About the Role

Managed Services & Vendor Oversight

• Serve as the primary security and risk owner for the firm's outsourced IT service provider.
• Manage vendor performance through SLAs, security controls, governance reviews, and risk assessments.
• Oversee remediation activities, validate security controls, and review assurance reports, audits, and certifications.
• Ensure appropriate documentation, knowledge retention, and vendor exit readiness.

Cyber Risk & Governance

• Lead the firm's cyber risk management framework, including risk assessments, risk registers, and reporting.
• Maintain information security policies and ensure compliance across outsourced IT operations.
• Provide regular updates to senior leadership on cyber risks, security posture, and emerging threats.

Incident Management

• Own and maintain the incident response framework and coordinate response activities during security incidents.
• Manage stakeholder communications, including executives, regulators, insurers, investors, and external partners.
• Conduct regular incident response exercises and drive continuous improvement initiatives.

Business Resilience & Security Awareness

• Oversee business continuity and disaster recovery capabilities, ensuring recovery objectives are met through regular testing.
• Drive security awareness initiatives, including phishing simulations and targeted cybersecurity training programs for employees.

What We're Looking For

• 7+ years of experience in Cybersecurity, Technology Risk, IT Governance, or Information Security, with proven expertise in overseeing managed service providers (MSPs) and outsourced IT environments.

• Prior experience within financial services is highly preferred, including hedge funds, asset management, investment banking, or fund administration. Familiarity with the outsourced IT operating model commonly adopted by investment firms is a strong advantage.

• Strong technical understanding of core infrastructure and security domains, including cloud platforms, identity and access management (IAM), endpoint detection and response (EDR), security information and event management (SIEM), vulnerability management, network security, and backup/disaster recovery solutions.

• Demonstrated ability to assess vendor-delivered security services, challenge technical decisions, and effectively manage cyber risk within a regulated environment.

What's Next

If you are ready to take the next step in your career journey within a supportive global team environment-where your skills are valued and developed-this opportunity awaits your application. Click APPLY or email your resume to neha.singh@robertwalters.com.sg

Do note that we will only be in touch if your application is shortlisted.

Robert Walters (Singapore) Pte Ltd

ROC No.: 199706961E | EA Licence No.: 03C5451

EA Registration No.: R1324990 Neha Singh