Junior SOC 2 Type 2 Auditor

Junior SOC 2 Type 2 Auditor

Position Overview

Clearwater is looking for a Junior SOC 2 Type 2 Auditor  to support the planning, execution, and documentation of SOC 2 Type 2 audits. The role will work closely with internal teams, control owners, external auditors, and compliance stakeholders to assess the design and operating effectiveness of controls and ensure appropriate audit evidence is maintained.

The ideal candidate should have good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks, with strong attention to detail and documentation skills.

Key Responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Assist in reviewing and testing controls related to security, availability, confidentiality, processing integrity, and privacy, as applicable.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness  under the supervision of senior auditors.
• Review evidence for completeness, accuracy, relevance, and appropriate audit periods.
• Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders.
• Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
• Follow up with control owners to obtain missing or updated evidence.
• Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
• Support management in tracking remediation plans and closure of identified control deficiencies.
• Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams.
• Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation.
• Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Risk Management, or a related field.
• 1-2 years of experience in IT audit, information security, GRC, risk, compliance, or a related field; relevant internship or equivalent experience may be considered.
• Good understanding of  SOC 2 Trust Services Criteria.
• Familiarity with IT General Controls (ITGC), including:
• Access management
• Change management
• Logical security
• Backup and recovery
• Incident management
• Risk management
• Vendor management
• Security awareness
• Basic understanding of audit concepts, including control objectives, control testing, evidence evaluation, exceptions, and remediation.
• Strong documentation and analytical skills.
• Excellent attention to detail and ability to work with large volumes of evidence.
• Good written and verbal communication skills.
• Ability to work collaboratively with multiple teams and stakeholders.

Preferred Qualifications

• Experience supporting a SOC 2 Type 2 audit.
• Familiarity with AICPA Trust Services Criteria.
• Exposure to ISO 27001, HIPAA, HITRUST, PCI DSS, NIST, or other security/compliance frameworks.
• Experience with GRC or audit management platforms.
• Certifications such as Security+, CISA, ISO 27001 Foundation/Lead Auditor, or similar  are a plus.
• Familiarity with cloud environments such as AWS, Azure, or GCP is beneficial.

Reporting Structure

Reports to:   GRC Compliance Manager

Level:  Junior / Entry-Level

Employment Type:  Full-Time, WFO, Pune

Experience:  1-2 years

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues in the role. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed. 

Clearwater is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Clearwater/Redspin’s Recruiting team if you need any assistance completing any forms or to otherwise participating in the application process. 

Mental/Physical Requirements: Fast paced environment handling multiple demands. Must be able to exercise appropriate judgment as necessary. Requires a high level of initiative and independence. Excellent written and oral communication skills required. Requires the ability to use a personal computer for extended periods of time.