Senior Director of Enterprise Governance and Technology

Avertra Corp • Herndon, VA

1d

About The Position

Avertra is seeking a seasoned, VP-level enterprise leader to unify Compliance & Governance, Cybersecurity, DevSecOps, and Enterprise IT. The role is responsible for the organization’s security and compliance posture, reliable and audit-ready systems, incident response, and infrastructure and architecture direction. The leader will represent avertra directly with enterprise clients, auditors, and regulators, respond to security and compliance inquiries, and contribute to technical RFPs.

The position combines strategic leadership with hands-on technical involvement. The successful candidate will lead teams across the four domains, build security-conscious practices and audit-ready controls, guide responses to live security incidents, and support secure, reliable, scalable services across cloud and on-premise environments. The role works US business hours, with flexibility for global collaboration and incident response when needed.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related technical field.
• At least 15 years in enterprise technology, including significant senior leadership spanning compliance and governance, cybersecurity, DevSecOps, and enterprise IT.
• Seasoned enterprise leadership at the VP level, with the gravitas and calm to lead in high-stakes situations.
• Proven hands-on experience leading teams through actual live security incidents and crisis response in production environments.
• Direct ownership of a compliance program and experience achieving and maintaining SOC, PCI, and ISO or comparable frameworks, including evidence capture and audit readiness.
• Deep enterprise infrastructure and architecture experience across cloud and on-premise environments, including containerization, scaling, and server environments.
• Ability to handle enterprise clients’ security and compliance inquiries, technical RFP responses, and client security reviews.
• Deep command of cybersecurity principles, incident response, crisis management, risk management, and control frameworks.
• Fluency in compliance and audit practices, including SOC, PCI, ISO, evidence management, and policy development.
• Strong foundation in enterprise infrastructure and architecture, cloud platforms (AWS, Azure, or GCP), containerization, CI/CD, and DevSecOps.
• Experience overseeing penetration testing and developing a security posture beyond basic monitoring.
• Excellent communication skills across engineering, executive, auditor, and client audiences.
• Strong command of English.
• Ability to work US business hours, with flexibility for global collaboration and incident response when needed.

Nice To Haves

• Master’s degree.
• Security certifications such as CISSP, CISM, or CISA.
• ISO lead auditor, cloud, or Kubernetes certifications.
• Familiarity with utilities, energy, financial services, or other regulated industries.
• Experience in an enterprise software or consulting environment serving enterprise clients.

Responsibilities

• Lead the organization through live security incidents and crisis scenarios as senior incident commander, coordinating response, containment, and recovery.
• Own the cybersecurity program, including strategy, controls, and development of a security-aware culture.
• Oversee penetration testing, risk assessments, vulnerability management, and remediation.
• Own compliance management across SOC, PCI, and ISO, from control design and evidence capture through remediation and certification.
• Build and maintain the control framework, policies, and documentation needed to keep the organization audit-ready.
• Serve as the primary point of contact for auditors, regulators, and client security reviews.
• Lead DevSecOps practice and tooling, integrating security operations and monitoring into DevOps and the delivery lifecycle.
• Drive CI/CD, infrastructure as code, and reliable, repeatable delivery with security built in.
• Champion observability and security monitoring to detect and resolve issues and threats quickly.
• Own internal infrastructure, servers, and enterprise tools, ensuring reliable, secure, and scalable service across the organization and its regions.
• Lead infrastructure and architecture direction across cloud and on-premise environments, including containerization and scaling, optimizing performance, resilience, and cost.
• Define and enforce standards for availability, disaster recovery, and business continuity.
• Represent avertra’s security, infrastructure, and governance posture with enterprise clients and handle security and compliance inquiries.
• Participate in technical RFP responses, shaping technical narratives and answering complex security, infrastructure, and compliance questions.
• Partner with commercial and delivery teams to turn technical strengths into a competitive advantage.
• Build, lead, and mentor teams across compliance and governance, cybersecurity, DevSecOps, and enterprise IT.
• Set priorities and standards, develop technical leaders, and lead with fairness, candor, and care.

Benefits

• Investment in employees’ development and opportunity to master their domain.
• Empowerment to drive change, challenge the status quo, and innovate without bureaucracy.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior