Vice President-Assurance

TresVista enables Enterprise Intelligence Orchestration (EIO) by supporting the translation of insight into execution.
We are a global enterprise that delivers advisory-led solutions with technology and managed services. TresVista works with clients to orchestrate their data and drive outcomes across investment, analytics, and operational workflows, bringing together deep domain expertise with AI enabled execution and a structured approach to decision-making.

Key Role Deliverables:
The Vice President (VP) of Assurance is a leadership role within the Compliance team at TresVista, responsible for driving the firm's
certification and assurance programme across ISO/IEC 27001, ISO 22301, and SOC 2, together with the firm's compliance, internal
audit, and controls agenda. The VP will own the certification lifecycle end to end, oversee adherence to the compliance manual and
SOPs, lead periodic compliance and internal audits, and ensure the firm remains conformant with applicable standards and regulatory
requirements. The role requires a sound understanding of auditing, compliance, and information security certification frameworks, a
strong eye for detail, and the ability to independently manage multiple workstreams while providing clear, data-driven reporting to
senior stakeholders.

Category Responsibility
Certifications &
External
Assurance
Lead and manage the firm's information security, business continuity, and service assurance certification
programmes, including ISO/IEC 27001, ISO 22301, and SOC 2 (Type II)
Own the end-to-end certification lifecycle - scoping, readiness and gap assessments, remediation,
evidence collection, and surveillance and recertification audits
Maintain the Statement of Applicability, control mappings, and certification documentation across
frameworks (ISO 27001 Annex A controls, ISO 22301 BCMS, and SOC 2 Trust Services Criteria)
Liaise with certification bodies, external auditors, and assessors, and drive timely closure of audit findings
and non-conformities
Manage client assurance and due-diligence requests, responding with current certification status, reports,
and supporting evidence
Track upcoming audit and recertification timelines and ensure continued conformance across all certified
standards
Compliance &
Assurance
Ensure firm-wide staff adherence to the compliance manual at all times and drive a culture of compliance
across the organisation
Own the compliance calendar and oversee periodic staff compliance audits, maintaining the breach
tracker
Lead the self-audit questionnaire programme - collect and validate evidence from process owners and
departments and design monthly scoring for review
Stay abreast of regulatory and international laws and standards and ensure ongoing compliance at all
times
Assess compliance and security risks on new products and processes and recommend steps for risk
mitigation

Vice President
Assurance

SOPs & Internal
Audit
Draft, maintain, and review Standard Operating Procedures (SOPs) on an annual basis and ensure
adherence at all times
Plan and conduct internal audits across departments per the audit calendar and prepare draft audit
reports
Prepare and maintain the Action Taken Report (ATR) and follow up with process owners for timely closure
of ATR points
Reporting &
Escalation
Communicate breach status to employees and escalate disputes to the Compliance Head
Report certification, compliance, and internal audit outcomes, breach status, and self-audit scores to
senior stakeholders
Prepare executive-ready reports and committee presentations on certification, assurance, compliance,
and internal audit matters
Stakeholder
Management,
Training &
Leadership
Conduct compliance and information-security awareness training for new and existing employees
periodically
Provide clarifications and interpretations of guidelines and control requirements to employees, users, and
operational departments
Partner with business, technology, and operations teams to embed certification and control requirements
and drive accountability for remediation
Lead and mentor junior team members and support capability development within the function


Prerequisites:
Hands-on experience managing information security and resilience certification programmes such as ISO/IEC 27001, ISO 22301,
and SOC 2
Sound understanding of auditing, compliance, and assurance frameworks and their associated control requirements
Strong eye for detail with strong analytical and problem-solving capabilities
Good command over written and spoken English, with strong executive reporting skills
Strong stakeholder management and communication skills, with the ability to influence cross-functional teams
Ability to meet deadlines with good time management skills, working well under pressure while delivering high-quality output
Proficiency with Excel and PowerPoint
Ability to independently manage multiple initiatives and workstreams and to lead and mentor a team of 3 to 8 members

Experience
8 to 10 years of progressive experience in compliance, internal audit, information security assurance, or certification, preferably
with consulting firms (upper mid-size / Big 4s), leading investment banks, or financial services firms
Proven experience in leading certification and assurance initiatives across ISO/IEC 27001, ISO 22301, SOC 2, or equivalent
standards
Experience managing internal and external audits, stakeholders, projects, and small teams across multiple workstreams


Education
Graduate or postgraduate degree in any field; candidates from IT, management, commerce, or related disciplines are all eligible
ISO/IEC 27001 and ISO 22301 Lead Implementer or Lead Auditor certifications are strongly preferred, given the role's focus on
managing these certification programmes

Vice President
Assurance
Additional assurance and audit certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information
Security Manager), or CIA (Certified Internal Auditor) are preferred
Working knowledge of SOC 2 Trust Services Criteria and familiarity with frameworks such as NIST CSF, COBIT, and CIS Controls is
desirable
Compensation
The compensation structure will be as per industry standards.

Key Role Deliverables:
The Vice President (VP) of Assurance is a leadership role within the Compliance team at TresVista, responsible for driving the firm's
certification and assurance programme across ISO/IEC 27001, ISO 22301, and SOC 2, together with the firm's compliance, internal
audit, and controls agenda. The VP will own the certification lifecycle end to end, oversee adherence to the compliance manual and
SOPs, lead periodic compliance and internal audits, and ensure the firm remains conformant with applicable standards and regulatory
requirements. The role requires a sound understanding of auditing, compliance, and information security certification frameworks, a
strong eye for detail, and the ability to independently manage multiple workstreams while providing clear, data-driven reporting to
senior stakeholders.

Category Responsibility
Certifications &
External
Assurance
Lead and manage the firm's information security, business continuity, and service assurance certification
programmes, including ISO/IEC 27001, ISO 22301, and SOC 2 (Type II)
Own the end-to-end certification lifecycle - scoping, readiness and gap assessments, remediation,
evidence collection, and surveillance and recertification audits
Maintain the Statement of Applicability, control mappings, and certification documentation across
frameworks (ISO 27001 Annex A controls, ISO 22301 BCMS, and SOC 2 Trust Services Criteria)
Liaise with certification bodies, external auditors, and assessors, and drive timely closure of audit findings
and non-conformities
Manage client assurance and due-diligence requests, responding with current certification status, reports,
and supporting evidence
Track upcoming audit and recertification timelines and ensure continued conformance across all certified
standards
Compliance &
Assurance
Ensure firm-wide staff adherence to the compliance manual at all times and drive a culture of compliance
across the organisation
Own the compliance calendar and oversee periodic staff compliance audits, maintaining the breach
tracker
Lead the self-audit questionnaire programme - collect and validate evidence from process owners and
departments and design monthly scoring for review
Stay abreast of regulatory and international laws and standards and ensure ongoing compliance at all
times
Assess compliance and security risks on new products and processes and recommend steps for risk
mitigation

Vice President
Assurance


TresVista is a proud Equal Opportunity Employer and does not discriminate on any basis of race, religion, color, sex, gender identity or expression, sexual orientation,
disability, marital status or national origin. All aspects of TresVista employment will be based on merit, competence, performance and business needs.
SOPs & Internal
Audit
Draft, maintain, and review Standard Operating Procedures (SOPs) on an annual basis and ensure
adherence at all times
Plan and conduct internal audits across departments per the audit calendar and prepare draft audit
reports
Prepare and maintain the Action Taken Report (ATR) and follow up with process owners for timely closure
of ATR points
Reporting &
Escalation
Communicate breach status to employees and escalate disputes to the Compliance Head
Report certification, compliance, and internal audit outcomes, breach status, and self-audit scores to
senior stakeholders
Prepare executive-ready reports and committee presentations on certification, assurance, compliance,
and internal audit matters
Stakeholder
Management,
Training &
Leadership
Conduct compliance and information-security awareness training for new and existing employees
periodically
Provide clarifications and interpretations of guidelines and control requirements to employees, users, and
operational departments
Partner with business, technology, and operations teams to embed certification and control requirements
and drive accountability for remediation
Lead and mentor junior team members and support capability development within the function


Prerequisites:
Hands-on experience managing information security and resilience certification programmes such as ISO/IEC 27001, ISO 22301,
and SOC 2
Sound understanding of auditing, compliance, and assurance frameworks and their associated control requirements
Strong eye for detail with strong analytical and problem-solving capabilities
Good command over written and spoken English, with strong executive reporting skills
Strong stakeholder management and communication skills, with the ability to influence cross-functional teams
Ability to meet deadlines with good time management skills, working well under pressure while delivering high-quality output
Proficiency with Excel and PowerPoint
Ability to independently manage multiple initiatives and workstreams and to lead and mentor a team of 3 to 8 members

Experience
8 to 10 years of progressive experience in compliance, internal audit, information security assurance, or certification, preferably
with consulting firms (upper mid-size / Big 4s), leading investment banks, or financial services firms
Proven experience in leading certification and assurance initiatives across ISO/IEC 27001, ISO 22301, SOC 2, or equivalent
standards
Experience managing internal and external audits, stakeholders, projects, and small teams across multiple workstreams


Education
Graduate or postgraduate degree in any field; candidates from IT, management, commerce, or related disciplines are all eligible
ISO/IEC 27001 and ISO 22301 Lead Implementer or Lead Auditor certifications are strongly preferred, given the role's focus on
managing these certification programmes
Vice President
Assurance
Additional assurance and audit certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information
Security Manager), or CIA (Certified Internal Auditor) are preferred
Working knowledge of SOC 2 Trust Services Criteria and familiarity with frameworks such as NIST CSF, COBIT, and CIS Controls is
desirable
Compensation
The compensation structure will be as per industry standards.