Making your object private within the controller does not make it shared across requests. A new instance of the object would be created for each request.
Is there a heavy operation when constructing this object that you want to make it shared? If it's simply instantiating an web service client that should be fairly lightweight and re-creating it per request should't cause any performance degradation.