Security Risk Manager

Introduction to the job

ASML US brings together the brightest minds in science and technology to develop world-leading lithography systems that are indispensable to advanced semiconductor manufacturing. Operating in a highly regulated global environment, ASML's R&D community develops and handles sensitive intellectual property, controlled technologies, and cross-border collaborations.

As the R&D Security Risk Manager, you play a critical role in protecting ASML's R&D information assets and ensuring information security and export compliance risks remain within the company's risk appetite. Serving as the primary R&D point of contact for Security Risk Management, you will partner closely with R&D teams, IT, Legal, Export Control, Customer Support, and global security competence centers to drive informed, risk-conscious decision-making and secure innovation.

Role and responsibilities

• Perform risk scoping activities (GRC intake) for new business-led projects and initiatives, leading architectural design reviews, recommending mitigating controls, and driving their implementation
• Routinely collaborate with other security disciplines across the security community to assess and address risks related to R&D information assets
• Build and maintain a strong reference network, leveraging both personal connections and broader organizational networks to generate support and engage stakeholders across the R&D organization
• Ensure compliance with all security policies and standards, including regulations focused on export controlled technology
• Perform information security risk assessments and coordinate penetration testing for existing applications, platforms, and processes. Register identified risks, recommend mitigating controls, and drive their implementation
• Actively contribute to global security initiatives and projects, representing U.S. regional requirements and perspectives to ensure successful implementation and adoption
• Support the development and delivery of security awareness initiatives to embed secure behaviors and a strong security culture throughout the R&D organization

Education

• Bachelor’s degree in Information Security, Cybersecurity/Risk, Audit or  combination of education and/or equivalent related work experience
• Master’s degree is a plus

Experience

• Minimum of 5 years of relevant experience in information security risk management
• A strong background in IT or proven relevant experience in the IT security domain
• Proven experience with ISO27001/NIST frameworks, industry standards and best practices
• Preferred security certifications include (but not required) are CRISC, CISSP/CISM or CISA
• Experience working in matrixed and multidisciplinary environments, effectively collaborating with globally distributed teams across multiple regions and time zones
• General understanding of networking, communication protocols, firewalls, operating systems, and foundational information security principles
• Experience working with IT and R&D organizations and an understanding of DevOps practices and environments is preferred
• Experience with cloud technologies, preferably Microsoft Azure, and cloud security principles
• Experience with AI models, agents, and related security, governance, and technology standards
  

Skills

• Results-driven, demonstrating ownership and accountability while following through on assignments with minimal supervision
• Strong communication and interpersonal skills, with the ability to influence, negotiate, and build consensus among diverse stakeholders
• Ability to build and maintain effective working relationships across the organization, from engineers and project teams to senior management and key business stakeholders.
• Strong analytical and problem-solving skills, with a high attention to detail
• Ability to understand and translate information security threats and vulnerabilities into meaningful business risks and actionable recommendations for stakeholders
• Ability to work effectively both independently and within a team environment, demonstrating flexibility, creativity, and commitment in a dynamic organization
• Ability to think strategically and contribute to long-term improvements in culture, behaviors, business processes, and tooling, while delivering pragmatic, fit-for-purpose solutions that provide immediate value
• Continuous learner with a passion for staying current on emerging security threats, industry trends, and evolving technologies

Other information

This position is located on-site in San Jose, CA.  It requires onsite presence to attend in-person work-related events, trainings and meetings to further ensure teamwork, collaboration and innovation.

A flexible workplace arrangement may be available to employees working in roles conducive to remote work (up to two days a week). 

May require domestic and/or international travel, dependent on business needs – up to 10%.

#LI-AS1

#LI-Hybrid

The current base annual salary range for this role is currently:

Pay scales are determined by role, level, location and alignment with market data. Individual pay is determined through interviews and an assessment of several factors that that are unique to each candidate, including but not limited to job-related skills, relevant education and experience, certifications, abilities of the candidate and pay relative to other team members.

The Company offers employees and their families, medical, dental, vision, and basic life insurance. Employees are able to participate in the Company’s 401k plan. Employees will also receive eight (8) hours of vacation leave every month and (13) paid holidays throughout the calendar year. For more information, please contact the Recruiter or click on this link Compensation & Benefits in the US.

All new ASML jobs have a minimum application deadline of 10 days.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions.

ASML provides reasonable accommodations to applicants for ASML employment and ASML employees with disabilities.  An accommodation is a change in work rules, facilities, or conditions which enable an individual with a disability to apply for a job, perform the essential functions of a job, and/or enjoy equal access to the benefits and privileges of employment. If you are in need of an accommodation to complete an application, participate in an interview, or otherwise participate in the employee pre-selection process, please send an email to [email protected] to initiate the company’s reasonable accommodation process.

Please note: This email address is solely intended to provide a method for applicants to initiate ASML’s process to request accommodation(s). Any recruitment questions should be directed to the designated Talent Acquisition member for the position.