ERP Security Manager

Smith+Nephew; Wrocław; On-site; PLN 120,000 - 150,000; Full time

Benefits offered by this job

Generous annual bonus

Private health and dental plans

Flexible vacation and time off

Training and mentorship programs

Job summary

A leading global technology firm in Poland is seeking an Information Security Manager to guide their ERP transformation. The role involves leading the security strategy, managing risks, and ensuring a secure implementation across diverse teams. Candidates must have extensive experience in information security, with knowledge of ERP systems, and regulatory frameworks. The position promotes a hybrid working model and offers competitive benefits, making it an excellent opportunity to influence an organization's digital landscape.

Qualifications

• 8+ years of experience in information security and cyber risk.
• Experience with large-scale ERP implementations (SAP, Oracle, etc.).
• Ability to work with system integrators and third parties.

Responsibilities

• Lead the security strategy for ERP transformation.
• Guide programme teams to build securely.
• Review architecture and manage risk assessments.

Skills

Information security expertise

Cyber risk management

Leadership in ERP transformations

Enterprise security architecture

Regulatory frameworks knowledge

Education

CISSP, CISM, or CRISC certifications

Job description

Life. Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.

Join us as our Information Security Manager for our global ERP transformation and play a pivotal role in shaping the secure foundation of one of the most important digital programmes in our organisation. This is an exciting opportunity to influence architecture, uplift cyber resilience, partner with senior leaders and vendors, and protect our enterprise as we modernise the way we operate.

Responsibilities

You will become the security lead at the heart of our ERP transformation, guiding all programme teams to build securely and deliver with confidence. Working side by side with the ERP Programme Director, enterprise architects and global security specialists, you will help define and embed the security strategy for a multi year, multi region implementation. Each day will bring something different, from reviewing architecture and risk assessments to supporting testing cycles, leading vendor governance or helping teams prepare for go live. You will be the person ensuring that as we move fast, we always move safely.

What you will need to be successful

Success in this role comes from combining deep technical security expertise with the ability to guide a large transformation programme through complex and sometimes competing priorities. You will bring credibility, clarity and confidence to teams across architecture, delivery, security and the business, helping them make informed decisions that protect the organisation while enabling progress. You will be the person who understands how all the moving parts fit together and who can spot risk early, translate it into business impact and ensure the right actions are taken.

To thrive here you will need:

• Extensive experience in information security, cyber risk or IT security, ideally eight or more years, with a proven track record supporting large scale ERP implementations such as SAP, Oracle, Workday or Dynamics. You will be comfortable leading security workstreams and advising senior stakeholders across a major transformation.
• Strong foundations in enterprise security architecture and governance, including identity and access management, role based access, segregation of duties, secure design, cloud platforms and data protection. You will understand how to embed secure controls into complex, integrated environments and how to validate that they are working.
• Confidence working with system integrators, offshore delivery teams and multiple third parties, with the ability to challenge when needed, negotiate expectations and ensure accountability around testing, remediation and compliance.
• A clear and pragmatic approach to risk, supported by knowledge of regulatory frameworks such as ISO 27001, NIST, HiTrust, HIPAA, SOX and GDPR. Certifications such as CISSP, CISM or CRISC are highly beneficial and reinforce your ability to bring structure and discipline to a fast paced, high visibility programme.

Benefits and culture

• Inclusion & Belonging: Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging.
• Your Future: Generous annual bonus, life insurance, Save As You Earn share options.
• Work/Life Balance: Flexible vacation and time off, paid holidays and paid volunteering hours.
• Your Wellbeing: Private health and dental plans, multisport card and benefit platform.
• Flexibility: Hybrid working model (for most professional roles).
• Training: Hands-on, team-customised mentorship, subsidies for language classes, certifications and postgraduate studies.

Stay connected by joining our Talent Community. We’re more than just a company — we’re a community. Follow us on LinkedIn to see how we support and empower our employees and patients every day. Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N. Explore our website and learn more about our mission, our team, and the opportunities we offer.