Life Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.
At Smith+Nephew we are looking for: Security Analyst
The Security Analyst (Governance & Tooling) is responsible for supporting the governance of secure solution delivery and the operational coordination of architectural security assurance processes across the technology estate. Working closely with security architects, enterprise architects, and IT compliance & delivery teams, the role plays a key part in embedding security architecture principles, design risk reviews, and compliance checks throughout the project lifecycle.
The role coordinates and manages the Enterprise Architecture Risk and Security (EARS) and Technology Design Assurance (TDA) processes, ensuring that security risks, control gaps, and compliance obligations are identified early and addressed effectively. In addition, the postholder supports the maintenance of the enterprise architecture toolset (Capsifi), assisting with security-related data integration, modelling, and reporting.
This role is ideal for someone early in their career in security architecture, technology governance, or enterprise architecture, seeking hands-on exposure to secure design review processes, tooling, and stakeholder engagement in a regulated technology environment.
What will you be doing?
- Coordinating risk and security assessments for enterprise architecture to identify potential threats and ensure compliance with security policies and regulations
- Managing secure design assurance processes, facilitating meetings, tracking actions, and collaborating with senior architects to address security risks
- Maintaining and enhancing security architecture data in enterprise tools, integrating multiple data sources to provide clear visibility of security posture and risks
- Creating dashboards and visual reports to highlight architectural risk themes, compliance status, and security metrics for stakeholders
- Acting as a key liaison between project teams, architects, and governance bodies to ensure smooth security review workflows and process adherence
- Supporting the documentation and evolution of security architecture, including application risk profiles and compliance frameworks, to guide strategic security planning
What will you need to be successful?
- A strong interest or background in security architecture, IT risk, or cybersecurity governance, supported by academic study, training, or relevant experience
- Solid understanding of key security concepts such as secure design, risk assessment, and control frameworks, with familiarity in tools like ServiceNow, Capsifi, LeanIX, ArchiMate, or Visio
- Proficiency in handling and preparing structured data (e.g., Excel, CSV) for integration and reporting in enterprise architecture tools
- Confident communication skills, able to engage effectively with both technical and non-technical stakeholders
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, with progress or interest in certifications like TOGAF, SABSA, CompTIA Security+, or CCSK
- Experience or familiarity with security design reviews, impact assessments, and managing governance in regulated environments is highly desirable
- Strong organizational skills, a proactive attitude, and a willingness to learn from senior professionals in security and architecture
You. Unlimited.
165 years of groundbreaking innovation requires a steadfast focus on what’s next. We’re passionate about you. You’re what’s next...
- Inclusion & Belonging: Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about our Employee Inclusion Groups on our website
- Your Future: Generous annual bonus, life insurance, Save As You Earn share options.
- Work/Life Balance: Flexible Vacation and Time Off, Paid Holidays and Paid Volunteering Hours, so we can give back to our communities!
- Your Wellbeing: Private Health and Dental plans, multisport card/my benefit platform and much more.
- Flexibility: Hybrid Working Model (For most professional roles).
- Training: Hands-On, Team-Customised, Mentorship, subsidies for language classes, certifications and postgraduate studies
#LI-GG1
#LI-HYBRID
We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.
Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N.
Explore our website and learn more about our mission, our team, and the opportunities we offer.
