IT Director

Company / Division / Department: Systech / IT Department

Location: 78 Queensway, The Dockyard, Gibraltar

Job Title: IT Director                                   

Reports to: Chief Executive Officer, Bassadone Automotive Group.  This role sits on the Senior Leadership Team.

Type of position: Full-time (37.5 hours per week)

Bassadone Automotive Group Vision To be the most admired company in every market we operate in by:

• An Exceptional Customer Experience

• Operational Excellence through innovation

• Investing in our People to be the best they can be

Systech Purpose Statement: Empowering agility & growth through technology, process and people

Role of the IT Department To provide secure, resilient and cost-effective technology services that enable the Group’s strategy and day-to-day operations. Systech leads the technology strategy and delivery of centrally managed IT services, while providing selected shared services, strategic direction, governance and specialist support to the wider International Group. It works with individual entities to strengthen cybersecurity and resilience, promote appropriate common standards, identify synergies and support the responsible adoption of digital, AI and automation technologies.

TASKS AND RESPONSIBILITIES

• Develop, maintain and deliver the Group technology strategy, roadmap and operating model for centrally managed services, ensuring alignment with the strategic direction and requirements of the wider International Group.
• Advise the Board, CEO and senior leadership on technology opportunities, cyber risk, resilience, investment priorities and emerging threats.
• Lead, coach and develop the IT team, establishing clear accountability, succession plans, service standards and professional development priorities.
• Oversee the reliable and secure operation of centrally managed infrastructure, networks, cloud platforms, end-user computing, communications, business applications and IT services, and provide appropriate guidance and support to the IT teams of the international entities.
• Provide executive leadership and governance of the cybersecurity programme, ensuring that policies, technical controls, security awareness, vulnerability management, penetration testing, monitoring and incident-response capabilities are appropriately owned, resourced, operated and reviewed.
• Ensure that IT systems and services support applicable data-protection requirements, working with the Data Protection Officer, People Department and relevant business owners to implement appropriate technical and organisational controls.
• Maintain effective IT risk management, backup and technology disaster-recovery arrangements, and support business leaders and process owners in developing and testing wider business-continuity plans and recovery priorities.
• Govern and prioritise the portfolio of IT projects and digital-transformation initiatives, appointing appropriate project and business owners and ensuring delivery within agreed scope, time and budget, with business owners accountable for adoption and benefits realisation.
• Lead the responsible adoption of AI, automation, data and collaboration technologies, including appropriate governance, risk assessment, acceptable-use controls, information protection and user enablement.
• Own the preparation and control of IT budgets, forecasts and investment cases; oversee expenditure, licensing and total cost of ownership to ensure effective financial control and value for money.
• Provide oversight of strategic technology suppliers, material contracts, licensing and procurement, leading major negotiations and ensuring that routine supplier and licence-management activities are appropriately delegated and controlled.
• Establish and report meaningful service, project, security, risk and financial measures, providing concise and evidence-based assurance to senior stakeholders.
• Ensure that effective IT policies, standards, asset records, system documentation, audit trails and operating procedures are established, appropriately owned, maintained and regularly reviewed.
• Build strong relationships with business leaders and international colleagues, translating operational needs into scalable, secure and practical technology solutions.
• Provide strategic technology direction to the wider International Group, overseeing the delivery of selected shared services from Gibraltar and working with individual entities to identify synergies, promote appropriate common standards, improve resilience and security, and evaluate opportunities for shared platforms, services, expertise and procurement, while recognising the operational responsibilities of the IT teams at the international entities.

WORK EXPERIENCE REQUIREMENTS

• Substantial senior-level experience leading a complex IT function across multiple locations, business entities or jurisdictions.
• Proven delivery of IT strategy, service-management and operating models, infrastructure modernisation and business-critical technology programmes.
• Demonstrable responsibility for cybersecurity governance, risk management, incident response, disaster recovery and regulatory or audit compliance.
• Strong experience of Microsoft 365, cloud and hybrid infrastructure, enterprise applications, identity and access management, data protection and modern security controls.
• Experience managing budgets, procurement, licensing, commercial negotiations and strategic technology suppliers.
• Track record of building capable teams, developing successors and communicating effectively with Board members, senior leaders, auditors, legal advisers and non-technical stakeholders.
• Experience introducing AI, automation or other emerging technologies in a controlled, business-focused and measurable manner is desirable.

EDUCATION REQUIREMENTS

• Degree-level education in information technology, computer science, cybersecurity, business or a related discipline, or equivalent senior professional experience.
• Relevant professional qualifications or demonstrable knowledge in areas such as IT service management, information security, project or programme management, cloud technologies and governance are desirable.
• Evidence of continuing professional development and current awareness of technology, cybersecurity, AI, data protection and regulatory developments.

SKILLS / ABILITIES / COMPETENCIES REQUIRED

• Strategic leadership with the ability to translate business objectives into actionable technology priorities and roadmaps.
• Broad technical understanding of enterprise infrastructure, networks, cloud and hybrid environments, Microsoft 365, business applications, cybersecurity and data management.
• Strong governance, risk, compliance, audit and evidence-management capability.
• Sound commercial judgement, financial literacy and the ability to evaluate costs, benefits, risks and contractual commitments.
• Effective programme, project, prioritisation and change-management skills in a multi-stakeholder environment.
• Excellent written, presentation and interpersonal communication skills, including the ability to explain complex technical issues clearly and concisely.
• Ability to build trusted relationships, influence senior stakeholders and work effectively across cultures, functions and countries.
• Strong people leadership, coaching, delegation, performance management and succession-planning capability.
• Calm and decisive incident leadership, with the ability to balance operational urgency, security, legal obligations and business impact.
• Analytical and improvement-focused approach, using evidence, metrics and lessons learned to strengthen services and controls.

PERSONAL ATTRIBUTES

• High integrity, discretion and a strong sense of accountability.
• Pragmatic, service-oriented and commercially aware, with sound judgement under pressure.
• Proactive, organised and detail-conscious while retaining a clear strategic perspective.
• Collaborative and approachable, with the confidence to challenge constructively and make difficult decisions.
• Resilient, adaptable and committed to continuous learning and improvement.
• Committed to developing others, sharing knowledge and reducing single-person dependencies.
• Culturally aware and respectful when working across international teams and stakeholder groups.

TRAINING

• Maintain current knowledge through appropriate leadership, cybersecurity, data protection, AI governance, cloud, service management and business continuity training.
• Complete role-specific training required by the Group, its customers, regulators or contractual frameworks.
• Participate in periodic incident-response, disaster-recovery and crisis-management exercises.
• Undertake continuing professional development relevant to changing technology, risk and compliance requirements.

Mandatory Training:

• Assigned internal e-learning pathway. 

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this role.  They are not to be construed as an exhaustive list of all responsibilities, duties and skills required of employees.  All personnel may be required to perform duties outside of their normal responsibilities to meet the ongoing needs of the organisation.

CLOSING DATE: Friday 20th November 2026