Application security specialist

Introduction to the job

ASML strongly believes in unlocking the potential of people and society by pushing technology to new limits. Our invitation to you is to be a part of the team that ensures ASML’s purpose can continue to be successful by protecting and securing its physical, informational and digital assets. This dynamic and challenging environment requires detail-oriented and passionate about security professionals.

As an Application security subject matter expert, you will be focusing on multiple areas of expertise covering application, infrastructure, and Software Development Lifecycle (SDLC) across both on-premises and cloud environments, including SaaS solutions.

Role and responsibilities

This function is positioned in the second line Security organization within the Risk, Business Assurance and Security (RBA&S) department of ASML Corporate. Together with your colleagues, you will be responsible for defining the security controls for new and existing solutions within ASML. You will assist and advise various technical teams on the implementation of security policies, requirements and controls. For verification purposes, you will be conducting quality assessments to verify control effectiveness, working with our colleagues in IT on resolution of deviations where appropriate.

• Assure that RBA&S requirements are effectively covered within the required security policies and standards
• Contribute to, test and monitor the effectiveness of our Security Controls Framework (including controls deviations management)
• Conduct specialized security assessments and support findings management
• Support our security compliance advisory and consultancy services to the organization

Education and experience

• Experience in security management, preferably on enterprise level (ca. 5 years)
• Deep knowledge of the current security technologies as well as current and future developments
• In-depth working knowledge of IT Risk/security frameworks and best practices, such as NIST Cyber security framework, ISF Standard of Good Practice for Information Security, IEC 62443, NIST SP 800 30 framework, ISO 27001/2 framework
• Valid industry certifications such as CISSP, CISM, CCSP and/or CISA and IT audit experience are appreciated

Skills

• Excellent interpersonal skills
• Ability to manage various stakeholders by building trusting and long term relationships in the capacity of a subject matter expert - you care about people and know how to navigate processes and challenges with a collaborative approach that gets things done
• A team player approach but harmonized with the ability to operate autonomously based on clear department and team guidance - you are comfortable in managing several projects at the same time while keeping under control the overview and bigger picture
• Passion for continuous learning and improvement as well as for applying industry best practices and latest trends

Other information

A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

About ASML

ASML is a leading supplier of lithography equipment, used by the world’s top chipmakers to print microchips that are increasingly powerful, fast and energy efficient. Working at ASML is inspiring, no matter what field you're in. That’s because we push the boundaries of technology: if it’s moving the world forward, chances are, we’re behind it. In fact, we’re probably a part of the electronic device you’re using right now. We’re a global team of more than 32,000 people from 122 different nationalities and counting. Headquartered in Europe’s top tech hub, the Brainport Eindhoven region in the Netherlands, our operations are spread across Europe, Asia and the US.