Vice President-Assurance

TresVista enables Enterprise Intelligence Orchestration (EIO) by supporting the translation of insight into execution.
We are a global enterprise that delivers advisory-led solutions with technology and managed services. TresVista works with clients to orchestrate their data and drive outcomes across investment, analytics, and operational workflows, bringing together deep domain expertise with AI enabled execution and a structured approach to decision-making.

Key Role Deliverables:
The Vice President (VP) of Assurance is a leadership role within the Compliance team at TresVista, responsible for driving the firm’s
certification and assurance programme across ISO/IEC 27001, ISO 22301, and SOC 2, together with the firm’s compliance, internal
audit, and controls agenda. The VP will own the certification lifecycle end to end, oversee adherence to the compliance manual and
SOPs, lead periodic compliance and internal audits, and ensure the firm remains conformant with applicable standards and regulatory
requirements. The role requires a sound understanding of auditing, compliance, and information security certification frameworks, a
strong eye for detail, and the ability to independently manage multiple workstreams while providing clear, data-driven reporting to
senior stakeholders.

Category Responsibility
Certifications &
External
Assurance
▪ Lead and manage the firm’s information security, business continuity, and service assurance certification
programmes, including ISO/IEC 27001, ISO 22301, and SOC 2 (Type II)
▪ Own the end-to-end certification lifecycle – scoping, readiness and gap assessments, remediation,
evidence collection, and surveillance and recertification audits
▪ Maintain the Statement of Applicability, control mappings, and certification documentation across
frameworks (ISO 27001 Annex A controls, ISO 22301 BCMS, and SOC 2 Trust Services Criteria)
▪ Liaise with certification bodies, external auditors, and assessors, and drive timely closure of audit findings
and non-conformities
▪ Manage client assurance and due-diligence requests, responding with current certification status, reports,
and supporting evidence
▪ Track upcoming audit and recertification timelines and ensure continued conformance across all certified
standards
Compliance &
Assurance
▪ Ensure firm-wide staff adherence to the compliance manual at all times and drive a culture of compliance
across the organisation
▪ Own the compliance calendar and oversee periodic staff compliance audits, maintaining the breach
tracker
▪ Lead the self-audit questionnaire programme – collect and validate evidence from process owners and
departments and design monthly scoring for review
▪ Stay abreast of regulatory and international laws and standards and ensure ongoing compliance at all
times
▪ Assess compliance and security risks on new products and processes and recommend steps for risk
mitigation

Vice President
Assurance

SOPs & Internal
Audit
▪ Draft, maintain, and review Standard Operating Procedures (SOPs) on an annual basis and ensure
adherence at all times
▪ Plan and conduct internal audits across departments per the audit calendar and prepare draft audit
reports
▪ Prepare and maintain the Action Taken Report (ATR) and follow up with process owners for timely closure
of ATR points
Reporting &
Escalation
▪ Communicate breach status to employees and escalate disputes to the Compliance Head
▪ Report certification, compliance, and internal audit outcomes, breach status, and self-audit scores to
senior stakeholders
▪ Prepare executive-ready reports and committee presentations on certification, assurance, compliance,
and internal audit matters
Stakeholder
Management,
Training &
Leadership
▪ Conduct compliance and information-security awareness training for new and existing employees
periodically
▪ Provide clarifications and interpretations of guidelines and control requirements to employees, users, and
operational departments
▪ Partner with business, technology, and operations teams to embed certification and control requirements
and drive accountability for remediation
▪ Lead and mentor junior team members and support capability development within the function


Prerequisites:
▪ Hands-on experience managing information security and resilience certification programmes such as ISO/IEC 27001, ISO 22301,
and SOC 2
▪ Sound understanding of auditing, compliance, and assurance frameworks and their associated control requirements
▪ Strong eye for detail with strong analytical and problem-solving capabilities
▪ Good command over written and spoken English, with strong executive reporting skills
▪ Strong stakeholder management and communication skills, with the ability to influence cross-functional teams
▪ Ability to meet deadlines with good time management skills, working well under pressure while delivering high-quality output
▪ Proficiency with Excel and PowerPoint
▪ Ability to independently manage multiple initiatives and workstreams and to lead and mentor a team of 3 to 8 members

Experience
▪ 8 to 10 years of progressive experience in compliance, internal audit, information security assurance, or certification, preferably
with consulting firms (upper mid-size / Big 4s), leading investment banks, or financial services firms
▪ Proven experience in leading certification and assurance initiatives across ISO/IEC 27001, ISO 22301, SOC 2, or equivalent
standards
▪ Experience managing internal and external audits, stakeholders, projects, and small teams across multiple workstreams


Education
▪ Graduate or postgraduate degree in any field; candidates from IT, management, commerce, or related disciplines are all eligible
▪ ISO/IEC 27001 and ISO 22301 Lead Implementer or Lead Auditor certifications are strongly preferred, given the role’s focus on
managing these certification programmes

Vice President
Assurance
▪ Additional assurance and audit certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information
Security Manager), or CIA (Certified Internal Auditor) are preferred
▪ Working knowledge of SOC 2 Trust Services Criteria and familiarity with frameworks such as NIST CSF, COBIT, and CIS Controls is
desirable
Compensation
The compensation structure will be as per industry standards.