Senior Manager ICS/OT Security

ASML leads the worldwide development, production and sales of high-end lithography systems for the semiconductor industry. In short, we make the machines that make computer chips, or integrated circuits. We build some of the most amazing, complex machines that you will ever see – and the software to run them – to develop smaller, faster and still more affordable chips. We aim to unlock the potential of people and society by pushing technology to new limits. It is because of our machines that the world’s technology has steadily evolved. ASML employs more than 40.000 employees, has offices in US, Asia and Europe and is headquartered in Veldhoven, the Netherlands.

Are you keen to take up a new challenge in a global fast-growing company? If security is part of your DNA, we are looking for you!

ASML RBA Security, one of the departments in Risk and Business Assurance (RBA), enables ASML to control the production of information and assets of our company, our customers and suppliers by applying risk-based measures for people, process and technology, supporting the business goals. We strive to be a critical support function to our stakeholders, providing risk-based programs, services and systems to protect our employees, knowledge, assets and reputation. Recognizing the concerns of our customers and partners the critical role of security plays across today's interconnected digital ecosystems, the ASML RBA Security team is committed to the deployment of comprehensive security plans that ensure the safety of our knowledge, products, business and personal data. ASML is able to achieve its business goals by having security embedded within the DNA of our people, its processes and technologies.

The Senior Manager OT/ICS Security in RBA Security is a challenging position in a dynamic environment with a direct strategical impact on ASML as it relates to a key risk domain in security.

Introduction to the job 

As the Senior Manager OT/ICS Security you work together with a team of security professionals and the ASML Sector Security Representatives to drive the OT/ICS capability and verify the controls  performance in the OT/ICS domain across ASML. You will act in close corporation with RBA’s Sector Facing teams (i.e. for CRE).

In this role you provide secure design, development and maintenance of ASML’s operational technologies and industrial control systems by ensuring OT Security capabilities are defined, implemented and monitored.

Role and responsibilities

• Support, advise and challenge the RBA Sector Facing teams by delivering OT/ICS Security expertise.

• Bring an outside-in perspective on OT/ICS security and translate this into practical opportunities in ASML.

• Support, advice and challenge the definition, implementation and monitoring of OT/ICS Security capabilities (Solution Architecture, System Security, Network Security, Patch and Vulnerability Management, Asset Management, External Data Carriers Security, Anti-Malware monitoring, Remote Access Security).

• Determine the OT/ICS Security Risk Control Strategy with the relevant stakeholders and monitor and support its implementation in the first line.

• Identify, define, prescribe & architect OT/ICS security controls, security building blocks and design patterns as part of the internal control framework.

• Responsible for the verification on the performance of Security controls for OT/ICS Security. Advise on the introduction of initiatives for the core functions for OT/ICS security (such as Industrial Control Systems, SCADA, Industrial IoT, Network, Server& End Point security, OT/ICS network architecture, etc.).

• Provide subject matter expertise to define ASML’s OT/ICS Security policies, standards and procedures and verify compliance.

• Support OT/ICS Security awareness by providing guidance and training.

• Build trusted relationships with OT/ICS stakeholders (also within 3rd parties) and provide them with insights to influence adoption of and compliance with OT/ICS security controls.

• Monitor technology trends in the OT/ICS security domain.

• Perform security assessments and monitor and report on OT/ICS security health and risks.

Education and experience

• Master’s degree working and thinking level.

• 8+ years of management experience, preferably in a multinational corporate security environment.

• Proven experience with control systems risk assessments.

• Minimum of 5 years in (Agile) Project Management in complex high tech business environment.

• Experience in leading a team in a complex, multi-disciplinary environment.

• Proven track record in Security at strategic and tactical level is considered a plus.

Skills

Working at the cutting edge of tech, you’ll always have new challenges and new problems to solve – and working together is the only way to do that. You won’t work in a silo. Instead, you’ll be part of a creative, dynamic work environment where you’ll collaborate with supportive colleagues. There is always space for creative and unique points of view. You’ll have the flexibility and trust to choose how best to tackle tasks and solve problems.

The Senior Manager should demonstrate competence in some or all the following:

• Take responsibility and act decisively.

• Show critical sense and manage criticism.

• Strong stakeholder management and build solid relationships of trust at different levels.

• Organize & Delegate.

• Lead projects to results.

• Excellent communication skills and proficiency in the English language.

• Knowledge of security frameworks like ISO 27001, NIST, SANS, ISA / IEC 62443k and Compliance.

Diversity & Inclusion

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that diversity and inclusion is a driving force in the success of our company.

Other information

• Knowledge of project management (Prince2 / PMBoK/ APMP / MSP).

• You are in possession of a valid work permit for The Netherlands.

• Either a GICSP, CISM, CISSP, or CISA certificate: considered as a must.