Security risk expert - AI & emerging technology

ASML; Veldhoven; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

ASML is seeking a Security risk expert for AI and emerging technologies in Veldhoven, NL. You will perform security assessments, threat modelling, and analysis of AI solutions, working within a cross-functional team including Legal, Compliance, and IT.

The role requires 3–7 years in security, ISMS, and an AI specialization, with a hybrid work setup. You will support security-by-design reviews, validate control implementations, and mentor junior practitioners while contributing to risk management

Qualifications

• Bachelor's or Master's in a relevant discipline (CS/IT/Cybersecurity)
• 3–7 years of security, IT auditing or ISMS experience; AI focus preferred
• Certifications such as CISSP, CISM or CRISC are desirable
• Experience defining and running AI security baselines and assessments

Responsibilities

• Execute AI and emerging technology security risk assessments and provide findings
• Analyze technologies with threat modelling and control evaluations
• Assess AI risks including model compromise and data leakage
• Support security-by-design reviews and project teams with security guidance
• Review remediation activities and assist risk treatment discussions
• Escalate material risks and contribute to security methodology improvements

Skills

Influencing skills

Stakeholder mgmt

Autonomous working

Multi initiative mgmt

Cross-functional collab

Threat modelling

Security assessments

Education

CS/IT/Cybersecurity

Job description

As a Security risk expert - AI & emerging technology, you are responsible for executing security risk assessments and providing specialist security expertise for Artificial Intelligence (AI), Generative AI, Agentic AI, machine learning solutions, and other emerging technologies.

You will perform detailed security analysis, identify risks, evaluate controls, and develop practical recommendations to support informed risk-based decisions.

• Location: Veldhoven, Netherlands
• Team: Legal, Compliance, Risk and Assurance
• Work experience: 2-3 years, 4-9 years
• Educational background: Computer Science, Other technical backgrounds
• Travel: No
• Workplace type: Hybrid
• Fulltime/parttime: Full time

Role and responsibilities

As a Security risk expert - AI & emerging technology, you will operate as a senior individual contributor under the direction and prioritization of the Security risk manager.

In this function, you will join the first-line Corporate Sector Security Risk Management department. You will be part of the ASML Security community and work closely with sector Security Risk Management (SRM) teams, central security competence teams, AI and data governance, Information Technology, Privacy, Legal & Compliance, Internal Audit and business stakeholders.

In this role, you will:

• Execute security risk assessments for AI and emerging technology initiatives, identifying threats, vulnerabilities, control gaps, and risk scenarios, and developing evidence-based findings and recommendations
• Perform detailed analysis of proposed technologies and architectures, including threat modelling, attack-path analysis, and evaluation of security controls and mitigations
• Assess AI-specific risks, including model compromise, prompt injection, data leakage, training data risks, supply chain vulnerabilities, agentic behaviour risks, and access control weaknesses
• Support security-by-design reviews throughout the technology lifecycle, provide subject matter expertise to project teams, advise stakeholders on security-by-design principles, and support solution design reviews
• Assist teams in understanding security expectations and requirements, validate implementation of agreed security controls, and review remediation activities and compensating measures
• Support exception management, risk treatment planning, and risk acceptance discussions, providing technical security expertise and recommendations
• Contribute to the improvement of assessment methodologies, security standards, control frameworks, procedures, and reporting mechanisms, share knowledge and mentor less experienced practitioners, and escalated material risks, novel technologies, risk appetite concerns, regulatory concerns, and significant disagreements or unresolved issues to the Security Risk Manager

Education and experience

• Bachelor's or master's degree in a relevant discipline, e.g., business administration, information technology, cybersecurity, internal audit, IT management and/or data science & AI.
• 3-7 years professional experience with a focus on security, IT auditing, Information Security Management Systems (ISMS). AI specialization required
• Relevant certifications such as CISSP, CISM or CRISC.
• Experience with defining and running AI security baselines, assessments
• Proven track record in Security at tactical level
• Deep Knowledge of current security technologies, current and future developments for AI security, in-depth working knowledge of IT, Data and Information Risk/security frameworks and best practices, such as NIST Cyber security framework, ISF Standard of Good Practice for Information Security, IEC 62443, NIST SP 800 30 framework, NIS2 , ISO 27001/2 framework

Skills

To be successful in this role, you will need:

• Excellent influencing and interpersonal skills
• Ability to further develop Security Risk and Control Management within ASML by building trusting and long-term relationships
• Aability to overcome organizational resistance, as well as the ability to interact across all levels of the organization
• Solid foundation in internal and external stakeholder management as well as ability to understand different perspectives, act upon those and prioritize needs
• Self-starter mindset and ability to operate autonomously with little guidance
• Being comfortable in starting up several initiatives at the same time without losing the overview and bigger picture

Other information

A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.