security

Position Summary The SOC 2 and HIPAA Compliance Tester/Associate is responsible for performing control testing, evidence collection, and compliance validation to support the organization’s information security and regulatory compliance objectives. This role ensures ongoing adherence to SOC 2 Trust Services Criteria and HIPAA Security & Privacy Rules, supporting internal and external audits, maintaining compliance documentation, and strengthening the organization’s GRC (Governance, Risk, and Compliance) framework.

Key Responsibilities

SOC 2 and HIPAA Compliance Testing

- Perform control testing to assess the design and operating effectiveness of controls aligned with SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy).
- Conduct HIPAA Security Rule and Privacy Rule compliance assessments to verify that policies, procedures, and safeguards are effectively implemented.
- Collaborate with control owners to gather, review, and validate audit evidence for SOC 2 and HIPAA compliance.
- Document findings, observations, and recommendations in alignment with compliance frameworks and audit requirements.
- Support SOC 2 Type I/II readiness assessments, HIPAA gap analyses,



and remediation tracking through closure and follow-up testing.
- Contribute to risk assessments, business impact analyses, and ongoing security awareness initiatives.

Audit, Documentation, and Technical Understanding

- Apply fundamental audit principles, including risk assessment, materiality, independence, and sufficiency of evidence, to evaluate internal control frameworks.
- Maintain a strong understanding of technical environments — including cybersecurity, virtualization, data centers, and cloud computing — and translate technical concepts for diverse audiences, including senior management.
- Prepare clear, concise, and re-performable documentation to support audit findings and compliance validation.
- Demonstrate excellent communication skills, both written and verbal, ensuring clarity and professionalism in all deliverables.

General and Cross-Functional Responsibilities

- Maintain knowledge of relevant regulations and industry standards (e.g., SSAE 18/SOC, HIPAA, ISO 27001, COSO, HITRUST) and apply best practices to address compliance requirements.
- Manage multiple priorities effectively within a deadline-driven environment, demonstrating solid time management, organization, and project coordination skills.
- Support the continuous improvement of the compliance testing program and contribute to a culture of security and accountability.

📌 IT Audit (GRC/SOC) Fresher Graduate - B.com / B.SC / BCA or relevant (Hyderabad)
🏢 4AT CONSULTING
📍 Hyderabad