It cdo security officer

Werkgever:
ASML
Regio:
Veldhoven
 
Functieomschrijving

Introduction:

 The mission of the Security department at ASML is to safeguard company, customer, and supplier information and assets through efficient, risk-based measures across people, processes, and technology. We deliver essential programs and services to protect employees, knowledge, assets, and reputation. Recognizing the critical importance of security in today’s interconnected landscape, ASML’s Security team is dedicated to comprehensive protection of our knowledge, products, operations, and data.

Role and Responsibilities

 As a IT CDO Security Officers, you will join the Application Security team within the Technology Security Competence Center (TSCC) under the Risk & Business Assurance (R&BA) department. You will conduct security assessments of data-centric applications, support projects with security expertise, and drive security enhancements. This role requires collaboration with IT stakeholders and participation in Agile Release Trains (ARTs) as a Subject Matter Expert (SME). You will help protect ASML’s information, IP, and assets, ensuring alignment with security strategies, policies, and standards while recommending improvements as needed.

  • Perform security assessments of applications and systems, including design reviews, interviews, and testing.
  • Evaluate IT services (on-premise/cloud) for vulnerabilities using ASML’s processes and tools.
  • Translate assessment results into Information Security Specifications.
  • Maintain security registers with data from BIAs, ITSAs, penetration tests, and vulnerability scans.
  • Manage security findings and risk registers, ensuring timely follow-up. • Monitor application security controls and report on effectiveness.
  • Represent TSCC in IT projects and intake boards as needed.
  • Assess IT security exceptions and advise on acceptance/rejection with additional controls.

    • Education and experience:

  • 6+ years of experience in IT applications/security, risk, and compliance and Familiarity with Scaled Agile Framework (SAFe)
  • Expertise in Threat and Vulnerability Analysis (TVA) and IT security risk assessments.
  • Experience securing data-centric platforms, data pipelines (on-premise/cloud) & cloud security architecture and analytical tools.
  • Knowledge of data environments (e.g., Data Lakes, Hadoop, Spark, Python) and experience with SAP (HANA) security is a plus.
  • Proficiency in securing container environments and CI/CD pipelines (DevSecOps).
  • Hands-on experience in security assessments for Storage, Encryption, Network connectivity Access/IAM and Operations (e.g., hardening, patching)
  • Knowledge of security frameworks: NIST, ISF, ISO 27001/2/3/4.
  • Security/Technical/IT/informatics/Data Science background: bachelor’s or master’s degree (or equivalent experience)

    • Context of the position

    At ASML we invent, develop and manufacture world-leading high-tech lithography machines for our chip making customers. These tailor-made machines can image billions of structures in a few seconds with an accuracy of a few silicon atoms. Our headquarters are located in the heart of the Eindhoven region, also known as ‘Brainport’, Europe’s top tech hub.

    Inclusion and diversity

    ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

    Need to know more about applying for a job at ASML? Read our .