ERP Security Manager

Life. Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.

Join us as our Information Security Manager for our global ERP transformation and play a pivotal role in shaping the secure foundation of one of the most important digital programmes in our organisation. This is an exciting opportunity to influence architecture, uplift cyber resilience, partner with senior leaders and vendors, and protect our enterprise as we modernise the way we operate.

You will become the security lead at the heart of our ERP transformation, guiding all programme teams to build securely and deliver with confidence. Working side by side with the ERP Programme Director, enterprise architects and global security specialists, you will help define and embed the security strategy for a multi year, multi region implementation. Each day will bring something different, from reviewing architecture and risk assessments to supporting testing cycles, leading vendor governance or helping teams prepare for go live. You will be the person ensuring that as we move fast, we always move safely.

Success in this role comes from combining deep technical security expertise with the ability to guide a large transformation programme through complex and sometimes competing priorities. You will bring credibility, clarity and confidence to teams across architecture, delivery, security and the business, helping them make informed decisions that protect the organisation while enabling progress. You will be the person who understands how all the moving parts fit together and who can spot risk early, translate it into business impact and ensure the right actions are taken.

To thrive here you will need
• Extensive experience in information security, cyber risk or IT security, ideally eight or more years, with a proven track record supporting large scale ERP implementations such as SAP, Oracle, Workday or Dynamics. You will be comfortable leading security workstreams and advising senior stakeholders across a major transformation.
• Strong foundations in enterprise security architecture and governance, including identity and access management, role based access, segregation of duties, secure design, cloud platforms and data protection. You will understand how to embed secure controls into complex, integrated environments and how to validate that they are working.
• Confidence working with system integrators, offshore delivery teams and multiple third parties, with the ability to challenge when needed, negotiate expectations and ensure accountability around testing, remediation and compliance.
• A clear and pragmatic approach to risk, supported by knowledge of regulatory frameworks such as ISO 27001, NIST, HiTrust, HIPAA, SOX and GDPR. Certifications such as CISSP, CISM or CRISC are highly beneficial and reinforce your ability to bring structure and discipline to a fast paced, high visibility programme.

Inclusion & Belonging: Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about our https://www.smith-nephew.com/en/careers/life-at-smith-nephew on our website

Your Future: Generous annual bonus, life insurance, Save As You Earn share options.

Work/Life Balance: Flexible Vacation and Time Off, Paid Holidays and Paid Volunteering Hours, so we can give back to our communities!

Your Wellbeing: Private Health and Dental plans, multisport card/my benefit platform and much more.

Flexibility: Hybrid Working Model (For most professional roles).

Training: Hands-On, Team-Customised, Mentorship, subsidies for language classes, certifications and postgraduate studies