There is no, right or wrong answer to this question. It depends on the geographies in which your company operates and the demands of your enterprise customers. ISO 27001 is better recoginized internationally, outside of North America. SOC 2 is managed by the AICPA, which is an American body, and therefore SOC-2 accreditation has better recognition and acceptance in North America.