Cyber Risk & MSP Governance Leader

FENGHE FUND MANAGEMENT PTE. LTD.; Singapore; On-site; SGD 120,000 - 200,000; Full time

Job summary

FengHe Fund Management Pte. Ltd. is seeking an experienced cyber risk and MSP oversight leader in Singapore.

You will own the firm’s security program, oversee the outsourced IT provider, and drive governance across risk, incident response, and resilience. The role requires deep expertise in cloud security, IAM, EDR/SIEM, and vulnerability management. You will report to senior management and collaborate with investors and regulators as needed, ensuring adherence to policy frameworks and high

Qualifications

• 7+ years in cyber security, technology risk, or IT governance.
• Experience overseeing managed service providers or outsourced IT arrangements is preferred.
• Strong vendor management and communication skills are essential.

Responsibilities

• Act as primary point of accountability for outsourced IT provider's security and risk performance.
• Define, negotiate, and enforce SLAs, security requirements, and reporting obligations; review deliverables with a critical eye.
• Lead structured service and risk review meetings; track open issues and remediation items to closure.
• Independently validate provider's work: e.g., third-party tests, vulnerability review, access reviews, patching practices.
• Review assurance materials (SOC 2, certifications) and assess residual risk.
• Oversee incident response coordination with provider; manage communications to executives, investors, and regulators.
• Maintain business continuity and disaster recovery arrangements via the provider; ensure knowledge/documentation retention.

Skills

Cyber security

Technology risk

IT governance

Vendor management

Communication

Tools

Cloud infrastructure

IAM

EDR/SIEM

Vulnerability management

Network security

Backup/DR

Job description

FengHe Fund Management Pte. Ltd. is seeking an experienced cyber risk and MSP oversight leader in Singapore.

You will own the firm’s security program, oversee the outsourced IT provider, and drive governance across risk, incident response, and resilience. The role requires deep expertise in cloud security, IAM, EDR/SIEM, and vulnerability management. You will report to senior management and collaborate with investors and regulators as needed, ensuring adherence to policy frameworks and high