CS Security Specialist

Introduction to the job

For the Customer Support sector in ASML we are looking for an Information Security Specialist to further strengthen our Customer Support Security Risk Management (SRM) team ability to manage various information security activities.
The SRM team identifies and assesses potential information security risks in processes and applications, recommends mitigations to reduce the risks to an acceptable level and helps the risk owners drive the implementation. The team is involved in all programs, projects and changes to assess the information security risks of the assets that are being introduced or changed by providing security requirements and validating adequate implementation. Creating awareness and educating the sector on all levels is a key responsibility for the team as well as executing operational security activities.
ASML has implemented Identity & Access Management throughout her worldwide locations. For that purpose we are searching for a team player that will (functionally) manage the Identity & Access management process for Customer Support and enable ASML to reach her vision to realize world class IAM solutions.

Role and responsibilities

As Security Specialist you are responsible to support and control complex access management areas and provide guidance and direction to end-users. You also ensure that information security risks do not exceed the organization risk appetite.

Your responsibilities include

• Organize and perform the intake for new applications to be on-boarded to ASML IAM solution and define the relevant access criteria.
• Help clarify business and functional requirements to the IAM development team.
• Advise the application custodians on authorization clean-up and role model design.
• Provide support to end users, create and maintain manuals and support users acceptance tests.
• Monitor the Joiner, Mover, Leaver and Access Request processes in the sector and monitor adherence to the IAM procedures and report to owners on deviations.
• Manage changes to sector specific rules & roles that provide access to the end users.
• Inform and advice on IAM solution directions to application custodians in the sector.
• Handle sector specific access requests in the IAM portal, IAM non-standard changes and assist in complex 2nd line incidents.
• Provide input on a business role model to be used for job functions and/or departments (across applications).
• Monitor the IAM process in the sector and monitor adherence to the IAM procedures.
• Translate sector access changes towards IT change requests and monitor follow up.
• Give direction to end users with respect to access requests.
• Inform and advice on IAM solution directions to application owners in the sector.
• Operational security activities like exception handlings.
• Support the sector with the classification, ownership and information governance access rules on information.
• Identify and provide advice on operational and tactical information security process within the sector.
• Act as a security specialist in the areas of security awareness, user access, incidents & cloud.
• Register, investigate and report on information security incidents.
• Perform an intake on new projects and changes, determine the information security impact and provide policies, guidance and advice to stimulate ‘security by design’; depending on the nature of the project more or less involvement will be required throughout the project.

Education and experience

• Bachelor degree or equivalent combination of education and experience in information (security) systems (e.g. in a technical area, business administration, industrial engineering).
• PRE, Information security risk management qualifications like CISM, CIAM, CAMS or CISSP.
• Minimum of 2 years of relevant experience in information security risk management and/or identity and access management knowledge.
• Knowledge and experience with access management solutions are preferred.
• Knowledge of security standards and frameworks, especially ISO27001/2 and NIST.
• Ability to recommend mitigating measures using a combination of IT and non-IT measures.
• Ability to manage the implementation of measures or security capabilities within the sector.

Skills

Working at the cutting edge of tech, you’ll always have new challenges and new problems to solve – and working together is the only way to do that. You won’t work in a silo. Instead, you’ll be part of a creative, dynamic work environment where you’ll collaborate with supportive colleagues. There is always space for creative and unique points of view. You’ll have the flexibility and trust to choose how best to tackle tasks and solve problems.
To thrive in this job, you’ll need the following skills:

• Relationship builder; able to create and maintain a trusted network on all levels.
• Good communication, influencing and negotiating skills.
• Able to convince, inspire and motivate people.
• Strong analytical skills.
• Pro-active and self-motivated with the proven ability to drive results.
• Pragmatic, hands-on mentality, motivated by realizing goals rather than personal acknowledgement.
• Able to give direction, plan and prioritize.
• Creative when handling problems.
• Flexible, adapting to company culture and individual behavior.
• Fluent in English (written and verbal).
• Sensitivity in a complex and dynamic environment.
• Dealing with resistance, overcomes barriers for change and engages others to take action

Diversity & Inclusion

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that diversity and inclusion is a driving force in the success of our company.

Other information

The sector Customer Support (CS) is responsible for the maintenance, repair and continuous improvement of ASML systems at customer locations, as well as transferring all relevant knowledge and supporting the customer in the use of these systems in their production process.

You will be based in Veldhoven, the Netherlands. You will be a member of the ASML Security community; working closely together with the security risk management teams in other sectors and the central security competence teams.

Need to know more about applying for a job at ASML? Read our frequently asked questions.