Executive Vice President - Cybersecurity Governance

Job description

Role description About TresVista TresVista is a global enterprise offering a diversified portfolio of services that enables its clients to achieve resource optimization through leveraging an offshore capacity model. TresVista’s services include investment diligence, industry research, valuation, fund administration, accounting, and data analytics. TresVista has 1,500 employees across offices in North America, Europe, and Asia, providing high-caliber support and operating leverage to over 1,000 clients across geographies and asset classes, including asset managers, advisors, corporates, and entrepreneurs. TresVista is 'Great Place to Work-Certified™'  Key Role Deliverables: The EVP, Cybersecurity Governance is a senior leadership role within the Compliance organization, accountable for defining, governing, and overseeing the firm’s enterprise-wide cybersecurity, technology risk, and associated operational risk posture. The role serves as the second-line governance and challenge function, advising executive management and the Board on cybersecurity and IT risk matters while balancing risk mitigation with business enablement.   Strategy & Leadership Define and own the enterprise cybersecurity and IT risk governance strategy aligned to business objectives Act as a constructive challenger to product and service delivery leadership on cybersecurity and technology risk decisions Lead, mentor, and develop a high-performing team of cybersecurity governance and IT risk professionals Drive a culture of risk ownership and accountability across the organization through training and awareness sessions Governance & Compliance Design and oversee the cybersecurity and IT risk governance framework, including policies and standards Lead and manage the organization's SOC 2 and ISO certification initiatives Ensure ongoing compliance with applicable laws, regulations, and industry standards Provide governance oversight for emerging technologies, including cloud and AI-related risks and participate in and report to executive and Board- level risk committees Product, Service & Third-Party Risk Management Establish governance for cybersecurity risk assessments across technology products and services Own the Third-Party Cyber Risk Management framework, including due diligence and monitoring Partner with business and technology teams to embed security and privacy by design Operations & Reporting Provide oversight for cyber incident response, technology resilience, and business continuity readiness Define and oversee key risk indicators (KRIs) and cybersecurity dashboards Prepare and present executive and Board-level reporting on cybersecurity risk posture Prerequisites: Deep expertise in IT risk frameworks and compliance standards Proven ability to influence and negotiate with executive management and business heads on risk-related matters Ability to lead and develop a 8 to 15 member team with tight deadlines while delivering high quality and output Strong business acumen with the ability to align security and risk with business goals Strategic thinker with strong analytical and problem-solving abilities Demonstrated experience in evaluating the security of products, services, and third-party vendors Experience 15+ years of progressive experience in IT risk management, operational risk, IT compliance, and cybersecurity governance, preferably within the financial services sector 9+ years in senior leadership roles managing enterprise-wide risk programs and mentoring teams Education BE/ B.Tech or equivalent specialization in IT are preferred Professional certifications such as CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), or CISSP (Certified Information Systems Security Professional) are required CEH V11 or other equivalent Ethical Hacker degree is preferable Desired Knowledge: Familiarity with frameworks such as COBIT, NIST CSF, and FFIEC is highly desirable Compensation Compensation will be competitive and aligned with industry benchmarks, commensurate with experience and role seniority