Vice President, Cyber & Security Services

Job Description

The Vice President, Cyber and Security Services leads and oversees Tricon’s enterprise-wide cybersecurity, information security, technology risk, and AI security governance capabilities. They protect Tricon’s systems, data, residents, and employees from evolving cyber and AI‑related threats while enabling the secure adoption of cloud services, digital platforms, and artificial intelligence technologies.

The Vice President is the executive owner of Tricon’s cybersecurity and AI security operating model who ensures that security, privacy, and ethical AI considerations are embedded into enterprise technology, third‑party relationships, and business processes. They balance risk management with business enablement, supporting innovation and growth without compromising security, compliance, or trust.

Our Tustin corporate office is centrally located in Orange County, close to Irvine and John Wayne Airport and easily accessible from communities across the region.

Essential Duties and Responsibilities:

• Define, execute, and evolve Tricon’s enterprise cybersecurity and AI security strategy, ensuring protection of systems, data, and digital services while aligning with business objectives, regulatory requirements, and the company’s risk appetite.
• Establish and govern enterprise security and AI risk management frameworks, including policies, standards, controls, metrics, and reporting aligned with recognized frameworks such as NIST CSF and AI risk management best practices.
• Lead cybersecurity operations, cyber defense, and incident response programs, ensuring timely detection, response, recovery, and continuous improvement for both traditional cyber threats and AI‑related security incidents.
• Establish governance over Artificial Intelligence and generative AI usage from a security perspective, including acceptable‑use standards, access controls, logging, monitoring, and protection against data leakage, model misuse, and intellectual property exposure.
• Own and oversee identity, access, and privileged access management programs, ensuring secure access across enterprise systems, cloud platforms, and AI‑enabled services while enforcing zero‑trust and least‑privilege principles.
• Ensure protection of sensitive, regulated, and resident data, including data used in AI models and prompts, through classification, encryption, privacy controls, and data loss prevention mechanisms.
• Manage third‑party, vendor, cloud, and AI platform security risk, including security assessments, ongoing monitoring, contractual controls, and lifecycle governance.
• Partner with IT, Legal, HR, Risk, Data, and business leaders to embed cybersecurity and AI security requirements into system design, application development, cloud adoption, and digital transformation initiatives.
• Ensure compliance with applicable security, privacy, and AI‑related regulatory requirements, supporting audits, assessments, regulatory inquiries, and customer or partner security reviews.
• Build, lead, and develop high‑performing cybersecurity teams, including internal staff and managed service providers, fostering a culture of accountability, secure innovation, and continuous improvement.

Qualifications:

• Ability to operate effectively in a fast-paced, growth-oriented environment with a strong focus on customer experience and operational excellence.

• Strong communication skills, including presenting security risk and posture to senior leadership and boards.

• Proven experience leading enterprise-scale cybersecurity programs in complex, regulated environments.

• Demonstrated experience securing cloud platforms, SaaS applications, AI‑enabled systems, and third‑party ecosystems.

• Experience establishing governance, risk, and compliance programs aligned to frameworks such as NIST CSF or ISO 27001.

• Experience managing security budgets and vendor relationships.

• Ability to balance risk mitigation with business enablement and digital transformation.

• Collaborative leadership style with a pragmatic, business-oriented approach to security.

Minimum Requirements:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

• 12-15+ years of progressive experience in cybersecurity, information security, or technology risk roles.

Preferred Attributes:

• Master’s degree or MBA.

• Industry certifications such as CISSP, CISM, CISA, CRISC, or equivalent executive-level security certifications.

• Experience in real estate, financial services, hospitality, or other asset- and consumer-focused industries.

• Experience governing AI and emerging technologies within an enterprise environment.

• Experience leading cybersecurity transformations or maturing security programs in high-growth organizations.

• Experience operating within hybrid IT and cloud-first environments.

Work Schedule: This is a hybrid role, with a combination of in-office and remote work in accordance with company guidelines.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job, including:

• Frequently required to sit, talk, and hear.

• Frequently required to stand and move; use hands to grasp, squeeze, finger, handle, and feel; reach, push, and pull with hands and arms; occasionally required to twist; reach overhead; stoop, kneel, squat, bend, and crouch.

• Occasionally lift, carry, and move up to 10 pounds.

• Vision abilities required by this job include close vision, distance vision, and depth perception.

Salary Range

Placement within this compensation range will be determined by the candidate's knowledge, experience and skills.

$192,000.00 - $300,000.00

At Tricon, we are committed to creating a workplace where every individual is valued for their unique contributions, experiences, voices, and backgrounds. By embracing these principles, we aim to positively impact our business and the communities we serve, creating a lasting legacy where everyone can thrive.