Business Compliance Manager

Introduction to the job

The mission of this role is also to lead the design, implementation, and continuous improvement of risk methodologies, frameworks, and supporting tools for San Diego and Korea Manufacturing. The Business Compliance manager will build and maintain a strong and resilient business continuity management system that supports the organization’s goals and objectives, builds stakeholder trust, and ensures business continuity in the context of a continuously evolving threat landscape.

The role oversees Risk Management, Business Continuity and IT Security, in alignment with ASML’s Risk, Business Assurance, and Security (RBA&S) department and Global Manufacturing Means and Methods.

Role and Responsibilities

The Business Compliance Manager is responsible for Manufacturing Risk and Continuity Compliance and IT Security for San Diego and Korea Manufacturing. In this role, you will work in multidisciplinary teams of risk and continuity experts to support and strengthen ASML’s business continuity, crisis management practices and implementation and maintenance of Information Security Management System to meet ASML IT security requirements.

Organizational Risk Management

• Assist Country RBA Lead to execute the regular country risk landscape update process. Able to connect the risk development to the country risk priorities and identify / discuss the relevant risk mitigation activities proposal with senior stakeholders.
• Monitor risk mitigation activities and ensure that 1st line is ‘in control'.

Deliver of domain and country RBA objectives

• Be responsible for delivery of prioritized commitments of primary RBA domains such as regulatory compliance risk/control support, internal control effectiveness testing, self-audit / pre-audit assessment, root cause analysis, and risk culture initiatives.
• Manage the preparation, execution and follow up of each project. Collaborate with cross functional and multi-disciplinary teams on execution, alignment, and maintain oversight on overall risk exposureand business changes.

Stakeholder Management

• Be able to present and communicate well with stakeholders who are in higher in seniority, finding out their needs/issues/concerns, and reacting to these to create mutually supportive working relationships.
• Acts as a trusted business partner and manages relationships with stakeholders, while taking guidance from senior colleagues.

Data Collection and Analysis

• Use data from a wide range of sources to analyze key themes and identify possible impacts on the business.

Recommendations

• Challenge management and provide constructive recommendations to achieve business objectives.

Needs Assessment

• Uncover issues or needs, identifying potential causes and key stakeholders.

Building capability

• Acts as mentor and examiner for more junior colleagues.
• More specifically you will:
• Define and implement ASML’s Business Continuity Management (BCM) framework, guidelines, procedures, tooling, to ensure organizational readiness.
• Use data-driven insights, risk assessments, and business impact analyses, to identify and evaluate key risks and vulnerabilities.
• Lead complex business continuity projects and programs involving high-stakes alignment across multiple business sectors.
• Act as a trusted advisor to business managers, translating risk and continuity insights into actionable plans or recommendations.
• Support sector management by challenging risk owners and verifying the effectiveness of controls.
• Lead the preparation of crisis management runbooks with San Diego and Korea Manufacturing crisis management teams such as Ransomware and natural disaster runbooks.
• Manage Business Continuity Assessments of Manufacturing sites executed by ASML Risk & Business Assurance office (RBA)
• Develop and monitor business continuity policies and frameworks to align with business goals.
• Guide strategic planning and capability-building initiatives in the continuity space.
• Assure compliance to Information Security Management System International Standard (ISO 27001)
• Manage ISO 27001 external audits executed by BSI (British Standard Institute)
• Leads the Functional Domain Owner (FDO) management activity and assures Business managed…