Partner with us, don't work for us. GRCTrail is a compliance platform that automates the most painful part of ISO 27001: evidence collection. We're built by engineers, EU-first, and designed around ISO 27001 + GDPR — not a US SOC 2 tool with ISO bolted on. We're not hiring an employee. We're looking for 2–3 practicing ISO 27001 Lead Implementers / consultants to partner with as we bring our first clients through certification. What you get:

Qualified leads. We're actively reaching EU startups that need ISO 27001. Many of them need an implementer — we refer them to you.

A faster delivery toolkit. Run your own client implementations on GRCTrail at partner terms — automated evidence collection instead of chasing screenshots and spreadsheets.

A seat at the product table.

Your feedback directly shapes what we build: control mappings, evidence formats, auditor-readiness.

What you bring





Hands-on support onboarding our first clients onto the platform — the practitioner's voice where deep ISO expertise is needed.

Honest feedback on whether our evidence and control mappings match what certification auditors actually accept.

A few hours a month to start — versátil, alongside your existing practice.

Who we're looking for

Certified ISO 27001 Lead Implementer (or equivalent hands-on experience) with implementations you've personally taken through certification.

Currently active — running implementations for startups/scaleups, independently or in a small consultancy.

EU-based, familiar with local certification bodies. GDPR / DPO practice is a strong plus.

Comfortable working with an early-stage product and telling founders directly what's wrong with it.

📌 ISO 27001 Lead Implementer — Consulting Partner (Freelance · Remote · EU) (España)
🏢 GRCTrail
📍 España