Remote Sr GRC & Compliance Manager (CST & EST considered)

Transworld Systems Inc.•Aiken, SC

7d•Remote

About The Position

Transworld Systems Inc. is seeking a Senior GRC & Compliance Manager to own and operate the company’s security compliance program. This role will provide day-to-day ownership of external audits, control management, evidence collection, remediation tracking, and coordination with control owners and auditors. The objective is to move compliance from an annual audit project to a repeatable, year-round program. The initial priority for this role is execution of the current PCI audit cycle and establishment of an AI Governance program. The resource will immediately establish controls and ownership, coordinate evidence collection, identify readiness gaps, drive remediation, and manage auditor requests through fieldwork and report completion.

Requirements

5+ years of experience in information security governance, risk, compliance, audit, or a related discipline.
Hands-on experience managing SOC 2 or comparable security audits, including control mapping, evidence collection, auditor coordination, and remediation.
Strong understanding of security and IT controls across identity and access management, change management, vulnerability management, incident response, logging and monitoring, backup and recovery, third-party risk, and security governance.
Experience coordinating control activities across technical and business teams.
Ability to critically evaluate evidence and determine whether it shows that a control operated as expected.
Strong project and program management skills, including the ability to manage deadlines, dependencies, and escalations.
Ability to explain audit and compliance issues clearly to both technical teams and executive leadership.

Nice To Haves

Experience operating compliance programs across multiple entities or business units.
Experience using GRC or audit management platforms and maintaining structured evidence repositories.
Familiarity with complementary security frameworks, such as NIST CSF, CIS Controls, ISO 27001, or similar standards.
Relevant certifications, such as CISA, CISM, CRISC, CISSP, or equivalent experience.

Responsibilities

Lead operational execution for SOC 2, ISO 27001, HITRUST, FISMA, HIPAA, and PCI-DSS compliance activities across the organization.
Own day-to-day execution of the Security and AI Risk & Governance programs.
Maintain a consolidated mapping of audit requirements and controls across in-scope business units and reports.
Assign and maintain clear control ownership across business, technology, security, HR, finance, and other stakeholder groups.
Work directly with control owners to collect, review, organize, and validate audit evidence before submission.
Coordinate evidence requests, samples, follow-up questions, and status updates with external auditors.
Identify control or evidence gaps and drive remediation plans with accountable owners, target dates, and escalation paths.
Track audit readiness, open items, exceptions, dependencies, and risks; provide regular reporting to security and technology leadership.
Maintain policies, standards, control narratives, system descriptions, and other compliance documentation.
Establish an annual compliance calendar so controls and evidence are managed throughout the year rather than only during audit periods.
Develop recurring control testing and evidence validation processes to identify issues before external audit fieldwork.
Support additional regulatory, customer, and security compliance requirements as the program evolves.
Partner with Security, IT, Legal, HR, Finance, Internal Audit, and business teams to improve control maturity and accountability.