CS&S - Security Risk Manager - Linkou

ASML is the world’s leading supplier of photolithography systems for the semiconductor industry, manufacturing machines used for the production of integrated circuits. The company heavily relies on information, making the protection of confidential data critical and requiring continuous improvement.

At ASML, the Three Lines of Responsibility model is applied, with security capabilities organized centrally (second line) and security risk management embedded within each sector (first line).

To support several sectors in Taiwan, we are looking for a Security Risk Manager to ensure that information security risks remain within the organization’s risk appetite.

You will be part of a global Security Risk Management (SRM) team that

• Identifies and assesses information security risks in processes and applications
• Recommends mitigations to reduce risk to acceptable levels
• Supports risk owners in implementing mitigation actions
• Monitors and reports progress to stakeholders

The team is involved in programs, projects, and changes, assessing risks related to new or modified assets by defining security requirements and validating their implementation.

Creating awareness and educating stakeholders at all levels is a key responsibility. In addition, the team drives company-wide initiatives to strengthen and mature information security capabilities.

Role and Responsibilities

As a Security Risk Manager, you will be the first point of contact in Taiwan for assigned sectors on security-related topics. Your main responsibilities include:

• Handle local security incidents
• Provide security awareness training
• Execute application risk assessments
• Support new initiatives through risk scoping
• Define security requirements and validate proper implementation
• Create visibility into the local risk landscape of supported sectors
• Evaluate risks against the organization’s risk appetite
• Recommend, support, and guide risk owners in implementing mitigation actions
• Report to local and central stakeholders
• Actively participate in programs, projects, and changes
• Support the business during internal and external audits

By driving initiatives, identifying gaps, and supporting continuous improvement efforts, you will contribute to strengthening and maturing ASML’s security capabilities.

Education and Experience

To be successful in this role, you bring strong expertise in security risk management and experience working in complex environments, along with:

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field
• Minimum of 10 years’ experience in information security risk management
• Relevant certifications such as CISSP, CISM, or CRISC (strongly preferred)
• Experience with risk assessment, risk treatment, and control design
• Knowledge of information security standards and risk frameworks (e.g., ISO 27001, NIST)
• Experience protecting confidential information and intellectual property
• Familiarity with identity and access management and secure collaboration practices
• Experience working with stakeholders at different organizational levels and in cross-functional teams
• Ability to translate policies and procedures into operational activities

Skills

Working at the cutting edge of technology means continuously solving new challenges. You will collaborate across teams and functions in a dynamic environment. To be successful in this role, you bring:

• Strong communication and influencing skills
• Ability to analyze risks and translate them into business impact
• Ownership and ability to drive results in a complex environment
• Strong relationship-building skills and ability to influence without authority
• Strong analytical and problem-solving capabilities
• Ability to collaborate effectively across diverse teams
• Proactive mindset with a focus on continuous improvement
• Strategic thinking and strong risk prioritization skills
• Flexibility to adapt to changing priorities and organizational needs
• Passion for improving security awareness and maturity
• Strong verbal and written communication skills in English
• Confidence to speak up when risks, opportunities, or concerns are identified

Other Information

This position is based in Taiwan. You will be part of the Security Risk Management team within the Infrastructure, Architecture & Security department of the Customer Solutions & Support (CS&S) sector.

You will report to the Regional Group Lead based in Veldhoven. In addition to supporting CS&S, you will also support other global sectors such as IT, Corporate Real Estate, and several Corporate functions.

You will collaborate with the broader ASML security community across business sectors. ASML supports your professional growth through continuous learning opportunities and exposure to international teams and projects.

The position offers competitive compensation. Job grade will be determined based on qualifications, experience, and competencies.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions .