Job Description

For our client ASML in Veldhoven we are looking for the Product Security Compliance, Risk, and Assurance Manager who will be responsible for assuring the business develops their products within ASML cyber and information security risk appetite by developing, maintaining, and improving product security risk management framework -including means and methods- in alignment with ASML risk appetite and business needs.

The Product Security Compliance, Risk, and Assurance Manager is responsible for:

• development, maintenance, and improvement of the product security compliance, risk, and assurance means and methods such as policies, standards, benchmarks, guidelines, assessment tooling, security processes, etc.;
• integration of product security means and methods in business/ product development processes;
• alignment of product security risk management framework with cross-product security reference architecture;
• execution of product security control and risk assessments and drive mitigation in product development processes;
• registering and maintaining product security risks and exceptions in respective R&D registers;
• product security risk and assurance process, risk register, exception management process, incident management process, and product security policy framework management process, including process improvements;
• leading and driving maturity improvements, like embedding compliance, risk, and assurance means and methods in GRC, security management, and service management tooling;
• setup and maintenance of product security KPI’s reporting;
• providing and contributing to security awareness trainings for specialized topics such as secure software development.