About TresVista

TresVista is a global enterprise offering a diversified portfolio of services that enables its clients to achieve resource optimization through leveraging an offshore capacity model. TresVista’s services include investment diligence, industry research, valuation, fund administration, accounting, and data analytics. TresVista has 1,500 employees across offices in North America, Europe, and Asia, providing high-caliber support and operating leverage to over 1,000 clients across geographies and asset classes, including asset managers, advisors, corporates, and entrepreneurs.

TresVista is 'Outstanding Place to Work-Certified™'

Key Role Deliverables

The EVP, Cybersecurity Governance is a senior leadership role within the Compliance organization, accountable for defining, governing, and overseeing the firm’s enterprise-wide cybersecurity, technology risk, and associated operational risk posture. The role serves as the second-line governance and challenge function, advising executive management and the Board on cybersecurity and IT risk matters while balancing risk mitigation with business enablement.

Strategy & Leadership

Define and own the enterprise cybersecurity and IT risk governance strategy aligned to business objectives

Act as a constructive challenger to product and service delivery leadership on cybersecurity and technology risk decisions

Lead, mentor, and develop a high-performing team of cybersecurity governance and IT risk professionals

Drive a culture of risk ownership and accountability across the organization through training and awareness sessions

Governance & Compliance

Design and oversee the cybersecurity and IT risk governance framework, including policies and standards





Lead and manage the organization's SOC 2 and ISO certification initiatives

Ensure ongoing compliance with applicable laws, regulations, and industry standards

Provide governance oversight for emerging technologies, including cloud and AI-related risks and participate in and report to executive and Board- level risk committees

Product, Service & Third-Party Risk Management

Establish governance for cybersecurity risk assessments across technology products and services

Own the Third-Party Cyber Risk Management framework, including due diligence and monitoring

Partner with business and technology teams to embed security and privacy by design

Operations & Reporting

Provide oversight for cyber incident response, technology resilience, and business continuity readiness

Define and oversee key risk indicators (KRIs) and cybersecurity dashboards

Prepare and present executive and Board-level reporting on cybersecurity risk posture

Prerequisites:

Deep expertise in IT risk frameworks and compliance standards

Proven ability to influence and negotiate with executive management and business heads on risk-related matters

Ability to lead and develop a 8 to 15 member team with tight deadlines while delivering high quality and output

Strong business acumen with the ability to align security and risk with business goals





Strategic thinker with strong analytical and problem-solving abilities

Demonstrated experience in evaluating the security of products, services, and third-party vendors

Experience

15+ years of progressive experience in IT risk management, operational risk, IT compliance, and cybersecurity governance, preferably within the financial services sector

9+ years in senior leadership roles managing enterprise-wide risk programs and mentoring teams

Education

BE/ B.Tech or equivalent specialization in IT are preferred

Professional certifications such as CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), or CISSP (Certified Information Systems Security Professional) are required

CEH V11 or other equivalent Ethical Hacker degree is preferable

Desired Knowledge: Familiarity with frameworks such as COBIT, NIST CSF, and FFIEC is highly desirable

Compensation

Compensation will be competitive and aligned with industry benchmarks, commensurate with experience and role seniority

- IT Risk Management

- Cybersecurity Governance

- Operational Risk Management

- Third-Party Risk Management (TPRM) / Vendor Risk

- IT Compliance

- Security and Privacy by Design

- Enterprise Risk Frameworks

- SOC 2 Compliance

- ISO Certification (e.g., ISO 27001)

- NIST Cybersecurity Framework (NIST CSF)

- Emerging Technology Risk (Cloud & AI Governance)

- Certifications (Highly Searched Keywords)

- CISM (Certified Information Security Manager)

- CRISC (Certified in Risk and Information Systems Control)

- CISSP (Certified Information Systems Security Professional)

- CEH (Certified Ethical Hacker)

📌 Executive Vice President - Cybersecurity Governance (Pune)
🏢 TresVista
📍 Pune