Senior Cyber Risk & MSP Oversight Manager

FengHe Fund Management Pte Ltd; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

FengHe Fund Management Pte Ltd in Singapore seeks a senior cyber security and technology risk leader to oversee outsourced IT security and risk performance. You will define security requirements, monitor provider deliverables, and manage incidents with senior stakeholders.

You will lead risk frameworks, maintain policies, and drive awareness programs while ensuring continuity and strong governance across the firm’s IT environment.

Qualifications

• 7+ years in cyber security, technology risk, or IT governance.
• Financial services background strongly preferred (hedge fund, asset manager, fund administrator, or investment bank).
• Familiarity with outsourced managed-IT model common among hedge funds is a significant advantage.

Responsibilities

• Act as the firm's primary point of accountability for the outsourced IT provider's security and risk performance.
• Define, negotiate, and enforce SLAs, security requirements, and reporting obligations; review the outsourced IT provider's deliverables, reports, and evidence with a critical eye.
• Run structured service and risk review meetings with the outsourced IT provider; track open issues, remediation items, and commitments to closure.
• Independently validate the outsourced IT provider's work where warranted (e.g., third-party penetration tests, vulnerability review, access reviews, patching and configuration practices).
• Review assurance materials (SOC 2 reports, certifications, subcontractor arrangements) and assess residual risk.
• Ensure the firm retains knowledge, documentation, and exit options to avoid unhealthy dependency on any single provider.
• Own the firm's cyber and IT risk framework: risk register, risk assessments, KRIs, risk appetite reporting.
• Maintain information security policies and ensure provider operations comply with them.
• Report to senior management on cyber risk posture, provider performance, and threats.
• Own incident response plan and lead responses to cyber incidents; coordinate communications.
• Lead tabletop exercises with firm and provider; drive lessons learned into improvements.
• Ensure business continuity and disaster recovery arrangements meet objectives and are tested.
• Run the security awareness program, including phishing simulations and training.

Skills

Judgment

Communication

Attention to detail

Composure under pressure

Vendor management

Integrity & discretion

Job description

FengHe Fund Management Pte Ltd in Singapore seeks a senior cyber security and technology risk leader to oversee outsourced IT security and risk performance. You will define security requirements, monitor provider deliverables, and manage incidents with senior stakeholders.

You will lead risk frameworks, maintain policies, and drive awareness programs while ensuring continuity and strong governance across the firm’s IT environment.