Security & Risk Expert

Introduction to the job

Responsible for the control and management of all control systems of CRE. The control systems support the ASML assets that enable buildings and production utilities to function properly, ensuring the automation of systems and PLC’s (Operational Technology). The Security, Risk and Information Manager manages the ‘’chain of demand’’ in order to monitor security activities for the regions and the related suppliers that are responsible for the day-to-day management and maintenance of the assets. Part of this role is to increase and build the knowledge on ICS security, implement the corporate ASML ICS policies and processes and build awareness and a security-oriented culture.

This position requires access to controlled technology, as defined in the Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

Role and Responsibilities•Implement the requirements that are relevant for security and compliance with regulations, policies and guidelines in the organization and outside•Implement and maintain the security control processes and procedures for the assets•Ensure security compliancy of the Industrial Control and Building Management system, including instruments like PLC, SCADA, historian, system security and Facility Monitoring System•Strategical contract management of security service providers•Set, implement and embed performance requirements for suppliers related to, or responsible for, the management and maintenance of OT assets•SPOC towards the regions and support them by implementing the processes and procedures•SPOC RBA for CRE•Develop the CRE Security & Risk roadmap in close collaboration with RBA•Translate the policies to practical processes for CRE•Develop the cost strategy and investment budget to achieve compliancy to corporate policies•Propose improvements and identify opportunities and present your recommendations and business case•Implement the Technical Response Team (TRT) and Cyber Defense Centre for CRE and its related suppliers, in compliancy with the corporate policies and processes•Delegated responsible for the ICS Asset Management services of CRE•Participate in the Technical Response Team (TRT) and Cyber Defense Centre as second line specialist•Conduct and derive analyses based on performance reporting in order to achieve the required level of compliancy and uptime (or maximum number of incompliances) •(co-)Develop audit procedures and planning•Bring in knowledge and align risks (with related mitigating actions) from insurance perspective and managing the accompanying evidence/documentation

Education and experience•Bachelor / Master degree in a relevant engineering discipline (Chemical, Process Engineering)•At least 3 – 5 years of relevant experience in an international high tech industrial environment•At least 2 – 3 years’ experience in the field of ICS or OT security while managing ICS or OT assets •Preference for documented training ISA/IEC 62443•Proficient in English

Skills

Core Competencies:

•Ownership & entrepreneurship•Drive results and decision-making processes•Strategic thinking & innovation•Communicative and advisory skills•Judgement and informed decision making

Functional Competencies:

•In-Depth analytical skills •Ensures accountability•Manage Complexity•Thinks and plans ahead

Diversity and inclusion

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that Diversity and inclusion is a driving force in the success of our company.

Other information•The ability to identify risks and develop mitigation strategies•Degree to which data is secure and protected from unauthorized access or use•Quality of data protection regulations and cybersecurity standards•TBD and physical security regulations•System availability, response time, and reliability•Reports on risk management activities and recommendations for improvements

EOE AA M/F/Veteran/Disability

Need to know more about applying for a job at ASML? Read our frequently asked questions.

Diversity and inclusion

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that Diversity and inclusion is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions.

Work Experience: 10-15 years

Travel: 25%

Education Level: Master

Employment Type: FULL_TIME

Team: Real Estate and Facilities Management

Technical Field: