Cybersecurity resilience and recovery expert

ASML; Veldhoven; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

ASML is seeking a Cybersecurity resilience and recovery expert for the 2nd line of security. You will strengthen cyber resilience and recovery capabilities through governance, standards, and assurance across ASML, collaborating with Security, BCM, IT, and business sectors.

Responsibilities include driving framework improvements, developing artefacts, advising senior stakeholders, and overseeing risk-based testing programs to ensure readiness and measurable resilience against cyber disruptions.

Qualifications

• Bachelor’s or Master’s degree in a relevant field such as business economics, risk management, information management, cybersecurity.
• Extensive experience in risk management, cyber resilience, BCM, or recovery in large organizations.
• Deep understanding of cyber resilience, business continuity, and recovery challenges.
• Experience influencing senior business and IT stakeholders.
• Understanding of standards such as NIS2, NIST CSF, ISO 27001, ISO 22301.
• Certifications in cybersecurity, risk management, resilience (e.g., CISM, CRISC, CISSP, CBCI) preferred.

Responsibilities

• Define and drive adoption of resilience and recovery framework improvements. Align requirements to standards and risk objectives.
• Develop and maintain enterprise-wide resilience artefacts, standards, and methodologies.
• Act as trusted advisor translating risk insights into actionable recommendations for business and IT.
• Provide independent 2nd line oversight, challenge, and assurance across sectors.
• Define and oversee risk-based resilience testing programs with data-driven insights.
• Coordinate cross-sector business continuity and recovery exercises for cyber disruptions.
• Drive strategic planning and maturity initiatives in cyber resilience, recovery, and continuity.
• Produce risk and assurance reporting for executives and sector leads.

Skills

Business insight

Strategic thinking

Data analysis

Stakeholder management

Risk communication

IT recovery concepts

Policy development

Excellent communication

Cross-sector collaboration

Independent working

Education

Bachelor's or Master's degree in relevant field

Information management

Cybersecurity

Job description

Introduction to the job

As a Cybersecurity resilience and recovery expert within the 2nd line of security at ASML, you play a key role in strengthening and overseeing the organization’s resilience against cyber threats. From a 2nd line perspective, you provide direction, challenge, independent oversight, and assurance to ensure that resilience and recovery capabilities are risk-based, consistent, and effective across the organization.

This role operates at the intersection of cyber resilience, enterprise risk management, and business continuity, with a strong focus on governance, standardization, and cross-sector alignment. You are also responsible for developing and maintaining enterprise-wide, cross-sector cyber resilience and recovery artefacts, such as recovery blueprints, strategies, and standardized recovery approaches, to ensure a coherent and scalable recovery capability across ASML.

You will work in multidisciplinary teams of security risk and continuity experts to support and strengthen ASML's cyber resilience, business continuity, and recovery capabilities. This position combines deep expertise in cyber security and recovery management with strong interpersonal capabilities, including, stakeholder engagement, and the ability to influence stakeholders across the organization.

• Location: Veldhoven, Netherlands
• Team: Legal, Compliance, Risk and Assurance
• Work experience: 4-9 years, 10-15 years
• Educational background: Computer Science
• Data Science
• Other technical backgrounds
• Travel: 10%
• Workplace type: Hybrid
• Fulltime/parttime: Full time

Role and responsibilities

As a Cybersecurity resilience and recovery expert, you bring deep expertise in risk management, cyber resilience and business continuity management, and use this expertise to strengthen and mature ASML's cyber resilience and recovery capabilities through governance, standards, oversight, and assurance. You are positioned within ASML’s CISO Security organization, and work closely with Security, Corporate Business Continuity Management, Risk colleagues and the ASML IT and business sectors to effectively organize for business continuity and recovery.

You ensure resilience and recovery requirements are embedded throughout the organization by driving framework improvements, capability maturity initiatives, risk-based decision making, and adoption across ASML. By continuously improving ASML's cyber resilience, recovery, and business continuity capabilities, you help ensure the organization can respond effectively and efficiently to cyber disruptions.

In this role, you will:

• Define and drive the adoption of ASML's Cyber resilience and recovery framework improvements to ensure organizational readiness. You will align resilience and recovery requirements to applicable standards, regulatory obligations, and enterprise risk objectives
• Develop and maintain enterprise-wide resilience and recovery artefacts, standards, and methodologies, such as dependency mapping approaches, recovery blueprints, testing methodologies, recovery requirements, and resilience and recovery strategies for cyber disruptions
• Act as a trusted advisor to business managers, translating risk and continuity insights into actionable recommendations and helping bridge the gap between business and IT
• Provide independent 2nd line oversight, challenge, and assurance to ensure the effectiveness and consistency of cyber resilience, BCM, and recovery capabilities across sectors
• Leverage data-driven insights, risk assessments, and business impact analyses to define and oversee risk-based resilience and recovery testing programs. Assess outcomes and provide assurance that recovery capabilities are tested, current, and capable of meeting defined recovery objectives
• Coordinate and evaluate complex cross-sector business continuity and recovery exercises for cyber disruptions, providing independent challenge, assurance, and recommendations for improvement
• Drive strategic planning and resilience capability maturity initiatives in the cyber resilience, recovery and continuity space across the organization
• Produce risk, resilience, and assurance reporting and metrics for executive stakeholders and sector leads

Education and experience

• A Bachelor’s or Master’s degree in a relevant field such as business economics, risk management, information management, cybersecurity, or equivalent
• Extensive experience in risk management, cyber resilience, business continuity, or recovery management, preferably within a large and complex organization
• A deep understanding of cyber resilience, business continuity, and recovery challenges, with a proven ability to advise, coach, and collaborate effectively
• Experience engaging, influencing, and providing credible challenge to senior business and IT stakeholders
• Understanding of relevant cyber resilience, business continuity, and security standards, frameworks, and regulations, such as NIS2, NIST CSF, ISO 27001, and ISO 22301
• Relevant certifications in cybersecurity, risk management, and resilience, such as CISM, CRISC, CISSP, CBCI, or equivalent, are preferred

Skills

To thrive in this job, you’ll need the following skills:

• Solid business insight, strategic thinking, and data analysis capabilities
• Competency in stakeholder management and risk communication
• Understanding of IT recovery mechanisms, disaster recovery, cyber resilience, and business continuity concepts
• Ability to influence and coach across levels and sectors
• Proficiency in policy development and the application of cyber resilience, recovery, and business continuity frameworks
• Excellent verbal and written communication skills
• Strong collaboration and teamwork skills
• Ability to adapt approaches based on organization maturity
• Ability to manage multiple priorities and work under pressure
• Ability to work independently and manage large, complex tasks
• Decisive personality, taking responsibility
• Strong presentation and training skills

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.