> Markdown version of [/jobs/ext/2618621-entry-level-cyber-security-it-audit-associate-soc-2](https://www.wearedevelopers.com/jobs/ext/2618621-entry-level-cyber-security-it-audit-associate-soc-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Entry-Level Cyber Security / IT Audit Associate (SOC 2)

- **Company:** ConstellationGRC CPA PC
- **Location:** San Marcos, CA, United States (Remote available)
- **Experience:** Starter
- **Salary:** $41,600.0
- **Contract:** Internship / Graduate position
- **Skills:** Microsoft Windows, Spreadsheets, CompTIA Security+, Cyber Security, Information Systems, Information Technology Audit, IT General Controls (ITGC), Information Technology, Gsuite, CIS Benchmarks
- **Published:** August 6, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=080fc3f9d06cd4db

## About the Role

* Education: Degree or in-progress degree in Cybersecurity, Information Systems, IT/IS Audit, Computer Science, or related field (comparable education such as a cyber bootcamp + college coursework welcome).
 * Clear, confident communication-comfortable on Zoom/Teams and in writing.
 * Strong organization & attention to detail; you live by checklists and deadlines.
 * Foundational knowledge of IT general controls, security basics, and what SOC 2 is.
 * Proficiency with Google Workspace or Microsoft 365, spreadsheets, and videoconferencing tools.
 * Ability to work Pacific-time core hours.
 * Early-career certs (e.g., ISC2 CC, CompTIA Security+, CCSK, ISO 27001 Foundations).

Nice to Have

 * Coursework or projects in GRC, audit, or risk management.
 * Familiarity with SOC 2 / ISO 27001 / CIS Controls / NIST frameworks.
 * Internship, campus, or capstone experience (include links or brief descriptions).

## Description

The position will start off remote until Constellation establishes an office within the San Marcos or Escondido area. After that time, most work days will be on site.

The Opportunity
This is an entry-level, client-facing role supporting SOC 2 audits. You'll meet with client stakeholders, answer routine questions, collect evidence, maintain trackers, and assist lead auditors with testing and documentation. Training and clear checklists provided-no prior professional experience required.

What You'll Do

 * Join client calls during SOC 2 engagements; answer common process questions and escalate complex items.
 * Collect, label, and organize evidence (screenshots, exports, policies) mapped to Trust Services Criteria.
 * Maintain trackers, due dates, organized folders; capture notes and action items after meetings.
 * Assist with control walkthroughs and basic testing under supervision; draft clear workpapers.
 * Prepare client communications (scheduling, reminders, status updates) and Q&A docs.
 * Support related administrative functions: calendar coordination, e-signature packets, intake forms, ticket triage.
 * (As time allows) Assist adjacent frameworks (GDPR, HIPAA) with senior guidance.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)