The Role
Designs and governs secure enterprise solutions across applications, infrastructure, cloud, data, and AI platforms. Advises engineering and technology teams, conducts threat modeling and risk assessments, establishes security standards, and embeds secure-by-design practices. Strengthens AI security for generative AI, LLMs, agents, RAG, and model integrations while addressing emerging attack vectors and regulatory requirements. Collaborates with technical and business stakeholders across security, privacy, legal, risk, compliance, and operations.
Summary Generated by Built In
Life. Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.
Are you passionate about designing secure enterprise solutions while helping organisations embrace the opportunities of cloud and artificial intelligence safely? As a Security Architect, you will play a critical role in shaping security strategy across applications, infrastructure, cloud platforms, data services, and AI enabled solutions. Working with technology, security, data, privacy, risk, and business stakeholders, you will help ensure security is embedded into everything we build, enabling innovation while protecting our people, systems, and data.
What will you be doing?As a Security Architect, you will act as a trusted advisor to engineering and technology teams, guiding secure design decisions across enterprise platforms and digital products. You will review solutions through a security lens, perform threat modelling and risk assessments, define security standards, and support the implementation of secure by design principles across cloud, infrastructure, applications, and AI capabilities.
You will also play a key role in strengthening our AI security posture, helping teams deploy Generative AI and AI enabled solutions responsibly, securely, and in line with emerging governance and regulatory requirements.
What will you need to be successful?Success in this role comes from combining strong technical depth with the ability to influence stakeholders, challenge conventional thinking, and translate complex security risks into practical business decisions.
You will bring:
- Significant experience in Security Architecture, Cyber Security Engineering, Cloud Security, or Enterprise Architecture, with the ability to design and govern secure solutions across complex global environments.
- Strong expertise across cloud and enterprise technologies including AWS, Azure, Microsoft Entra ID, Active Directory, network security architectures, identity and access management, SIEM platforms, vulnerability management, cryptography, secure development practices, DevSecOps, and hybrid infrastructure environments.
- Experience securing modern AI solutions and emerging technologies, including Generative AI, Large Language Models, AI agents, Retrieval Augmented Generation (RAG), AI model integrations, vector databases, and AI governance frameworks. You will understand threats such as prompt injection, model poisoning, data leakage, excessive agency, insecure tool use, and other AI specific attack vectors.
- Strong knowledge of industry frameworks and standards such as ISO/IEC 27001, NIST, CIS Controls, CSA CCM, GDPR, OWASP, NIST AI RMF, ISO/IEC 42001, and OWASP Top 10 for LLM Applications.
- Experience working with cross functional teams including Engineering, Product Management, Enterprise Architecture, Data, Privacy, Legal, Risk, Compliance, Procurement, and Security Operations, with the ability to influence technical and senior business stakeholders.
- Excellent communication, coaching, and leadership skills, coupled with strong critical thinking, learning agility, sound judgement, and a passion for continuous improvement.
- Desirable certifications include CISSP, CCSP, SABSA, TOGAF, Microsoft Cybersecurity Architect Expert (SC-100), AWS Security Specialty, Azure Security Engineer (AZ-500), CISM, or equivalent security and cloud certifications.
The anticipated base compensation range for this position is 251,000 PLN – 376,250 PLN gross annually.
The actual base pay offered to the successful candidate will be based on objective, job-related factors including (but not limited to) relevant skills, qualifications, and experience, scope and responsibilities of the role, geographic location, and internal equity considerations. Compensation decisions are made using consistent and gender-neutral criteria, in line with applicable pay transparency laws. This role has been evaluated within our internal job architecture and mapped to a defined pay band to ensure consistency and fairness.
You. Unlimited.
We believe in creating the greatest good for society. Our Strongest investments are in our people and patients we serve.
We believe in creating the greatest good for society. Our Strongest investments are in our people and patients we serve.
Inclusion & Belonging: Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about our Employee Inclusion Groups on our website.
Your Future: Generous annual bonus, life insurance, Save As You Earn share options.
Work/Life Balance: Flexible Vacation and Time Off, Paid Holidays and Paid Volunteering Hours, so we can give back to our communities!
Your Wellbeing: Private Health and Dental plans, multisport card/my benefit platform and much more.
Flexibility: Hybrid Working Model (For most professional roles).
Training: Hands-On, Team-Customised, Mentorship, subsidies for language classes, certifications and postgraduate studies.
#LI-GG1
#LI-HYBRID
Stay connected by joining our Talent Community.
We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.
Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.
Explore our website and learn more about our mission, our team, and the opportunities we offer.
Skills Required
- Significant experience in security architecture, cybersecurity engineering, cloud security, or enterprise architecture
- Experience designing and governing secure solutions across complex global environments
- Expertise in AWS, Azure, Microsoft Entra ID, Active Directory, network security architectures, identity and access management, SIEM platforms, vulnerability management, cryptography, secure development, DevSecOps, and hybrid infrastructure
- Experience securing generative AI, large language models, AI agents, RAG, AI model integrations, vector databases, and AI governance frameworks
- Understanding of AI-specific threats including prompt injection, model poisoning, data leakage, excessive agency, and insecure tool use
- Knowledge of ISO/IEC 27001, NIST, CIS Controls, CSA CCM, GDPR, OWASP, NIST AI RMF, ISO/IEC 42001, and OWASP Top 10 for LLM Applications
- Experience working cross-functionally with engineering, product, enterprise architecture, data, privacy, legal, risk, compliance, procurement, and security operations
- Excellent communication, coaching, leadership, critical thinking, learning agility, and judgment
- CISSP, CCSP, SABSA, TOGAF, Microsoft Cybersecurity Architect Expert SC-100, AWS Security Specialty, Azure Security Engineer AZ-500, CISM, or equivalent certification
Smith & Nephew Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Smith & Nephew and has not been reviewed or approved by Smith & Nephew.
-
Healthcare Strength — Medical, dental, and vision plans are paired with a global mental‑health program for employees and families, indicating a robust core health package.
-
Retirement Support — U.S. employees have access to a 401(k) with company contributions, and share plans complement long‑term savings.
-
Leave & Time Off Breadth — Generous holiday, paid volunteering leave, and flexible work models point to broad time‑off options.
Smith & Nephew Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Smith+Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude, we work together to win.. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited. Please note: not all products referred to may be approved for use or available in all markets.
