Helicap is a Singapore-based FinTech firm connecting global investors to private debt opportunities in Southeast Asia. The company’s mission is to bridge a USD400 billion financing gap underserved by traditional financial institutions and deploy capital to 300 million underbanked individuals through 1,000 originators across the region. Helicap’s equity backers include Malaysia's leading independent investment bank Kenanga Investment Bank Berhad (“Kenanga Group”), Japanese financial services firm Credit Saison, Temasek-backed alternative investment firm Tikehau Capital, Phillip Capital, and leading venture firms such as East Ventures, Access Ventures, Voveo Capital, and Singapore’s Soilbuild Group Holdings.
Over the last seven years, Helicap has raised over USD15 million in paid-up capital through its regulated subsidiaries and deployed more than USD600 million in capital using proprietary data analytics. Leveraging this capability, the group has indirectly supported more than 5 million MSMEs and individuals. Its collaboration with Temasek Trust on Southeast Asia's first Financial Inclusion Report demonstrates its commitment to building an impactful, sustainable, and ethical financial ecosystem. Since its inception, the Helicap group has built exclusive networks with hundreds of platform partners, reaching more than 200 million potential borrowers across the region.
Run — Day-to-day operations
● Administer Google Workspace, Jumpcloud (including MDM), Ironscales, Cloudflare Zero Trust, Slack, GitHub, and Dropbox
● Own end-to-end employee lifecycle: onboarding, access provisioning across all platforms, offboarding, and deprovisioning — integrated with BrioHR
● Maintain the IT asset inventory and endpoint management programme
● Handle IT support and issue resolution for a primarily non-technical team
Build — Programme and tooling
● Design and document a formal onboarding/offboarding process with automated access controls triggered from BrioHR
● Implement and manage endpoint detection and response across the device fleet
● Build and maintain a vendor registry with associated risk assessments
● Govern cloud and developer access in AWS and GitHub — IAM roles, access reviews, CloudTrail monitoring
● Identify, evaluate, and integrate tooling gaps across the security stack
● Own Helicap's MAS TRM compliance artefacts: access reviews, risk assessments, incident logs, and audit trail documentation
● Develop and maintain security policies, runbooks, and employee security guidelines
Your First 90 Days
Days 1–30: Audit current access, tooling, and endpoints across all platforms. Document the as-is state. Map gaps against MAS TRM requirements.
Days 31–60: Formalise the onboarding and offboarding process with BrioHR–Jumpcloud integration. Validate endpoint coverage and MDM policy enforcement. Stand up the vendor registry.
Days 61–90: Close priority findings from the tech audit. Establish a recurring cadence for access reviews and security reporting to leadership.
Tools You'll Work With
Current stack
● Identity, access & MDM: Jumpcloud
● Email security: Ironscales
● Collaboration & file storage: Google Workspace, Slack, Dropbox
● Network access: Cloudflare Zero Trust
● Cloud infrastructure: AWS
● HR: BrioHR
● CRM: HubSpot
● Code & project management: GitHub, Linear
Gaps to evaluate and fill — your call on tooling
● Endpoint detection & response (EDR) — e.g. CrowdStrike, SentinelOne, Microsoft Defender
● IT ticketing / ITSM — e.g. Freshservice, Jira Service Management
● Privileged access management (PAM) — for elevated AWS and GitHub access
● Security awareness training — e.g. KnowBe4
● SIEM / log aggregation — e.g. Datadog Security, Elastic SIEM
● Data loss prevention (DLP) — across Google Workspace, Slack, and Dropbox
● Password manager — e.g. 1Password, Bitwarden
What We Offer
● Remote-first with flexibility across Singapore, India, and Malaysia
● Direct ownership of Helicap's IT and security function from day one
● A small, technical team that trusts you to make the right calls
● 4–7 years of IT operations and/or security engineering experience, ideally at an SME or startup where you were the sole or lead IT function
● Hands-on experience with identity and access management platforms (Jumpcloud, Okta, Azure AD, or equivalent)
● Google Workspace and Slack administration
● Experience governing cloud access in AWS — IAM, CloudTrail, Security Hub
● Familiarity with zero-trust network access (Cloudflare Zero Trust or equivalent)
● Working knowledge of MAS TRM guidelines or a comparable fintech/financial services compliance framework
● Experience building or owning vendor risk management and IT asset tracking programmes
● Scripting or automation skills (Python, Bash, or similar) for provisioning workflows and tooling integration
● Strong documentation habits — you write runbooks, not tribal knowledge
● Comfortable making independent tooling recommendations and owning implementation end-to-end
Interested candidates can send their resumes to hiring@heli-cap.com with the subject title “IT_Security_Operations_ Engineer_FirstName_LastName”.
We are also open to hearing from IT managed service providers, consultancies, or staffing agencies who can deliver this capability — whether as a direct placement or a managed service. If that's you, reach out with details of how you would approach the scope above.
Investment involves risk. Past performance is not necessarily a guide to future performance or returns. The value of investments and the income from them can go down as well as up, and you may not get the full amount you invested. Rates of exchange may cause the value of investments to go up or down.
Any forward-looking statements, prediction, projection or forecast on the economy, stock market, bond market or economic trends of the markets contained in this material are subject to market influences and contingent upon matters outside the control of Helicap Pte. Ltd. (“Helicap”) and therefore may not be realised in the future. Further, any opinion or estimate is made on a general basis and subject to change without notice. In presenting the information above, none of Helicap, its affiliates, directors, employees, representatives or agents have given any consideration to, nor have made any investigation of the objective, financial situation or particular need of any user, reader, any specific person or group of persons. Therefore, no representation is made as to the completeness and adequacy of the information to make an informed decision. You should carefully consider (i) whether any investment views and products/ services are appropriate in view of your investment experience, objectives, financial resources and relevant circumstances. You may also wish to seek financial advice through a financial advisor or and independent legal, accounting, regulatory or tax advice, as appropriate.
