The Role
Owns enterprise IT, infrastructure, cybersecurity, DevOps, internal automation, QA, test automation, and compliance. Leads cloud and on-premise operations, incident response, disaster recovery, CI/CD, quality engineering, audit readiness, SOC 1, SOC 2, and PCI DSS programs. Builds and mentors cross-functional technical teams, supports client security reviews and technical RFPs, and serves as a player-coach connecting technology strategy with commercial outcomes.
Summary Generated by Built In
Our mission is to Simplify Life. avertra helps highly regulated, customer-centric industries, led by utilities and energy, deliver exceptional customer and employee experiences through our MiCustomer platform and digital services. Behind that mission sits the backbone that keeps everything secure, reliable, and audit-ready, and that backbone is what this role owns.
We are looking for a Senior Director of Enterprise Governance and Technology: a true player-coach who is strategic enough to build and lead teams, and hands-on enough to stay close to the technology itself. You will own the full internal technology estate, from IT support and infrastructure to cybersecurity, DevOps, internal automation, and our QA and Automation function, and you will own the compliance program that keeps us trusted by enterprise clients and regulators alike.
This is a broad, high-trust mandate. You will keep the lights on and the systems secure, raise the bar on how we automate, test, and operate, and stand behind our security and compliance posture in the room with clients and auditors. You are equally comfortable architecting a solution, coaching an engineer through it, presenting to an executive, and answering a hard question in a SOC 2 audit or a technical RFP.
Enterprise IT & Infrastructure
- Own Enterprise IT Support and the internal technology estate, ensuring reliable, secure, and scalable service across the organization and its regions.
- Lead infrastructure strategy and operations across cloud and on-premise environments, optimizing for performance, resilience, and cost.
- Define standards for availability, disaster recovery, and business continuity, and hold the organization to them.
- Own the cybersecurity program end to end: strategy, controls, monitoring, incident response, and a security-aware culture.
- Manage risk assessments, vulnerability management, and remediation, keeping the organization ahead of emerging threats.
- Serve as the senior escalation point for security incidents, leading response with clarity and speed.
- Lead DevOps practice and tooling, driving CI/CD, infrastructure as code, and reliable, repeatable delivery.
- Design and scale internal automations that reduce manual effort, increase consistency, and free teams for higher-value work.
- Champion observability, so issues are caught early and resolved fast.
- Own the Quality Assurance and test automation function, setting the standards, frameworks, and coverage that keep our products and internal systems dependable.
- Build and scale automated testing (functional, regression, and performance, integrated into CI/CD) so quality is verified continuously rather than inspected at the end.
- Define quality metrics such as defect escape rate, test coverage, and release readiness, and drive continuous improvement against them.
- Partner with engineering and DevOps to embed quality gates across the delivery lifecycle, and grow a strong quality engineering team.
- Own all compliance audits, including but not limited to SOC 1, SOC 2, and PCI DSS, from control design through evidence, remediation, and successful certification.
- Build and maintain the control framework, policies, and documentation that keep the organization continuously audit-ready.
- Serve as the primary point of contact for auditors, regulators, and client security reviews.
- Be client-facing when needed, representing avertra's security, infrastructure, and governance posture with credibility and confidence.
- Actively participate in technical RFP responses, shaping the technical narrative and answering complex security, infrastructure, and compliance questions.
- Partner with commercial and delivery teams to turn our technical strength into a competitive advantage.
- Build, lead, and mentor high-performing teams across IT, security, infrastructure, DevOps, and QA and automation.
- Set clear priorities and standards, develop the next layer of technical leaders, and lead with fairness, candor, and care.
RequirementsCore Mindset & Traits
Player-Coach
You lead from the front. You build and grow strong teams and set the strategy, and you stay hands-on in the technology, never so far from the work that you lose the plot. Your engineers respect you because you can still do the job, not just describe it.
Security-FirstYou treat security and trust as non-negotiable foundations, not afterthoughts. You think in terms of risk, controls, and evidence, and you build a culture where the whole organization takes ownership of protecting our systems and data.
Systems Builder and AutomatorYou see manual, repetitive work as an opportunity. You design internal automations, reliable infrastructure, and automated testing that make the whole company faster, more consistent, and more scalable.
Audit-Ready by DesignYou do not scramble before an audit. You build controls, documentation, and evidence into how the organization operates every day, so that SOC 1, SOC 2, and PCI DSS reviews confirm what is already true.
Calm, Clear, and DecisiveWhen something breaks or an incident hits, you are the steady hand with a plan. You communicate clearly to engineers and executives alike, and you make sound decisions under pressure.
Business-Fluent TechnologistYou connect technology to commercial outcomes. You can sit with a client, shape a technical RFP response, and translate deep technical detail into language that builds confidence and wins trust.
Education
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field. Master's degree is a plus.
Experience- 12+ years in enterprise technology, with at least 5 years in senior leadership spanning several of the following: IT and infrastructure, cybersecurity, DevOps, and QA and automation.
- Proven, hands-on ownership of a compliance program, with direct experience achieving and maintaining SOC 1, SOC 2, and PCI DSS or comparable frameworks.
- Track record leading cybersecurity strategy and incident response in a real production environment.
- Experience owning cloud and on-premise infrastructure, DevOps practices, internal automation, and test automation at scale.
- Experience in client-facing and commercial settings, including technical RFP responses and client security reviews.
- Demonstrated success building and mentoring technical teams as a genuine player-coach.
- Deep command of cybersecurity principles, risk management, and control frameworks.
- Strong hands-on foundation in cloud platforms (AWS, Azure, or GCP), infrastructure, CI/CD, and infrastructure as code.
- Solid grasp of quality engineering and test automation practices and tooling.
- Fluency in compliance and audit practices, evidence management, and policy development.
- Excellent communication skills, able to move between engineers, executives, auditors, and clients with ease.
- Strong command of English. Arabic is a strong advantage for leading local teams.
- Security certifications such as CISSP, CISM, or CISA are strongly preferred.
- Cloud or DevOps certifications (AWS, Azure, Kubernetes) are a plus.
- Familiarity with utilities, energy, financial services, or other regulated industries.
- Experience in an enterprise software or consulting environment serving enterprise clients.
Sunday to Thursday (Jordan timezone), with flexibility to support global collaboration and respond to incidents when needed.
BenefitsWhat We Promise You
- You'll join a global family of passionate people building a sustainable, scalable ecosystem committed to using logic to create a better experience.
- You will be empowered to drive change, challenge the status quo, and innovate without bureaucracy slowing you down.
- We will invest in you, giving you the opportunity to master your domain and drive excellence at scale.
Skills Required
- Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field
- 12+ years of experience in enterprise technology
- At least 5 years of senior leadership experience spanning IT and infrastructure, cybersecurity, DevOps, and/or QA and automation
- Hands-on ownership of compliance programs and experience achieving and maintaining SOC 1, SOC 2, and PCI DSS or comparable frameworks
- Experience leading cybersecurity strategy and incident response in a production environment
- Experience owning cloud and on-premise infrastructure, DevOps practices, internal automation, and test automation at scale
- Experience in client-facing and commercial settings, including technical RFP responses and client security reviews
- Demonstrated success building and mentoring technical teams as a player-coach
- Deep knowledge of cybersecurity principles, risk management, and control frameworks
- Hands-on experience with cloud platforms such as AWS, Azure, or GCP; infrastructure, CI/CD, and infrastructure as code
- Knowledge of quality engineering, test automation practices, and tooling
- Fluency in compliance and audit practices, evidence management, and policy development
- Excellent communication skills across engineers, executives, auditors, and clients
- Strong command of English
- Master's degree
- Arabic language proficiency
- CISSP, CISM, or CISA certification
- AWS, Azure, or Kubernetes certification
- Experience in utilities, energy, financial services, or another regulated industry
- Experience in an enterprise software or consulting environment serving enterprise clients
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Avertra is a digital experience (DX) practitioner with a mission to simplify life by solving real-world problems for highly regulated, customer/citizen-centric industries through intuitive processes and unparalleled digital experiences.
