VP of IT and Cybersecurity

About this role

The Tidal Financial Group is a leading ETF investment technology platform dedicated to creating, operating, and growing ETFs. We combine expertise and innovative partnership approaches to offer comprehensive, value-generating ETF solutions. Our platform offers best-in-class strategic guidance, product planning, trust and fund services, legal support, operations support, marketing and research, and sales and distribution services. About the role The VP, IT & Cybersecurity owns Tidal Financial Group ’s enterprise IT and cybersecurity strategy, operating model, and execution. This leader is accountable for the company’s technology reliability, security posture, operational resilience, and IT service experience—establishing departmental direction and advising executive leadership on technology risk, investment priorities, and business-enablement opportunities. What you'll do People leadership & operating cadence Lead, coach, and develop the IT and Cyber teams; set clear goals, expectations, and performance standards. Design and evolve the IT and Cybersecurity organization as Tidal scales, including workforce planning, leadership development, succession planning, and appropriate use of strategic partners. Establish clear decision rights and accountability across managers, internal teams, MSPs, and MSSPs, reducing dependency on SVP involvement in routine operations. Establish a weekly operating rhythm (intake, prioritization, escalations, metrics review, and leadership updates). Build a culture of customer service, documentation, ownership, and continuous improvement. IT service delivery & reliability Own IT service management processes: ticket triage, SLAs, escalation paths, and end-user communications. Ensure stable operation of core business platforms (Microsoft 365, identity, endpoint management, collaboration, file services, key SaaS applications). Drive standardization of onboarding/offboarding, device lifecycle, patching, and asset management. Cybersecurity strategy, governance, and execution Define and own Tidal’s multi-year cybersecurity strategy, target maturity, control framework, and investment roadmap aligned with company growth and risk objectives. Establish enterprise security policies and standards across endpoint protection, identity and access, monitoring, vulnerability management, data protection, and incident response. Enforce least privilege, RBAC, and zero-trust practices across systems and vendor access. Lead technology and cybersecurity decision-making during material incidents, including executive communication, containment priorities, recovery tradeoffs, and post-incident accountability. Maintain and test incident response runbooks; coordinate tabletop exercises and post-incident reviews. Risk management, compliance, and audit readiness Maintain evidence and control operation for SOC 2 / vendor due diligence / regulatory expectations (as applicable). Partner with business owners to close control gaps, remediate findings, and track risk exceptions; recommend or approve risk acceptance within defined authority and escalate material risks with clear options and recommendations. Ensure third-party risk processes are followed for new vendors and renewals. Vendor, MSP/MSSP, and budget management Own the departmental budget, workforce plan, vendor portfolio, and sourcing strategy, balancing security, reliability, service quality, and cost. Manage relationships with key vendors, MSPs, and security service providers; drive accountability on outcomes, deliverables, and SLAs. Lead forecasting, renewal planning, licensing optimization, and procurement in partnership with Operations and Finance. Department strategy and executive leadership Define and own Tidal’s multi-year IT and Cybersecurity strategy, target operating model, annual priorities, and investment roadmap aligned with company objectives. Make high-impact prioritization and investment decisions across security, reliability, cost, operational risk, and busine

Skills and categories