João Pedro Gonçalves

About

Seasoned technology leader with over 15 years of experience driving cybersecurity, digital transformation and innovation across various industries. Led the multi-year digital transformation of EQT, positioning the firm as an industry leader in cybersecurity and technology. Earlier in my career, I participated in high-profile IPOs (Spotify, EQT AB) and multiple M&As, and managed diverse incidents and crisis discussions. With a strong background in cybersecurity, digital transformation, tech leadership, architecture, enterprise applications, automation, I have established a reputation for excellence. Recognized in the 2024 EY Risk Transformation awards in the category of Digital and AI Transformation. I hold a Master and Bachelor both of Science in Information Systems and Computer Engineering. Additionally, I am certified by the Saïd Business School at the University of Oxford in Private Markets Investments, and have authored the white-paper "Reporting Cyber Risk to Boards. CISO Edition".

Experience

• MD | Head of Cyber Security Strategy at CVC
  

  Setting direction and delivering cyber security outcomes across the Group and Portfolio.

• Manager at EY
  

  Manager in EY Sweden for IT Risk Assurance

• Senior Consultant at EY
  

  Our services are based on insights into how leading organizations prioritize their efforts to ensure that IT investments provide maximum security and risk mitigation in the most cost effective manner.

• Researcher and Consultant at INOV
  

  Worked on an engagement for the Ministério Público of Portugal. This engagement was the base for my Master's in information systems and computer science

• Information Security Risk Officer at Qliro
  

  Responsible for the Information and IT security at Qliro. Qliro was founded in 2014 and today offers payment solutions to some of the largest e-retailers, including CDON.com, Nelly.com, Lekmer.se, Members.com and Tretti.se. Qliro enables customers to shop safely and easily online.

• CISO | Managing Director at EQT Group
  

  Managing the Information and Cybersecurity teams at EQT Group, supporting the Digital Value Creation team with cybersecurity strategies for portfolio companies, and contributing to multiple deals across all stages—from early-stage ventures and growth investments to mid-market and private equity transactions.

• Heading the Security Platform Engineering Team | Managing Director at EQT Group
  

  While in my role as a CISO, for a few years I led the Security Platform Engineering team, which comprises the Information and Cyber Security team as well as the Site Reliability Engineering (SRE) team. The SRE Cloud team, with a specific focus on Google Cloud Platform (GCP), is tasked with ensuring the reliability, scalability, and performance of our cloud systems. Their responsibilities include monitoring and optimizing system uptime, managing CI/CD pipelines, automating infrastructure through Infrastructure as Code (IaC), swiftly responding to incidents, and ensuring the security and compliance of our cloud environment. By integrating reliability into every stage of the software development lifecycle, they ensure that our GCP-based services remain robust, efficient, and resilient, thereby minimizing disruptions and maintaining seamless operations.

• Head Of Information Security and Risk Management at Qliro
  

  Responsible for coordinating and leading Information Security, Business continuity and GDPR at Qliro Financials

• Senior Consultant at EY
  

  As a senior consultant at Ernst & Young in Sweden is expected of me to work with international clients to meet their business needs in terms of IT Risk and Governance