SOC 2 Policy & Evidence Setup

My team is starting from scratch on our SOC 2 journey and I need a specialist who can craft the full set of policies and assemble the supporting evidence across every control area. The priority is clear: create documentation and proof that will stand up to an external audit—security, availability, processing integrity, confidentiality, and privacy all need to be covered.

You will work directly with me to:

• Draft tailored, audit-ready policies that map to each SOC 2 Trust Services Criterion.
• Identify, collect, and organize real-time evidence (logs, screenshots, configurations, workflow records) so it is easy for auditors to verify.
• Set up a repeatable process—templates, version control, and a simple evidence-collection calendar—so we stay compliant as we grow.

If you are comfortable leveraging common GRC tools such as Vanta, Drata, or Secureframe that’s a plus, but I’m open to spreadsheets and shared drives if that fits our size right now. What matters is proven SOC 2 success and the ability to guide a first-time team through the details without drowning us in jargon.

Acceptance criteria:
• A complete policy library, peer-reviewed and aligned to all SOC 2 controls.
• A centralized evidence repository, cross-referenced to each policy and control.
• A short hand-off guide explaining upkeep, renewal timelines, and next steps toward the formal audit.

Please share a brief note on previous SOC 2 projects and your estimated timeline for delivering the draft set.