SOC 2 Policy & Evidence Setup

My team is starting from scratch on our SOC 2 journey and I need a specialist who can craft the full set of policies and assemble the supporting evidence across every control area. The priority is clear: create documentation and proof that will stand up to an external audit—security, availability, processing integrity, confidentiality, and privacy all need to be covered. You will work directly with me to: • Draft tailored, audit-ready policies that map to each SOC 2 Trust Services Criterion. • Identify, collect, and organize real-time evidence (logs, screenshots, configurations, workflow records) so it is easy for auditors to verify. • Set up a repeatable process—templates, version control, and a simple evidence-collection calendar—so we stay compliant as we grow. If you are comfortable leveraging common GRC tools such as Vanta, Drata, or Secureframe that’s a plus, but I’m open to spreadsheets and shared drives if that fits our size right now. What matters is proven SOC 2 success and the ability to guide a first-time team through the details without drowning us in jargon. Acceptance criteria: • A complete policy library, peer-reviewed and aligned to all SOC 2 controls. • A centralized evidence repository, cross-referenced to each policy and control. • A short hand-off guide explaining upkeep, renewal timelines, and next steps toward the formal audit. Please share a brief note on previous SOC 2 projects and your estimated timeline for delivering the draft set.