> Markdown version of [/jobs/ext/234524-entry-level-cyber-security-it-audit-associate-soc-2](https://www.wearedevelopers.com/jobs/ext/234524-entry-level-cyber-security-it-audit-associate-soc-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Entry-Level Cyber Security / IT Audit Associate (SOC 2)

- **Company:** ConstellationGRC CPA PC
- **Location:** San Marcos, CA, United States (Remote available)
- **Experience:** Starter
- **Salary:** $41,600.0
- **Contract:** Internship / Graduate position
- **Skills:** Microsoft Windows, Spreadsheets, CompTIA Security+, Cyber Security, Information Systems, Information Technology Audit, IT General Controls (ITGC), Information Technology, Gsuite, CIS Benchmarks
- **Published:** May 31, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1de8e6ad90ab1d31

## About the Role

Do you have experience in Zoom?, Do you have a Bachelor's degree?, * Education: Degree or in-progress degree in Cybersecurity, Information Systems, IT/IS Audit, Computer Science, or related field (comparable education such as a cyber bootcamp + college coursework welcome).

 * Clear, confident communication-comfortable on Zoom/Teams and in writing.
 * Strong organization & attention to detail; you live by checklists and deadlines.
 * Foundational knowledge of IT general controls, security basics, and what SOC 2 is.
 * Proficiency with Google Workspace or Microsoft 365, spreadsheets, and videoconferencing tools.
 * Ability to work Pacific-time core hours.
 * Early-career certs (e.g., ISC2 CC, CompTIA Security+, CCSK, ISO 27001 Foundations).

Nice to Have

 * Coursework or projects in GRC, audit, or risk management.
 * Familiarity with SOC 2 / ISO 27001 / CIS Controls / NIST frameworks.
 * Internship, campus, or capstone experience (include links or brief descriptions).

## Description

The position will start off remote until Constellation establishes an office within 12 miles of San Marcos, CA. After that time, most work days will be on site.

The Opportunity
This is an entry-level, client-facing role supporting SOC 2 audits. You'll meet with client stakeholders, answer routine questions, collect evidence, maintain trackers, and assist lead auditors with testing and documentation. Training and clear checklists provided-no prior professional experience required.

What You'll Do

 * Join client calls during SOC 2 engagements; answer common process questions and escalate complex items.
 * Collect, label, and organize evidence (screenshots, exports, policies) mapped to Trust Services Criteria.
 * Maintain trackers, due dates, organized folders; capture notes and action items after meetings.
 * Assist with control walkthroughs and basic testing under supervision; draft clear workpapers.
 * Prepare client communications (scheduling, reminders, status updates) and Q&A docs.
 * Support related administrative functions: calendar coordination, e-signature packets, intake forms, ticket triage.
 * (As time allows) Assist adjacent frameworks (GDPR, HIPAA) with senior guidance.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)