Junior SOC 2 Type 2 Auditor

Junior SOC 2 Type 2 Auditor

Position Overview

Clearwater is looking for a Junior SOC 2 Type 2 Auditor to support the planning, execution, and documentation of SOC 2 Type 2 audits. The role will work closely with internal teams, control owners, external auditors, and compliance stakeholders to assess the design and operating effectiveness of controls and ensure appropriate audit evidence is maintained.

The ideal candidate should have good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks, with strong attention to detail and documentation skills.

Key Responsibilities

• Support SOC 2 Type 2 audit activities from planning through completion.
• Assist in reviewing and testing controls related to security, availability, confidentiality, processing integrity, and privacy, as applicable.
• Collect, organize, and validate audit evidence from control owners.
• Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors.
• Review evidence for completeness, accuracy, relevance, and appropriate audit periods.
• Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders.
• Maintain audit workpapers, testing documentation, evidence trackers, and issue logs.
• Follow up with control owners to obtain missing or updated evidence.
• Assist in preparing audit findings and documenting observations, exceptions, and remediation activities.
• Support management in tracking remediation plans and closure of identified control deficiencies.
• Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams.
• Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation.
• Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Risk Management, or a related field.
• 1–2 years of experience in IT audit, information security, GRC, risk, compliance, or a related field; relevant internship or equivalent experience may be considered.
• Good understanding of SOC 2 Trust Services Criteria.
• Familiarity with IT General Controls (ITGC), including:
• Access management
• Change management
• Logical security
• Backup and recovery
• Incident management
• Risk management
• Vendor management
• Security awareness
• Basic understanding of audit concepts, including control objectives, control testing, evidence evaluation, exceptions, and remediation.
• Strong documentation and analytical skills.
• Excellent attention to detail and ability to work with large volumes of evidence.
• Good written and verbal communication skills.
• Ability to work collaboratively with multiple teams and stakeholders.

Preferred Qualifications

• Experience supporting a SOC 2 Type 2 audit.
• Familiarity with AICPA Trust Services Criteria.
• Exposure to ISO 27001, HIPAA, HITRUST, PCI DSS, NIST, or other security/compliance frameworks.
• Experience with GRC or audit management platforms.
• Certifications such as Security+, CISA, ISO 27001 Foundation/Lead Auditor, or similar are a plus.
• Familiarity with cloud environments such as AWS, Azure, or GCP is beneficial.

Reporting Structure

Reports to:  GRC Compliance Manager

Level: Junior / Entry-Level

Employment Type: Full-Time, WFO, Pune

Experience: 1–2 years