Company Description GRCTrail helps organizations reduce manual effort and spreadsheet-based compliance work by automating controls, task assignments, evidence collection, and RoPA tracking. The platform supports multiple frameworks, including GDPR, ISO 27001, SOC 2, and NIS2, enabling teams to manage complex requirements in a unified way. By focusing on automation and streamlined workflows, GRCTrail helps prevent compliance drift and maintain consistent adherence to standards.

The solution is designed to speed audit and certification readiness, giving customers greater confidence in their security and compliance posture.

Role Description This is a remote contract role for a SOC 2 Consultant Partnership with GRCTrail. The consultant will work closely with GRCTrail’s team and clients to guide SOC 2 readiness efforts, including mapping controls, reviewing existing policies and procedures, and suggesting improvements aligned with SOC 2 trust service criteria. Day-to-day activities may include conducting gap assessments, advising on risk management practices, helping configure and optimize GRCTrail’s platform for SOC 2 workflows, and preparing documentation and evidence for audits.





The role also involves collaborating with client stakeholders to clarify requirements, support remediation plans, and provide practical recommendations for sustainable compliance. Consultants may participate in product feedback sessions to help refine GRCTrail features and content related to SOC 2 and broader security frameworks.

Qualifications

- Strong knowledge of SOC 2 trust service criteria and experience guiding organizations through SOC 2 readiness and audits.
- Practical experience with information security and compliance for SOC2 especially in SaaS or technology environments.
- Ability to analyze controls, policies, and procedures, identify gaps, and propose clear, actionable remediation steps.
- Comfort working with compliance automation or GRC platforms, and interest in shaping how tools support SOC 2 workflows.
- Excellent written and verbal communication skills for explaining complex requirements to diverse stakeholders.
- Proven ability to work independently in a remote setting, manage multiple client engagements, and meet agreed timelines.
- Prior consulting or audit experience with SOC 2, information security, or risk management is highly beneficial.

📌 Consultant Partnership (España)
🏢 GRCTrail
📍 España