Junior SOC 2 & ISO Auditor

Experience: 0-2 Years
Position: Junior SOC 2 & ISO Auditor
Department: Cybersecurity / GRC / Compliance
Primary Focus: SOC 2 Client Audits & IBN Internal Audits

Role Overview

IBN is looking for a Junior SOC 2 & ISO Auditor to support client audit and compliance engagements, as well as IBN's internal audit and compliance activities.

The primary responsibility will be supporting SOC 2 assessments and audits, with additional exposure to ISO/IEC 27001:2022 and ISO 9001:2015. The candidate will work closely with Senior Auditors/GRC Consultants and client stakeholders to collect evidence, perform control reviews, identify gaps, maintain audit documentation, and track remediation.

Key Responsibilities:

1. SOC 2 Client Audits

• Support SOC 2 Type I and Type II audit and readiness engagements.
• Understand SOC 2 Trust Services Criteria and applicable client controls.
• Coordinate with client teams for collection of audit evidence.
• Review evidence for completeness, accuracy, relevance, and period of coverage.
• Assist in testing controls and documenting testing results.
• Maintain SOC 2 control matrices, evidence trackers, audit workpapers, and issue trackers.
• Identify missing evidence, control gaps, exceptions, and potential observations.
• Follow up with clients for pending evidence and clarifications.
• Support preparation of audit findings and remediation recommendations.
• Participate in client meetings, walkthroughs, and audit discussions under Senior Auditor guidance.

2. ISO/IEC 27001:2022 Client Assessments

• Support ISO 27001:2022 implementation, gap assessment, and internal audit activities.
• Review information security policies, procedures, risk assessments, SoA, and control implementation.
• Assist in assessing controls relating to:
• Access Management
• Asset Management
• Incident Management
• Vulnerability Management
• Backup and Business Continuity
• Supplier Management
• Change Management
• Security Awareness
• Logging and Monitoring
• Document gaps, observations, and non-conformities.
• Support corrective action and remediation tracking.

3. ISO 9001:2015 – Client/Internal Audit Support

• Support audits against ISO 9001:2015 requirements.
• Review documented processes, procedures, records, and quality objectives.
• Verify implementation of defined processes.
• Assist in identifying process gaps, observations, and non-conformities.
• Maintain audit checklists and supporting evidence.
• Support corrective action follow-up and closure.

4. IBN Internal Audit

• Conduct/support periodic internal audits of IBN's own processes and controls.
• Review implementation of IBN policies, SOPs, security controls, and documented processes.
• Perform internal checks covering areas such as:
• IT and cybersecurity controls
• User access and employee lifecycle
• Asset management
• HR and employee documentation
• Vendor management
• Backup and business continuity
• Incident management
• Information security policies
• Quality processes
• Maintain internal audit evidence and working papers.
• Identify gaps and prepare internal audit observations.
• Coordinate with IBN teams for corrective actions and closure.
• Prepare periodic internal audit status reports for management.

5. Documentation & Reporting

• Maintain audit documentation in an organized and audit-ready manner.
• Prepare evidence trackers, control matrices, checklists, and workpapers.
• Document audit observations and supporting evidence.
• Track open issues and corrective actions.
• Assist Senior Auditors in preparing client and internal audit reports.
• Ensure confidentiality and appropriate handling of client information and audit evidence.

Required Skills

• Basic to intermediate understanding of SOC 2.
• Basic understanding of ISO/IEC 27001:2022 and ISO 9001:2015.
• Understanding of information security, IT controls, risk, compliance, and audit concepts.
• Good analytical and problem-solving skills.
• Strong attention to detail.
• Good documentation and report-writing skills.
• Good verbal and written communication.
• Ability to coordinate professionally with clients and internal teams.
• Good working knowledge of MS Excel, Word and PowerPoint.

Preferred Qualifications

• ISO 27001 Foundation / Internal Auditor certification.
• ISO 9001 Foundation / Internal Auditor certification.
• SOC 2 training or certification.
• CISA / CISM / Security+ or GRC-related certification – pursuing or completed.
• Exposure to ITGC, VAPT, SOC operations, cloud security, IAM, or cybersecurity is an advantage.

Ideal Candidate

• A detail-oriented and proactive candidate who wants to build a career in SOC 2 auditing, GRC, cybersecurity compliance, and ISO audits.
• The candidate should be comfortable working with both external clients and IBN's internal teams, be willing to learn different control frameworks, and have the ability to maintain high-quality audit documentation and follow through on evidence and remediation activities.
• Primary KPI: Quality and timely completion of SOC 2 audit activities, evidence review, documentation, client coordination, and IBN internal audit assignments.