Security risk expert - AI & emerging technology

ASML Holding; Veldhoven; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

ASML Holding in the Netherlands is seeking a Security risk expert - AI & emerging technology to execute security risk assessments for AI and emerging tech, and provide specialist security expertise. You will perform detailed security analysis, identify risks, evaluate controls, and develop practical recommendations to support risk-based decisions.

You will join the first-line Corporate Sector Security Risk Management and work with SRM teams, AI governance, IT, Privacy, Legal & Compliance,

Qualifications

• Bachelor's or master's degree in a relevant discipline (e.g., cybersecurity, IT management).
• 3–7 years in security, IT auditing, ISMS; AI specialization.
• Certifications such as CISSP, CISM or CRISC.
• Experience with defining and running AI security baselines and assessments.
• Proven track record in security at tactical level.
• Deep knowledge of NIST, ISF, IEC 62443, NIST SP 800-30, NIS2, ISO 27001/2.

Responsibilities

• Execute security risk assessments for AI and emerging technologies, identify threats, gaps and risks with evidence-based findings.
• Analyze proposed technologies and architectures, perform threat modelling and evaluate security controls.
• Assess AI-specific risks: model compromise, prompt injection, data leakage, training data risks, supply chain and access control weaknesses.
• Support security-by-design reviews and provide SME input to project teams.
• Validate implementation of controls and review remediation activities.

Skills

Security risk

AI security

Threat modelling

Stakeholder management

Communication

Autonomy

Project coordination

Education

Bachelor's or master's degree

CISSP / CISM / CRISC

AI security baseline experience

Job description

Introduction to the job

As a Security risk expert - AI & emerging technology, you are responsible for executing security risk assessments and providing specialist security expertise for Artificial Intelligence (AI), Generative AI, Agentic AI, machine learning solutions, and other emerging technologies.

You will perform detailed security analysis, identify risks, evaluate controls, and develop practical recommendations to support informed risk-based decisions.

Role and responsibilities

As a Security risk expert - AI & emerging technology, you will operate as a senior individual contributor under the direction and prioritization of the Security risk manager.

In this function, you will join the first-line Corporate Sector Security Risk Management department. You will be part of the ASML Security community and work closely with sector Security Risk Management (SRM) teams, central security competence teams, AI and data governance, Information Technology, Privacy, Legal & Compliance, Internal Audit and business stakeholders.

In this role, you will:

• Execute security risk assessments for AI and emerging technology initiatives, identifying threats, vulnerabilities, control gaps, and risk scenarios, and developing evidence-based findings and recommendations
• Perform detailed analysis of proposed technologies and architectures, including threat modelling, attack-path analysis, and evaluation of security controls and mitigations
• Assess AI-specific risks, including model compromise, prompt injection, data leakage, training data risks, supply chain vulnerabilities, agentic behaviour risks, and access control weaknesses
• Support security-by-design reviews throughout the technology lifecycle, provide subject matter expertise to project teams, advise stakeholders on security-by-design principles, and support solution design reviews
• Assist teams in understanding security expectations and requirements, validate implementation of agreed security controls, and review remediation activities and compensating measures
• Support exception management, risk treatment planning, and risk acceptance discussions, providing technical security expertise and recommendations
• Contribute to the improvement of assessment methodologies, security standards, control frameworks, procedures, and reporting mechanisms, share knowledge and mentor less experienced practitioners, and elevate material risks, novel technologies, risk appetite concerns, regulatory concerns, and significant disagreements or unresolved issues to the Security Risk Manager

Education and experience

• Bachelor's or master's degree in a relevant discipline, e.g., business administration, information technology, cybersecurity, internal audit, IT management and/or data science & AI.
• 3-7 years professional experience with a focus on security, IT auditing, Information Security Management Systems (ISMS). AI specialization required
• Relevant certifications such as CISSP, CISM or CRISC.
• Experience with defining and running AI security baselines, assessments
• Proven track record in Security at tactical level
• Deep Knowledge of current security technologies, current and future developments for AI security, in-depth working knowledge of IT, Data and Information Risk/security frameworks and best practices, such as NIST Cyber security framework, ISF Standard of Good Practice for Information Security, IEC 62443, NIST SP 800 30 framework, NIS2 , ISO 27001/2 framework

Skills

To be successful in this role, you will need:

• Excellent influencing and interpersonal skills
• Ability to further develop Security Risk and Control Management within ASML by building trusting and long-term relationships
• Aability to overcome organizational resistance, as well as the ability to interact across all levels of the organization
• Solid foundation in internal and external stakeholder management as well as ability to understand different perspectives, act upon those and prioritize needs
• Self-starter mindset and ability to operate autonomously with little guidance
• Being comfortable in starting up several initiatives at the same time without losing the overview and bigger picture

Other information

A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions.