Valsoft

Discussion

Head of IT

Summary

Oversee IT security and compliance for a group of software companies, tailoring policies, assessing risks, and managing incident response across subsidiaries.

Aspire Software is looking for a Head of IT to join our team in Lebanon.

Here is a little window into our company: Aspire Software operates and manages wholly owned software companies, providing mission-critical solutions across multiple verticals. By implementing industry best practices, Aspire delivers a time sensitive integration process, and the operation of a decentralized model has allowed it to become a hub for creating rapid growth by reinvesting in its portfolio.

KEY RESPONSIBILITIES:

  • Translate HQ’s baseline standards into a tailored security roadmap
  • Develop and maintain a security maturity model scaled to the subsidiaries’ size and complexity
  • Define tiers of subsidiaries by risk, industry, and data sensitivity to drive differentiated strategies
  • Create and maintain a library of group-level policies, templates, and standards (e.g., IR plan, password policy)
  • Facilitate adoption of policies across subsidiaries with appropriate localization
  • Establish and manage a policy update cadence with version control
  • Provide or recommend shared tooling across the group
  • Negotiate contracts with preferred security vendors and manage licensing agreements
  • Build lightweight security engineering support, whether internal or outsourced
  • Participate in M&A evaluations to assess the cybersecurity posture of targets
  • Advise investment teams on cyber risk exposure and hidden liabilities
  • Conduct annual or biannual security self-assessments across subsidiaries.
  • Consolidate results into quarterly dashboards for group leadership and HQ.
  • Publish and maintain a group-wide incident response playbook.
  • Serve as the first escalation point for incidents at the subsidiary level.
  • Coordinate post-incident reviews and group-level communication.
  • Help subsidiaries pursue and maintain compliance (e.g., SOC 2, ISO 27001, GDPR, HIPAA).
  • Maintain a centralized view of compliance status across the group.
  • Assist with customer/vendor security questionnaires and audits.
  • Triage critical vulnerabilities and incidents across subsidiaries.
  • Escalate material risks to HQ or Group X executives as needed.
  • Maintain a group-wide risk register and coordinate prioritization.

Show