Senior Director of Enterprise Governance and Technology

Key Responsibil u200bities Enterprise IT & Infrastructure Own Enterprise IT Support and the internal technology estate, ensuring reliable, secure, and scalable service across the organization and its regions. Lead infrastructure strategy and operations across cloud and on-premise environments, optimizing for performance, resilience, and cost. Define standards for availability, disaster recovery, and business continuity, and hold the organization to them. Cybersecurity Own the cybersecurity program end to end: strategy, controls, monitoring, incident response, and a security-aware culture. Manage risk assessments, vulnerability management, and remediation, keeping the organization ahead of emerging threats. Serve as the senior escalation point for security incidents, leading response with clarity and speed. DevOps & Internal Automation Lead DevOps practice and tooling, driving CI/CD, infrastructure as code, and reliable, repeatable delivery. Design and scale internal automations that reduce manual effort, increase consistency, and free teams for higher-value work. Champion observability, so issues are caught early and resolved fast. QA & Automation Own the Quality Assurance and test automation function, setting the standards, frameworks, and coverage that keep our products and internal systems dependable. Build and scale automated testing (functional, regression, and performance, integrated into CI/CD) so quality is verified continuously rather than inspected at the end. Define quality metrics such as defect escape rate, test coverage, and release readiness, and drive continuous improvement against them. Partner with engineering and DevOps to embed quality gates across the delivery lifecycle, and grow a strong quality engineering team. Compliance & Audits Own all compliance audits, including but not limited to SOC 1, SOC 2, and PCI DSS, from control design through evidence, remediation, and successful certification. Build and maintain the control framework, policies, and documentation that keep the organization continuously audit-ready. Serve as the primary point of contact for auditors, regulators, and client security reviews. Client-Facing & Commercial Be client-facing when needed, representing avertra's security, infrastructure, and governance posture with credibility and confidence. Actively participate in technical RFP responses, shaping the technical narrative and answering complex security, infrastructure, and compliance questions. Partner with commercial and delivery teams to turn our technical strength into a competitive advantage. Team Leadership Build, lead, and mentor high-performing teams across IT, security, infrastructure, DevOps, and QA and automation. Set clear priorities and standards, develop the next layer of technical leaders, and lead with fairness, candor, and care. Requirements Core Mindset & Traits Player-Coach You lead from the front. You build and grow strong teams and set the strategy, and you stay hands-on in the technology, never so far from the work that you lose the plot. Your engineers respect you because you can still do the job, not just describe it. Security-First You treat security and trust as non-negotiable foundations, not afterthoughts. You think in terms of risk, controls, and evidence, and you build a culture where the whole organization takes ownership of protecting our systems and data. Systems Builder and Automator You see manual, repetitive work as an opportunity. You design internal automations, reliable infrastructure, and automated testing that make the whole company faster, more consistent, and more scalable. Audit-Ready by Design You do not scramble before an audit. You build controls, documentation, and evidence into how the organization operates every day, so that SOC 1, SOC 2, and PCI DSS reviews confirm what is already true. Calm, Clear, and Decisive When something breaks or an incident hits, you are the steady hand with a plan. You communicate clearly to engineers and executives alike, and you make sound decisions under pressure. Business-Fluent Technologist You connect technology to commercial outcomes. You can sit with a client, shape a technical RFP response, and translate deep technical detail into language that builds confidence and wins trust.