About Blackpanda
Somewhere in Asia tonight, a server room is on fire. Not literally — though sometimes it might as well be. A ransomware note is blinking on a managing director's screen in a tower above Singapore. A family office in Hong Kong is locked out of its own ledgers. A trading desk in Japan is running orders on paper. Across the South China Sea in the Philippines, a hospitality group has just learned its booking system isn't its own anymore. Somewhere — Singapore, Hong Kong, Japan, the Philippines, Malaysia — a CIO is staring at the ceiling at three in the morning, wondering who to call.
That call comes to us.
Blackpanda is Asia's premier cyber crisis response firm — Lloyd's of London–accredited, regionally headquartered, and built for one purpose: to walk in when the worst has already happened, and walk out leaving the company still on its feet. We do incident response and digital forensics. That is it. No identity crisis about what we are. We are pure IR, and we like it that way.
Three channels, one operating force. We reach the market in three ways, and every channel feeds the same unit.
- Consulting. Hourly, senior-led engagements for enterprises and board-level matters where complexity, sensitivity, or scale demand our most experienced operators.
- IR-1. Our proprietary fixed-cost subscription is sold through IT channels and underwritten on our own insurance paper. IR-1 puts a real response solution in the hands of mid-market and small companies who have never been able to afford traditional cyber cover — paid up front, before the breach, with our team on the other end of every activation.
- Traditional cyber insurance. Full-stack policies for the mature, board-level buyer, with our response practice on the inside of every claim. Not a panel. Not a vendor. Our own people.
As a Lloyd's coverholder, the revenue arrives before the breach, not after it. Where traditional insurers park that float in markets, we pour ours straight back into the team — into people, training, tooling, and hours on the keyboard against real adversaries. Our gross margins run roughly two times those of traditional IR firms, and every point of that advantage compounds inside the unit.
The Cyber In-Extremis Force. At the centre of everything is the CIF.
Borrowed the term from the special operations world and you'll understand what we mean by it. In extremis describes the moment a situation has moved beyond the tolerance of conventional units. When the building is already burning. When there is no time, no margin, no second chance. In-extremis forces are the no-fail option — who you call when calling anyone else means accepting the loss.
Blackpanda was founded by three former operators of the Commander's In-Extremis Force, one of five CIF teams the United States military positioned around the world, theirs based out of Okinawa. They built this firm because they had served inside the original — and they know what right looks like. How the best are selected. How the best are trained. How the best stand ready when the call comes. They are building the cyber equivalent the only way they know how: same standards, same discipline, same refusal to compromise on who gets to wear the patch.
We set a hard floor under who is allowed in the room. Every responder on the CIF roster holds — or is actively earning — multiple SANS Institute certifications, the most rigorous DFIR qualifications in the field. Network forensics, enterprise cloud, Linux, Windows, adversary tradecraft. The company pays for the coursework. The company pays for the certifications. The bar is not negotiable.
By the end of 2026, Blackpanda expects to field 25 full-time incident responders — by a wide margin the largest pure-IR team in Asia-Pacific and Japan. You want to run with the best? You have to be trained by the best. We do this so that one day there is no question — inside the firm or outside it — about who is the best.
Our Core Values
• Sincerity — If we say we'll do it, it's as good as done. In combat, you have to know your right flank will be there at 0200 when they said they would. The work is the same.
• Unity — Debate fiercely, then commit fully. We all row in the same direction.
• Efficiency — Timing beats speed, precision beats power, leverage beats strength.
• Humility — Humility forms the basis of honor. We listen, then we act, then we listen again.
• Grit — We don't sugarcoat setbacks or bad news. We face challenges head-on and we don't quit when it gets hard.
Our story:
Blackpanda is Asia's leading cyber incident response company, delivering digital emergency response across three integrated channels: IR consulting, IR-1 assurance subscriptions, and Lloyd's of London-underwritten cyber insurance. Each is purpose-built for a different buyer, whether enterprise, mass market, or sophisticated risk-transfer clients, and each stands alone as full incident response. Together, these channels reach the entire commercial market, because our mission is to provide digital emergency response for everyone. Buy all three and they combine into the complete post-attack recovery solution: preparation in advance, response the moment you're hit, and financial recovery paid for by insurance. One local team to help you get ready, respond, and recover.
Our Mission: To provide digital emergency response to everyone.
Our Vision: Accessing cyber incident response is as universally accessible as dialing 9-1-1.
What we are looking for:
Blackpanda is seeking a Product Director to own the product strategy, roadmap, and continuous improvement of our internal Go-To-Market (GTM) technology stack and incident response platform capabilities. You will be responsible for the product definition and direction of four interconnected systems that power commercial operations and customer delivery across APAC:
- HubSpot – Our CRM and revenue orchestration system
- Xero – Our financial system of record
- CloudBlue – Our commerce and subscription management platform
- Blackpanda Incident Response Technology Stack – Our platform, used to deliver our services and serving both clients and internal teams
This role sits at the intersection of commercial operations, finance, product engineering, and customer delivery. You'll translate business requirements into product specifications, manage integrations across systems, define success metrics, and prioritise roadmap initiatives that unblock revenue and improve operational efficiency.
You will also be the storyteller that communicates overall product progress to the rest of the organization. This is a Director-level role and requires a senior leader who can own a systems budget, manage vendors and governance, and build and develop a team, and represent any platform to the executive team, the board, clients and partners as required. You will also help shape company goals and commercial models from a systems perspective.
Operating Model
This role operates within an AGILE delivery framework, using SCRUM methodologies to drive iterative development and continuous improvement:
- Sprint-based delivery – Organise roadmap initiatives into 2-week sprints with clear acceptance criteria and delivery goals
- Backlog management – Own and prioritise the product backlog; conduct regular backlog refinement sessions with engineering, stakeholders, and cross-functional partners
- Story definition & acceptance – Write clear user stories with business value, technical specifications, and acceptance criteria; validate completed work during sprint reviews
- Standup cadence – Participate in daily standups; remove blockers and drive velocity
- Sprint retrospectives – Lead continuous improvement; adapt processes based on team feedback and learnings
- Release planning – Coordinate multi-sprint releases with phased rollouts across APAC entities; manage dependencies and communications
Responsibilities and Duties:
Systems Ownership & Product Strategy
- Own the complete product roadmap for Blackpanda's Go-to-Market and IR technology stack; express as epics and user stories aligned to quarterly OKRs
- Be deeply involved in defining and owning the delivery of how these systems support revenue operations, financial controls, and customer delivery across all APAC entities
- Establish KPIs and success metrics for each system; track adoption, user satisfaction, and impact on commercial goals through sprint metrics and release reviews
- Maintain a living requirements document and product backlog that reflects current business needs and future strategic initiatives
Requirements Gathering & Stakeholder Alignment
- Partner with Revenue Operations, Finance, Sales, Response, Technology and Leadership to understand requirements, pain points, and opportunities; translate into backlog items
- Run regular working sessions (discovery, backlog refinement, sprint planning) to refine requirements and translate business processes into system configurations
- Manage scope and prioritisation across competing requests using an EOS-based issues management framework and SCRUM ceremonies and communicate sprint progress and roadmap status regularly
Roadmap & Prioritization
- Build and own a quarterly/annual roadmap (expressed as epics) that balances system stability, strategic initiatives, and operational improvements
- Break down epics into right-sized user stories; estimate complexity and define story points with the engineering team
- Evaluate system capabilities against roadmap goals; identify build vs. configure vs. integrate vs. third-party extension opportunities
- Prioritise work using clear business criteria (revenue impact, operational efficiency, customer experience, risk mitigation) and SCRUM velocity forecasting
- Communicate roadmap progress, sprint outcomes, and decisions to executive stakeholders and functional teams through sprint reviews and release retrospectives
- Utilize product analytics, where relevant, to drive optimization of external placing Blackpanda platforms.
Configuration, Integration & Delivery
- Define functional and technical specifications for system configurations and integrations as acceptance criteria within user stories
- Partner with functional leaders on implementation design, technical feasibility, and quality assurance during sprint execution
- Own go-live planning, user testing, training, and change management for major system releases; coordinate phased rollouts across regions
- Manage data quality and ontology across systems; define standards for record creation and maintenance as definition of done criteria
Leadership & Management
- Build and develop the product and systems team as the function scales over time
- Own relevant systems budget, vendor relationships and governance (data ownership, access controls, audit readiness) as required
- Represent the platform to external counterparties as required, including any applicable systems level demonstrations that need to be done
- Lead change and adoption across APAC
Qualifications and Experience:
- 7-10+ years of product management experience, with at least 3 years owning internal tools or platform capabilities
- Hands-on experience with AGILE methodologies and SCRUM frameworks; proven ability to operate within sprint cycles, backlog management, and iterative delivery
- Experience managing cross-system integrations and data flows (API design, ETL, data mapping)
- Strong understanding of SaaS revenue operations, financial systems (accounting, subscription billing), or commerce platforms
- Proven ability to gather requirements, write clear user stories with acceptance criteria, and translate business needs into specifications
- Excellent communication skills; able to influence cross-functional stakeholders without direct authority; comfortable speaking in SCRUM ceremonies and sprint reviews
- Comfort with ambiguity; ability to work autonomously and drive clarity in fast-moving, scaling environments
- Strong analytical and problem-solving skills; data-driven approach to decision-making and backlog prioritisation
- A polished version:
- Familiarity with cybersecurity and cloud technologies such as EDR, SIEM, AWS, OpenSearch, and case management platforms would be highly beneficial.
- Comfort with using AI tools and platforms to manage your own workflows
- We are only accepting applications from candidates who are currently based in Singapore. Please do not apply if you are currently located outside the country.
What we offer:
- 40 days paid leave per year inclusive of public holidays, which may be taken at the discretion of the employee subject to compliance with our Leave Policy and the approval of their manager.
- Limited Work From Anywhere policy allotment, allowing for work from alternate locations contingent upon coverage provided by teammates and approved by manager for 5 days per quarter.
- Enrolment in the company's comprehensive corporate health plan that includes a large direct billing network for medical and dental coverage.
- Opportunities for inter-office travel, including a required annual week-long Tribe Onsite meet-up and quarterly week-long leadership Offsites.
- $5000 USD/year for professional training budget contingent on approval from manager with 12-month retention requirement
- Competitive base salary with performance-based variable compensation tied to market results, plus equity participation in Blackpanda's growth.
Declamation:
Candidates who successfully pass the Interview stage may be required to complete a Case Study, used to evaluate their technical knowledge and application of their skills in practical scenarios relevant to the role.
Blackpanda is committed to building a culturally diverse company, and we value a broad set of opinions in our team. As we grow, we are looking to build a team with a range of viewpoints at its core, and we encourage applications from minority candidates and all genders however you identify (X/F/M).
Blackpanda does not accept unsolicited resumes from recruitment agencies. We will not be responsible for any fees related to unsolicited candidates submitted by recruiters with whom we have not established explicit, written agreements for our job vacancies. By submitting any candidate information, recruiters agree to forfeit any claim to fees should their candidate be hired without an established agreement with Blackpanda.
.jpeg)
