Job DescriptionWe are looking for a seasoned, battle-tested leader to unify four critical domains under one mandate: Compliance & Governance, Cybersecurity, DevSecOps, and Enterprise IT. This is a VP-level enterprise leader who brings calm under pressure and the gravitas to stand behind our security and compliance posture directly with enterprise clients, auditors, and regulators.
This is a broad, high-trust mandate for a leader who can instil confidence in enterprise clients and handle their toughest security and compliance questions head-on. You will keep the systems secure, reliable, and audit-ready, lead the organization through live security incidents with a steady hand, and build the controls and evidence that make SOC, PCI, and ISO reviews confirm what is already true. You are equally comfortable leading an incident bridge, shaping a technical RFP response, answering a client security review, and setting infrastructure and architecture direction.
Key ResponsibilitiesCybersecurity & Incident Response
- Lead the organization through live security incidents and crisis scenarios as the senior incident commander, coordinating response, containment, and recovery with clarity and speed.
- Own the cybersecurity program end to end: strategy, controls, and a security-aware culture that goes well beyond basic monitoring.
- Oversee penetration testing, risk assessments, vulnerability management, and remediation, keeping the organization ahead of emerging threats.
Compliance & Governance
- Own compliance management across SOC, PCI, and ISO, from control design through evidence capturing, remediation, and successful certification.
- Build and maintain the control framework, policies, and documentation that keep the organization continuously audit-ready.
- Serve as the primary point of contact for auditors, regulators, and client security reviews.
DevSecOps
- Lead DevSecOps practice and tooling, integrating security operations and monitoring into DevOps and the delivery lifecycle.
- Drive CI/CD, infrastructure as code, and reliable, repeatable delivery with security built in from the start.
- Champion observability and security monitoring, so issues and threats are caught early and resolved fast.
Enterprise IT
- Own internal infrastructure, servers, and enterprise tools, ensuring reliable, secure, and scalable service across the organization and its regions.
- Lead infrastructure and architecture direction across cloud and on-premise environments, including containerization and scaling, optimizing for performance, resilience, and cost.
- Define standards for availability, disaster recovery, and business continuity, and hold the organization to them.
Client-Facing & Commercial
- Represent avertra's security, infrastructure, and governance posture directly with enterprise clients, instilling confidence and handling their toughest security and compliance inquiries head-on.
- Actively participate in technical RFP responses, shaping the technical narrative and answering complex security, infrastructure, and compliance questions.
- Partner with commercial and delivery teams to turn our technical strength into a competitive advantage.
Team Leadership
- Build, lead, and mentor high-performing teams across compliance and governance, cybersecurity, DevSecOps, and enterprise IT.
- Set clear priorities and standards, develop the next layer of technical leaders, and lead with fairness, candor, and care.
RequirementsCore Mindset & TraitsPlayer-Coach- You lead from the front. You build and grow strong teams and set the strategy, and you stay hands-on in the technology, never so far from the work that you lose the plot. Your engineers respect you because you can still do the job, not just describe it.
Security-First- You treat security and trust as non-negotiable foundations, not afterthoughts. You think in terms of risk, controls, and evidence, and you build a culture where the whole organization takes ownership of protecting our systems and data.
Incident Commander- You have been through real security incidents and crises, not just tabletop exercises. When it is live, you take command, steady the team, coordinate the response, and communicate with clarity to engineers, executives, and clients alike.
Audit-Ready by Design- You do not scramble before an audit. You build controls, documentation, and evidence into how the organization operates every day, so that SOC, PCI, and ISO reviews confirm what is already true.
Calm, Clear, and Decisive- When something breaks or an incident hits, you are the steady hand with a plan. You communicate clearly to engineers and executives alike, and you make sound decisions under pressure.
Business-Fluent Technologist- You connect technology to commercial outcomes. You can sit with a client, shape a technical RFP response, and translate deep technical detail into language that builds confidence and wins trust.
Requirements & QualificationsEducationBachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field. Master's degree is a plus.
Experience- Incident Response & Crisis Management. Proven experience leading teams through live security incidents and crisis scenarios, you have been through actual incidents, not only tabletop exercises.
- Controls & Governance. A heavy background in compliance frameworks, evidence capturing, and audit readiness across SOC, PCI, and ISO.
- Infrastructure & Architectural Knowledge. Deep understanding of enterprise IT infrastructure, containerization and scaling, and server environments.
- A seasoned, battle-tested enterprise leader at the VP level, with the gravitas and calm to lead in high-stakes situations.
- 15+ years in enterprise technology, including significant senior leadership spanning compliance and governance, cybersecurity, DevSecOps, and enterprise IT.
- Proven, hands-on experience leading teams through live security incidents and crisis response in a real production environment.
- Direct ownership of a compliance program, achieving and maintaining SOC, PCI, and ISO or comparable frameworks, with strong evidence capturing and audit readiness.
- Deep enterprise infrastructure and architecture experience across cloud and on-premise environments, including containerization, scaling, and server environments.
- Able to instil confidence in enterprise clients and directly handle their security and compliance inquiries, including technical RFP responses and client security reviews.
Knowledge, Skills & Abilities- Deep command of cybersecurity principles, incident response and crisis management, risk management, and control frameworks.
- Fluency in compliance and audit practices (SOC, PCI, ISO), evidence management, and policy development.
- Strong foundation in enterprise infrastructure and architecture, cloud platforms (AWS, Azure, or GCP), containerization, CI/CD, and DevSecOps.
- Oversight of penetration testing and a security posture that goes beyond basic monitoring.
- Excellent communication skills, able to move between engineers, executives, auditors, and clients with ease.
- Strong command of English.
Certifications & Preferences- Security certifications such as CISSP, CISM, or CISA are strongly preferred.
- ISO lead auditor, cloud, or Kubernetes certifications are a plus.
- Familiarity with utilities, energy, financial services, or other regulated industries.
- Experience in an enterprise software or consulting environment serving enterprise clients.
Work ScheduleUS business hours, with flexibility to support global collaboration and respond to incidents when needed.BenefitsWhat We Promise You- You'll join a global family of passionate people building a sustainable, scalable ecosystem committed to using logic to create a better experience.
- You will be empowered to drive change, challenge the status quo, and innovate without bureaucracy slowing you down.
- We will invest in you, giving you the opportunity to master your domain and drive excellence at scale.
