Our mission is to Simplify Life. avertra helps highly regulated, customer-centric industries, led by utilities and energy, deliver exceptional customer and employee experiences through our MiCustomer platform and digital services. Behind that mission sits the backbone that keeps everything secure, reliable, and audit-ready, and that backbone is what this role owns.
We are looking for a Senior Director of Enterprise Governance and Technology: a true player-coach who is strategic enough to build and lead teams, and hands-on enough to stay close to the technology itself. You will own the full internal technology estate, from IT support and infrastructure to cybersecurity, DevOps, internal automation, and our QA and Automation function, and you will own the compliance program that keeps us trusted by enterprise clients and regulators alike.
This is a broad, high-trust mandate. You will keep the lights on and the systems secure, raise the bar on how we automate, test, and operate, and stand behind our security and compliance posture in the room with clients and auditors. You are equally comfortable architecting a solution, coaching an engineer through it, presenting to an executive, and answering a hard question in a SOC 2 audit or a technical RFP.
Key Responsibilities
Enterprise IT & Infrastructure
- Own Enterprise IT Support and the internal technology estate, ensuring reliable, secure, and scalable service across the organization and its regions.
- Lead infrastructure strategy and operations across cloud and on-premise environments, optimizing for performance, resilience, and cost.
- Define standards for availability, disaster recovery, and business continuity, and hold the organization to them.
Cybersecurity
- Own the cybersecurity program end to end: strategy, controls, monitoring, incident response, and a security-aware culture.
- Manage risk assessments, vulnerability management, and remediation, keeping the organization ahead of emerging threats.
- Serve as the senior escalation point for security incidents, leading response with clarity and speed.
DevOps & Internal Automation
- Lead DevOps practice and tooling, driving CI/CD, infrastructure as code, and reliable, repeatable delivery.
- Design and scale internal automations that reduce manual effort, increase consistency, and free teams for higher-value work.
- Champion observability, so issues are caught early and resolved fast.
QA & Automation
- Own the Quality Assurance and test automation function, setting the standards, frameworks, and coverage that keep our products and internal systems dependable.
- Build and scale automated testing (functional, regression, and performance, integrated into CI/CD) so quality is verified continuously rather than inspected at the end.
- Define quality metrics such as defect escape rate, test coverage, and release readiness, and drive continuous improvement against them.
- Partner with engineering and DevOps to embed quality gates across the delivery lifecycle, and grow a strong quality engineering team.
Compliance & Audits
- Own all compliance audits, including but not limited to SOC 1, SOC 2, and PCI DSS, from control design through evidence, remediation, and successful certification.
- Build and maintain the control framework, policies, and documentation that keep the organization continuously audit-ready.
- Serve as the primary point of contact for auditors, regulators, and client security reviews.
Client-Facing & Commercial
- Be client-facing when needed, representing avertra's security, infrastructure, and governance posture with credibility and confidence.
- Actively participate in technical RFP responses, shaping the technical narrative and answering complex security, infrastructure, and compliance questions.
- Partner with commercial and delivery teams to turn our technical strength into a competitive advantage.
Team Leadership
- Build, lead, and mentor high-performing teams across IT, security, infrastructure, DevOps, and QA and automation.
- Set clear priorities and standards, develop the next layer of technical leaders, and lead with fairness, candor, and care.
Requirements
Core Mindset & Traits
Player-Coach
You lead from the front. You build and grow strong teams and set the strategy, and you stay hands-on in the technology, never so far from the work that you lose the plot. Your engineers respect you because you can still do the job, not just describe it.
Security-First
You treat security and trust as non-negotiable foundations, not afterthoughts. You think in terms of risk, controls, and evidence, and you build a culture where the whole organization takes ownership of protecting our systems and data.
Systems Builder and Automator
You see manual, repetitive work as an opportunity. You design internal automations, reliable infrastructure, and automated testing that make the whole company faster, more consistent, and more scalable.
Audit-Ready by Design
You do not scramble before an audit. You build controls, documentation, and evidence into how the organization operates every day, so that SOC 1, SOC 2, and PCI DSS reviews confirm what is already true.
Calm, Clear, and Decisive
When something breaks or an incident hits, you are the steady hand with a plan. You communicate clearly to engineers and executives alike, and you make sound decisions under pressure.
Business-Fluent Technologist
You connect technology to commercial outcomes. You can sit with a client, shape a technical RFP response, and translate deep technical detail into language that builds confidence and wins trust.
Requirements & Qualifications
Education
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field. Master's degree is a plus.
Experience
- 12+ years in enterprise technology, with at least 5 years in senior leadership spanning several of the following: IT and infrastructure, cybersecurity, DevOps, and QA and automation.
- Proven, hands-on ownership of a compliance program, with direct experience achieving and maintaining SOC 1, SOC 2, and PCI DSS or comparable frameworks.
- Track record leading cybersecurity strategy and incident response in a real production environment.
- Experience owning cloud and on-premise infrastructure, DevOps practices, internal automation, and test automation at scale.
- Experience in client-facing and commercial settings, including technical RFP responses and client security reviews.
- Demonstrated success building and mentoring technical teams as a genuine player-coach.
Knowledge, Skills & Abilities
- Deep command of cybersecurity principles, risk management, and control frameworks.
- Strong hands-on foundation in cloud platforms (AWS, Azure, or GCP), infrastructure, CI/CD, and infrastructure as code.
- Solid grasp of quality engineering and test automation practices and tooling.
- Fluency in compliance and audit practices, evidence management, and policy development.
- Excellent communication skills, able to move between engineers, executives, auditors, and clients with ease.
- Strong command of English. Arabic is a strong advantage for leading local teams.
Certifications & Preferences
- Security certifications such as CISSP, CISM, or CISA are strongly preferred.
- Cloud or DevOps certifications (AWS, Azure, Kubernetes) are a plus.
- Familiarity with utilities, energy, financial services, or other regulated industries.
- Experience in an enterprise software or consulting environment serving enterprise clients.
Work Schedule
Sunday to Thursday (Jordan timezone), with flexibility to support global collaboration and respond to incidents when needed.
Your email job alert is now active!