SimplifyNext is a Singapore-headquartered digital engineering firm, with offices in Thailand and Malaysia, working across three converged areas: agentic AI, AI-enabled application modernisation, and intelligent automation.
We bring strong business process consulting together with deep technology skills and modern delivery practices – product-centric, agile and AI-assisted. We build bespoke applications and AI systems, and we go deep on the platforms our clients run on, including Microsoft, AWS, ServiceNow, Databricks and UiPath. That combination of engineering depth and platform depth is what our clients come to us for.
We build and modernise the systems people depend on daily. Our 300+ practitioners are multi-disciplinary by design – business consultants, software engineers, architects, AI engineers and designers working on the same delivery, not handing off between silos. We focus on delivering outcomes for clients, building strong careers for our people, and staying ahead of the technology curve. We hire because we are growing.
The IT Security Manager is the customer-facing security lead and trusted advisor for the applications we deliver, working with customers, project teams and independent security partners. You will direct threat modelling, risk assessments, security testing and audits, with the technical depth to assess partners' work and act on the results.
This is a demanding role. Our public sector customers expect strict adherence to process and tender specifications, and discussions can be challenging. We want someone who holds the line on compliance and quality, stays composed under pressure and builds trust through reliable delivery.
What You'll Own
- Customer Security Leadership
- Be the primary security contact for customers, delivery teams and independent security partners, including incident handling and escalations.
- Report security status and risks to customers and management, with overall accountability for the IT security of delivered systems.
- Security Planning & Partner Oversight
- Plan and coordinate threat modelling, risk assessments, security testing and audits across the project lifecycle.
- Conduct risk assessments jointly with customers, propose mitigations for approval and maintain the risk register.
- Secure Design & Standards
- Prepare security documentation, and ensure systems meet customer-approved requirements and recognised standards, from design through testing.
- Advise delivery teams on secure design for cloud-first and AI-enabled solutions.
- Secure Design & Standards
- Prepare security documentation, and ensure systems meet customer-approved requirements and recognised standards, from design through testing.
- Advise delivery teams on secure design for cloud-first and AI-enabled solutions.
- Compliance & Stakeholder Management
- Ensure delivery adheres strictly to tender specifications, contractual requirements and agreed processes, with audit-ready evidence.
- Manage demanding stakeholders calmly and courteously: clarify requirements in writing, hold firm on agreed scope and standards, and escalate early.
What You'll Bring
Must-Have
- At least 5 years of experience in IT security across enterprise systems, networks or cloud, including risk assessment, governance, incident response and security testing.
- Sound technical knowledge of application, infrastructure and cloud security, enough to evaluate threat models, assessment reports and test results.
- Good knowledge of ISO/IEC 27001, NIST and CIS, and experience coordinating with customers, vendors and third-party security providers.
- Experience working to formal processes and specifications, such as tender security requirements and audit-ready evidence.
- Strong written, presentation and stakeholder management skills, with precise reports and minutes that stand up to scrutiny.
- Resilience and composure: stays professional and solution-focused with demanding or challenging stakeholders.
- Attention to detail and discipline: takes pride in following processes and specifications to the letter and producing accurate, traceable work.
- Ownership and drive: takes initiative, follows through to closure and is keen to grow into senior security leadership.
- A security certification, or working towards one (CISSP, CISM, CCSP, CISA or CRISC).
- Exposure to DevSecOps and AI-enabled solution security.
- Singapore Public Sector experience, including government ICT security policies.
Not for You If
This role is not a fit if:
- You prefer back-office compliance work rather than being customer-facing on live delivery.
- You want a purely hands-on testing role rather than coordinating and assessing the work of specialist partners.
- You see processes and specifications as flexible guidelines rather than commitments to follow to the letter.
- You're uncomfortable holding firm with demanding stakeholders or being the primary point of contact for security escalations.
One Team, Not Siloed Offerings
Apps, automation, and AI aren't separate teams here - you'll work across all three as one connected practice, not get boxed into a single lane.
AI in Our DNA, Not Bolted On
Regardless of platform, every specialist here is AI-enabled by design, powered by our own in-house AI workbench that pairs humans and AI from discovery to testing.
Future-Proof Your Career
Tech trends come and go - today's hot platform is tomorrow's afterthought. We multi-skill our people across platforms and AI so your career keeps growing no matter where the market moves.
APAC's Biggest AI-Integrated Practice
Across every platform we work in, our AI-integrated practice is the largest in the region, with work good enough to be cited at Google's own AI event.
Grow With Us Across ASEAN
We're one of Singapore's 100 Fastest Growing Companies, expanding fast across Thailand and Malaysia - plenty of room to grow with us.
At SimplifyNext, we’re committed to building a team of curious, driven, and forward-thinking individuals who care deeply about creating meaningful impact through technology. If you’re excited by the opportunity to grow, collaborate, and shape the future of digital transformation across the region, we’d be happy to hear from you.
Skills Required
- At least 5 years of experience in IT security covering enterprise systems, networks, or cloud infrastructure
- Experience with security risk assessments, security governance, incident response, vulnerability assessment, and security testing
- Technical knowledge of application, infrastructure, and cloud security
- Experience coordinating with customers, vendors, and third-party security providers
- Knowledge of ISO/IEC 27001, NIST, and CIS security standards and best practices
- Current professional security certification such as CISSP, CISM, CCSP, CISA, or CRISC
- Strong written, presentation, and stakeholder management skills
- Ability to support security incident response outside office hours when required
- Exposure to DevSecOps practices and security of AI-enabled solutions
- Prior experience in the Singapore Public Sector and familiarity with government ICT security policies
What We Do
SimplifyNext specializes in automation and analytics advisory and implementation services. We bring the best of the consulting and technology experience, having delivered projects for a diverse set of leading global and ASEAN organizations. Our experience cuts across strategy, implementation and operations, which provides us the insights and experience of what works and what does not across different environments. Our offerings include RPA, Analytics, Cognitive Automation, Process Mining, Low Code Apps and Cloud. We are working with leading organizations to scale automation and analytics, transforming the way they work and make a real difference to their business as well as their employees
.jpeg)
