As a
Security risk expert - AI & emerging technology , you are responsible for executing security risk assessments and providing specialist security expertise for Artificial Intelligence (AI), Generative AI, Agentic AI, machine learning solutions, and other emerging technologies.
You will perform detailed security analysis, identify risks, evaluate controls, and develop practical recommendations to support informed risk-based decisions.
Location: Veldhoven, Netherlands
Team: Legal, Compliance, Risk and Assurance
Work experience: 2-3 years, 4-9 years
Educational background: Computer Science, Other technical backgrounds
Travel: No
Workplace type: Hybrid
Fulltime/parttime: Full time
Role and responsibilities As a Security risk expert - AI & emerging technology, you will operate as a senior individual contributor under the direction and prioritization of the Security risk manager.
In this function, you will join the first-line Corporate Sector Security Risk Management department. You will be part of the ASML Security community and work closely with sector Security Risk Management (SRM) teams, central security competence teams, AI and data governance, Information Technology, Privacy, Legal & Compliance, Internal Audit and business stakeholders.
In this role, you will:
Execute security risk assessments for AI and emerging technology initiatives, identifying threats, vulnerabilities, control gaps, and risk scenarios, and developing evidence-based findings and recommendations
Perform detailed analysis of proposed technologies and architectures, including threat modelling, attack-path analysis, and evaluation of security controls and mitigations
Assess AI-specific risks, including model compromise, prompt injection, data leakage, training data risks, supply chain vulnerabilities, agentic behaviour risks, and access control weaknesses
Support security-by-design reviews throughout the technology lifecycle, provide subject matter expertise to project teams, advise stakeholders on security-by-design principles, and support solution design reviews
Assist teams in understanding security expectations and requirements, validate implementation of agreed security controls, and review remediation activities and compensating measures
Support exception management, risk treatment planning, and risk acceptance discussions, providing technical security expertise and recommendations
Contribute to the improvement of assessment methodologies, security standards, control frameworks, procedures, and reporting mechanisms, share knowledge and mentor less experienced practitioners, and escalated material risks, novel technologies, risk appetite concerns, regulatory concerns, and significant disagreements or unresolved issues to the Security Risk Manager
Education and experience
Bachelor's or master's degree in a relevant discipline, e.g., business administration, information technology, cybersecurity, internal audit, IT management and/or data science & AI.
3-7 years professional experience with a focus on security, IT auditing, Information Security Management Systems (ISMS). AI specialization required
Relevant certifications such as CISSP, CISM or CRISC.
Experience with defining and running AI security baselines, assessments
Proven track record in Security at tactical level
Deep Knowledge of current security technologies, current and future developments for AI security, in-depth working knowledge of IT, Data and Information Risk/security frameworks and best practices, such as NIST Cyber security framework, ISF Standard of Good Practice for Information Security, IEC 62443, NIST SP 800 30 framework, NIS2 , ISO 27001/2 framework
Skills To be successful in this role, you will need:
Excellent influencing and interpersonal skills
Ability to further develop Security Risk and Control Management within ASML by building trusting and long-term relationships
Aability to overcome organizational resistance, as well as the ability to interact across all levels of the organization
Solid foundation in internal and external stakeholder management as well as ability to understand different perspectives, act upon those and prioritize needs
Self-starter mindset and ability to operate autonomously with little guidance
Being comfortable in starting up several initiatives at the same time without losing the overview and bigger picture
Other information A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.
#J-18808-Ljbffr
Security risk expert - AI & emerging technology in Veldhoven werkgever: ASML
ASML is een uitstekende werkgever die zich richt op het verbeteren van de digitale werknemerservaring voor meer dan 40.000 medewerkers wereldwijd. Met een sterke focus op innovatie en automatisering biedt ASML een dynamische werkomgeving waar medewerkers de kans krijgen om te groeien en bij te dragen aan baanbrekende technologieën. De cultuur is gericht op samenwerking en continue ontwikkeling, waardoor je niet alleen deel uitmaakt van een toonaangevend bedrijf, maar ook van een gemeenschap die waarde hecht aan jouw professionele groei.
