Role: Senior Manager - ERP Security & Controls
Location: Pune (Hybrid)
Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living.
Smith & Nephew (S+N) is a large multinational Medical Technology organization with an extensive Enterprise Applications ecosystem to run end-to-end business operations. ERPs form the core of this ecosystem and are tightly integrated with best-in-class systems such as Salesforce, Windchill, Movemedical, Maestro, Ariba, Workday and many more. At S+N, SAP serves as our primary and strategic ERP platform, running 80% of our operations and revenue.
We are seeking a Senior Manager - ERP Security and Controls to oversee Security design and global SOX ITGC compliance across SAP ECC and Microsoft AX, while supporting and preparing for our strategic transformation to SAP S/4HANA. Therefore, this role is both strategic and pivotal, playing a key part in enabling Smith & Nephew's digital transformation and continued growth over the coming years. You will be responsible for designing, implementing, and governing Security and Control for SAP and AX. Also represent SAP/AX Competency Centre during internal and external audits and driving the quality assurance across SAP and AX environments.
What will you be doing?
- Provide governance and oversight of SAP (ECC/S/4HANA) and AX security architecture, challenging designs, identifying risks, and ensuring remediation; co-drive design with architecture teams where needed.
- Govern roles, authorizations, and SOD compliance, including oversight of access reviews, sensitive access, and risk remediation; influence role design where required and lead license optimization.
- Own SOX ITGC controls for SAP and AX (primarily access management), with defined involvement in Change and Operations, collaborating with respective teams to ensure ERP compliance.
- Liaise with auditors, support audit cycles, and drive timely remediation of findings. Govern GRC tools and enforce security and compliance policies; monitor risk exposure and ensure remediation actions are implemented.
- Monitor risk exposure, report key metrics, and strengthen control frameworks and processes. Define and maintain SOD rulesets aligned with business processes, including mitigation and compensating controls.
- Drive continuous improvement and process optimization initiatives
- Security Architecture, Design and Build reviews. Participate in SOX/SOD audit activities.
- Ensures consistency of processes and procedures across SAP/AX Competency Centre.
- Focus on continuous improvement, that can help and support the company growth and strategy.
What will you need to be successful?
- Education: Bachelor’s / Master’s degree or equivalent experience in Computer Science, IT or related subject preferred.
- Licenses/ Certifications: (Optional): SAP certification: SAP Security Certifications. ITIL Qualifications.
- Experience: At least 10 years of IT experience, with 8+ years in SAP in ERP Security / GRC / Compliance roles.
- This role will be based in Pune, Hybrid work model - 2 days working from office.
- Significant experience in ERP Security / GRC / Compliance roles, including indirect leadership and management of cross-functional stakeholders in a global environment.
- Experience supporting ERP implementations or transformations (e.g., SAP S/4HANA) and working with globally distributed teams across multiple time zones.
- Experience managing global ERP environments. Proven experience handling audits.
- In-depth knowledge of SOX ITGC (including Access controls such as SOD and Sensitive Access) and broader compliance requirements.
- Overall functional knowledge of SAP and/or AX. Experienced in governing cross-functional solutions and ability to manage audit processes end-to-end.
- High attention to detail and control orientation. Experience in a regulated industry, GXP Validated, and/or medical device company is preferred.
- Strategic mindset with strong business and technical acumen. Sound understanding of regulatory and security frameworks. Experience working with geographically distributed virtual teams.
- Ability to manage relationship with external service providers and external/internal audit teams. Ability to work with globally located, culturally diverse teams (e.g. India, US, UK)
You. Unlimited.
We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.
Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/
Other reasons why you will love it here!
- Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit. Educational Assistance.
- Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
- Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
- Flexibility: Hybrid Work Model (For most professional roles)
- Training: Hands-On, Team-Customized, Mentorship
- Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances.
#L1 - YS1
Stay connected by joining our Talent Community.
We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.
Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.
Explore our website and learn more about our mission, our team, and the opportunities we offer.
Skills Required
- Bachelor’s or master’s degree in Computer Science, IT, or a related subject, or equivalent experience
- At least 10 years of IT experience
- At least 8 years of experience in SAP ERP Security, GRC, or Compliance roles
- Significant experience managing ERP security, GRC, and compliance activities
- Experience supporting ERP implementations or transformations, such as SAP S/4HANA
- Experience managing global ERP environments and globally distributed teams
- Proven experience handling internal and external audits end to end
- In-depth knowledge of SOX ITGC, segregation of duties, sensitive access, and access controls
- Functional knowledge of SAP and/or Microsoft AX
- Experience governing cross-functional solutions and managing audit processes
- Experience managing external service providers and audit teams
- Experience in a regulated, GxP-validated, or medical device environment
- SAP Security certification
- ITIL qualification
Smith & Nephew Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Smith & Nephew and has not been reviewed or approved by Smith & Nephew.
-
Healthcare Strength — Medical, dental, and vision plans are paired with a global mental‑health program for employees and families, indicating a robust core health package.
-
Retirement Support — U.S. employees have access to a 401(k) with company contributions, and share plans complement long‑term savings.
-
Leave & Time Off Breadth — Generous holiday, paid volunteering leave, and flexible work models point to broad time‑off options.
Smith & Nephew Insights
What We Do
Smith+Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude, we work together to win.. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited. Please note: not all products referred to may be approved for use or available in all markets.
