Remote GRC & Compliance Leader - PCI & AI Risk

TSI - Transworld Systems Inc.; Columbus (OH); Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

401k with employer matching

Paid time off & holidays

Job summary

Transworld Systems Inc. is seeking a Senior GRC & Compliance Manager to own and operate the company’s security compliance program, including SOC 2, ISO 27001, PCI-DSS, and HITRUST. You will lead audits, evidence collection, remediation tracking, and coordinate with auditors and control owners.

The role focuses on moving from an annual audit to a year-round program, with immediate PCI cycle execution and AI governance setup, establishing controls, ownership, and regular reporting to leadership.

Qualifications

• 5+ years of experience in information security governance, risk, compliance, audit, or a related field.
• Hands-on experience managing SOC 2 or similar security audits with control mapping and evidence collection.

Responsibilities

• Own and operate the company's security compliance program across multiple frameworks.
• Lead day-to-day execution of Security and AI Risk & Governance programs.
• Maintain consolidated mapping of audit requirements and controls across in-scope units.
• Assign control ownership across business, technology, security, HR, and finance.
• Coordinate evidence requests and auditor communications; drive remediation plans.
• Provide regular reporting to security and technology leadership.

Skills

Security governance

Risk management

Compliance audits

Audit coordination

Controls knowledge

Program management

Communication

Cross-functional coordination

Education

CISA certification

CISM certification

CRISC certification

Tools

GRC platforms

Job description

Transworld Systems Inc. is seeking a Senior GRC & Compliance Manager to own and operate the company’s security compliance program, including SOC 2, ISO 27001, PCI-DSS, and HITRUST. You will lead audits, evidence collection, remediation tracking, and coordinate with auditors and control owners.

The role focuses on moving from an annual audit to a year-round program, with immediate PCI cycle execution and AI governance setup, establishing controls, ownership, and regular reporting to leadership.