Product Security Expert

Be part of progress

As Product Security Subject Matter Expert, you hold a key position in our RBA (Risk & Business Assurance) 2nd line Product Security, ensuring Product security framework and capabilities are defined, implemented and monitored.

Role and Responsibilities

As the Product Security Expert, you will support secure design, development and maintenance of ASML’s products by ensuring Product security capabilities are defined, implemented and monitored. You shall also verify the appropriateness (sufficiency) of the designs and implementation of the controls in the Product security domain across ASML. The Product Security Expert is responsible for monitoring compliance against our security frameworks and customer requirements. In this position, you have these main focus points:

• Develop product security risk and control framework with product security requirements and controls, including a monitoring dashboard.
• Partner with development teams to proactively communicate product security requirements, promoting control frameworks to ensure secure goals are met and ASML is compliant to the EU Cyber Security Act.
• Implement and embed our product security standards and policies throughout our sectors, building bridges with your (internal and where needed external) business stakeholders to achieve success in implementing our policies and standards.
• Keep updated on the latest trends, standards, and regulations on product security and embed them in ASML policies, standards, and control framework.
• Guide and prepare ASML sectors to comply with the regulatory requirements on Product Security.
• Explain product security risks to business leaders, and business positions/risk to technical leaders to achieve appropriate security outcomes.
• Pro-actively enable knowledge management within RBA and ASML sectors.

You will work together with a team of security professionals, product architects, and sector security managers to drive the Product security capability and framework. The Security Community has approximately 250 FTE across ASML. Together with the rest of the community, you protect ASML’s assets and you’re at the center of everything that’s digitally exchanged.

Education and Experience

Ideally, we are looking for someone who brings a strong technical background and can drive security program and project execution across multiple security teams, including design and engineering, manufacturing, sales, and customer support, even in situations where authority is not a given. You should be open to challenges, able to think outside the box, and bridge between higher level abstraction and detailed design choices. Key competences for this position include:

• 10+ years of experience in designing and implementing internal control frameworks and solving challenges, preferably in a multinational corporate security environment in two or more of the following areas: product security (preferred), application security, information security, or digital platform security.
• BSc/MSc/PhD in Cyber Security, Software Engineering, Computer Science, Information Technology, or equivalent through certification and/or training.
• In-depth knowledge or experience in Product Security by design.
• Proven experience with product security risk assessments.
• In-depth knowledge of compliance standards in the security domain, such as NIST, CIS, ISO 27000, IEC67443, SEMI.
• Either a GICSP, CISM, CISSP, or CISA certificate is considered a must.

Skills

Besides product security technical knowledge, excellent communication and collaboration skills are essential for this role. You take ownership and lead initiatives to results, take responsibility and act decisively whilst collaborating well with other teams, both technical and non-technical peers. You have strong stakeholder management skills and are able to build solid relationships of trust at different levels.

A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.

ASML brings together the most creative minds in science and technology to develop lithography machines that are key to producing faster, cheaper, more energy-efficient microchips. We design, develop, integrate, market and service these advanced machines, which enable our customers—the world’s leading chipmakers—to reduce the size and increase the functionality of their microchips, which in turn leads to smaller, more powerful consumer electronics.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.