Remote Sr GRC & Compliance Manager (CST & EST considered)

About the role

Location: Remote. For over 50 years, Transworld Systems, Inc. has been a leader in providing business process outsourcing services, including accounts receivable management, customer relationship management, and back-office services to a diverse customer base. Our 60,000 clients benefit from our ability to help them address immediate business needs while fostering long‑term growth throughout the customer lifecycle. Why consider TSI (part of TSI family of companies)? Team‑oriented work environment, growth opportunity, and a comprehensive benefits package. The Senior GRC & Compliance Manager will own and operate the company’s security compliance program, providing day‑to‑day ownership of external audits, control management, evidence collection, remediation tracking, and coordination with control owners and auditors, moving compliance from an annual audit project to a repeatable, year‑round program.

Responsibilities

• Compliance Program Ownership
  • Lead operational execution for SOC 2, ISO 27001, HITRUST, FISMA, HIPAA, and PCI-DSS compliance activities across the organization.
  • Own day-to-day execution of the Security and AI Risk & Governance programs.
  • Maintain a consolidated mapping of audit requirements and controls across in-scope business units and reports.
  • Assign and maintain clear control ownership across business, technology, security, HR, finance, and other stakeholder groups.
• Audit Execution and Evidence Management
  • Work directly with control owners to collect, review, organize, and validate audit evidence before submission.
  • Coordinate evidence requests, samples, follow-up questions, and status updates with external auditors.
  • Identify control or evidence gaps and drive remediation plans with accountable owners, target dates, and escalation paths.
  • Track audit readiness, open items, exceptions, dependencies, and risks; provide regular reporting to security and technology leadership.
• Governance, Documentation, and Continuous Improvement
  • Maintain policies, standards, control narratives, system descriptions, and other compliance documentation.
  • Establish an annual compliance calendar so controls and evidence are managed throughout the year rather than only during audit periods.
  • Develop recurring control testing and evidence validation processes to identify issues before external audit fieldwork.
  • Support additional regulatory, customer, and security compliance requirements as the program evolves.
  • Partner with Security, IT, Legal, HR, Finance, Internal Audit, and business teams to improve control maturity and accountability.
• Near-Term Success Measures