Security Lead

Join to apply for the Country Security Lead US role at ASML
.

Get AI-powered advice on this job and more exclusive features.

This range is provided by ASML. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

$/yr - $/yr

The Country Security Lead (CSL) for ASML US acts as the extension of the ASML CISO and protects and secures ASML’s Intellectual property, digital assets and technologies in US, in line with ASML’s Risk Appetite. The CSL for US develops and implements comprehensive security strategies for US, in alignment with the US Virtual Security Team (VST), to safeguard sensitive data against cyber and physical threats and ensure compliance with relevant regulations.

The CSL forms and drives the VST consisting of US’s first and second line security representatives and other relevant stakeholders, to improve the level of security maturity in US by coordinating in‑country VST security issues and initiatives to remove in‑country security silos, overlaps and gaps. While ASML in the US is actually a combination of four businesses, the CSL serves as the primary contact for the US business Line Managers (BLMs) and briefs the US BLMs on in‑country risks and initiatives.

Provides ASML CISO with comprehensive status of US 1st and 2nd line security performance against stated security objectives and standards.

• Overall
  : responsible for running the US security organization, driving the development and delivery of second line security services in US Challenge and verifying the adequate performance of security controls in US against ASML and US risk appetite and as executed by the first line of responsibility in the sectors in US.
• Strategy
  :
  Define and execute the central security strategy as determined by the CISO and adding country specific aspects to it to improve security maturity.
• Risk management
  :
  Collaboration with the 1st line sector SRMs to identify, assess and mitigate security risks, overseeing and reporting via the US Virtual Security Team (VST). Identify improvement opportunities of 1st line sector SRMs’ processes and activities and provide necessary support for improvements.
• Incident response
  : oversee the development of country specific response plans, assuring the timely and thorough handling of security incidents under coordination of the central Security Operations Centre.
• Compliance oversight
  : ensuring adherence to centrally determined or country specific laws and regulations related to information security.
• Team leadership & capability building
  : (virtually) lead the team of security managers in US, and assure the capabilities as required by the central Second Line Security, Intelligence Fusion Centre and Security Operations Center teams are developed and maintained, as well as organizing security activities related to risk culture and awareness initiatives.
• Stakeholder engagement
  :
  Provide regular updates, in alignment with the local first line sector Security Risk Managers of the VST, to senior management in US on the status of information security in US and the central information security program.
• Security Awareness Training
  :
  Partner with the RBA&S Cultural and Transformation team to meet in‑country awareness training objectives.
• Other duties as assigned.

• Bachelor's degree in Computer Science, Information Assurance or related field. Master's degree preferred.
• Minimum of 10 years Information Security experience.
• Minimum of 5 years’ IT working experience.
• Enterprise Security risk expertise: Strong understanding of risk frameworks, strategic security risk mgt, policy management, and business continuity management.
• Security Risk mitigation & advisory: Ability to identify, assess, manage and monitor security risk mitigation strategies at a country level.
• Business acumen: Deep understanding of ASML business context, priorities, processes, and dependencies in US or related to US.
• Security leadership: Strong knowledge and leadership in Security Risk and Compliance, including regulatory requirements, governance, security control frameworks and risk management.
• Stakeholder…