Automatic permission based on Invoice value

Hello, I want to redesign a workflow so that if a value is exceeded in an invoice, say 30k, then only the CEOs should be able to forward this one workflow step, before that department heads can also go up to the value 30k, how do I realize this?