Vice President - Cybersecurity

Role Overview And Scope

Creador is seeking a dedicated cybersecurity lead to join BPIA and strengthen oversight across Creador and its portfolio. The role requires the technical depth to challenge consultants and portfolio cybersecurity teams, review evidence and independently assess material risks. The role leads Creador's own cybersecurity programme and provides independent, risk-based oversight of portfolio companies, working closely with Creador's investment teams and portfolio company management, who remain responsible for day-to-day cybersecurity operations. The role shall cover Creador as well as all portfolio companies across countries we are invested in.

Key Responsibilities

• Cybersecurity strategy and governance
• Lead Creador's cybersecurity programme with Creador IT and service providers, covering policies, testing, monitoring, staff awareness and incident readiness.
• Support periodic review of Creador's cybersecurity environment by an external party.
• Independent Portfolio Oversight
• Challenge cybersecurity assessments, consultants and management updates across all portfolio companies.
• Review evidence supporting material remediation, and arrange independent validation or retesting where warranted.
• Maintain a consolidated, risk-based view of cybersecurity risk across the portfolio.
• Consultant Pipeline
• Build and manage a regional pipeline of qualified cybersecurity consultants, including cyber audit, threat intelligence, penetration testing and DFIR retainers.
• Prepare scopes of work, assess proposals and challenge consultant work that is generic, incomplete or impractical.
• Incident Oversight
• Support oversight of material cyber incidents and specialist DFIR engagements at Creador and portfolio companies.
• Obtain timely incident updates and supporting evidence, while keeping the relevant investment team informed.
• Escalation, reporting and initiatives
• Escalate significant or unresolved risks to the CEO and Investment Committee, keeping the relevant investment team informed.
• Report status, material incidents and root causes in clear business language.
• Keep up to date on threats, regulations and new tools, and propose practical initiatives for CEO consideration,
  
  
  

Role Requirements

• Bachelor's degree in cybersecurity, computer science, information systems or a related field, or equivalent experience.
• Typically 10 or more years in cybersecurity, technology risk, cyber consulting, security assurance or incident response.
• Technical depth to challenge consultants and IT/security teams, and to review technical evidence.
• Experience managing cybersecurity consultants and supporting material incidents, including DFIR engagements.
• Strong project management skills, with a track record of driving actions to completion across multiple companies.
• Resourceful and current on threats and tools, with the confidence to propose new initiatives.
• Independent judgment, integrity and discretion when handling sensitive information.
• Excellent written and spoken English, able to explain technical issues to senior executives.
• Certifications such as CISSP, CISM, CRISC or GIAC are an advantage.
• Willing to travel in the region and respond outside office hours during material incidents.