IT Security and Risk Manager - Asset Management Firm

ARCTIVA PARTNERS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ARCTIVA PARTNERS PTE. LTD. is seeking an experienced IT Security and Risk Manager to oversee security across its asset management business. You will align cybersecurity with regulatory expectations and translate complex risks into business guidance for executives.

You will lead risk assessment, design controls, ensure governance with standards like NIST/ISO 27001, manage incidents, vet third parties, and foster a security-aware culture among portfolio teams.

Qualifications

• 4+ years of IT security, information risk or cyber governance experience in asset/wealth management or financial services.
• Deep understanding of cloud security (AWS/Azure), network architecture, IAM and SIEM tools.
• Familiar with standards such as NIST, ISO 27001 and CIS; CISSP/CISM/CRISC/CEH desirable.

Responsibilities

• Identify, assess, and mitigate IT risks across investment platforms and infrastructure.
• Design, implement, and monitor security controls to protect data and portfolios.
• Ensure IT operations comply with financial regulations and internal policies.
• Lead incident detection, investigation, and remediation efforts.
• Evaluate third-party vendors' cybersecurity posture and data feeds.
• Educate teams on phishing defense, data handling, and threat awareness.

Skills

Risk management

Communication

Cloud security

Information security

Tools

SIEM

IAM

AWS

Azure

Job description

IT Security and Risk Manager - Asset Management Firm

We are seeking an experienced IT Security & Risk Officer to oversee and strengthen the information security management framework across our asset management business.

The successful candidate will act as the key liaison between technology operations and corporate risk. You will ensure our cybersecurity posture aligns with both global industry best practices and strict financial regulatory standards.

Core Responsibilities

• Risk Management: Identify, assess, and mitigate IT risks across our investment platforms and corporate infrastructure.
• Security Architecture: Design, implement, and monitor robust security controls to safeguard sensitive financial data and portfolio systems.
• Compliance & Governance: Ensure all IT operations align with financial regulations (e.g., SEC, FCA, GDPR, or local equivalents) and internal policies.
• Incident Response: Lead the detection, investigation, and resolution of potential security incidents or vulnerabilities.
• Third-Party Risk: Evaluate the cybersecurity posture of external vendors, critical software providers, and market data feeds.
• Security Culture: Educate internal teams and portfolio managers on phishing defense, data handling, and threat awareness.

What We Are Looking For

• Experience: 4+ years of experience in IT Security, Information Risk, or Cyber Governance-ideally within asset management, wealth management, or banking.
• Technical Knowledge: Deep understanding of cloud security (AWS/Azure), network architecture, IAM, and SIEM tools.
• Frameworks: Familiarity with industry standards like NIST, ISO 27001, and CIS.
• Certifications: CISSP, CISM, CRISC, or CEH are highly desirable.
• Soft Skills: Exceptional communication skills with the ability to translate complex technical risks into clear, actionable business advice for executives.