Security specialist - identity access management governance & risk

asml; Veldhoven; On-site; EUR 70,000 - 100,000; Full time

Job summary

ASML is seeking a Security Specialist to join the second line Identity Security team and mature IAM governance across the organization. You will provide independent oversight, assurance, and monitoring to ensure IAM controls, standards, governance processes, and risk management practices are effectively implemented and improved.

The role covers governance, compliance, access governance, identity data governance, and emerging identity security domains such as non-human identities and AI agents,

Qualifications

• 3+ years of IAM, information security, governance, risk, or audit experience.
• Understanding of Identity Lifecycle Management, PAM, SoD, access reviews.
• Experience with IAM governance programs and audit support preferred.

Responsibilities

• Support IAM governance frameworks, standards, and control objectives.
• Maintain traceability between IAM controls and requirements.
• Assist control testing, evidence collection, and audit readiness.
• Contribute to risk assessments and remediation tracking.
• Support governance forums, reporting, and management reviews.
• Assist with access governance and SoD/policy compliance.

Skills

Data analysis

Stakeholder management

Communication

Critical thinking

Attention to detail

Independent work

Job description

Introduction to the job

As a Security specialist within the second line Identity Security team, you will support the maturation of Identity & Access Management (IAM) governance across the organization.

Operating within the second line, you will provide independent oversight, assurance, monitoring to ensure IAM controls, standards, governance processes, and risk management practices are effectively implemented and continuously improved. You will work across multiple IAM capability areas including governance, compliance, access governance, identity data governance, access visibility, resilience, and emerging identity security domains such as non-human identities and AI agents.

This role is suited for professionals who enjoy understanding how IAM capabilities operate in practice and using that knowledge to identify risks, improve governance effectiveness, and strengthen control frameworks.

Role and responsibilities

Governance, controls & assurance

• Support the implementation, monitoring, and continuous improvement of IAM governance frameworks, standards, and control objectives
• Support the maintenance and continuous improvement of the IAM control framework
• Maintain traceability between IAM controls and applicable regulatory, audit, business, and internal policy requirements
• Support control testing, evidence collection, assurance activities, and audit readiness efforts
• Assess governance effectiveness of IAM processes and support continuous improvement initiatives across core IAM capabilities
• Track control deficiencies, findings, recommendations, and remediation activities
• Support governance forums, reporting processes, and management reviews

Risk management

• Perform IAM risk assessments and thematic risk reviews
• Support risk identification, analysis, treatment, and acceptance activities
• Maintain traceability between IAM risks, controls, capabilities, and requirements
• Evaluate risks arising from new technologies, business initiatives, and evolving IAM capabilities
• Provide risk-based challenge and recommendations to stakeholders
• Support the development and maintenance of risk reporting and management insights

Compliance & maturity

• Support IAM maturity assessments and continuous improvement initiatives
• Monitor and report on IAM control effectiveness and governance performance
• Maintain governance documentation, evidence repositories, and compliance records
• Support internal and external audits and regulatory assessments.
• Track and validate remediation activities resulting from audit findings, risk assessments, and control reviews

Access governance & identity security

• Support governance activities relating Segregation of Duties (SoD) and Privileged access governance
• Assess governance and control effectiveness across IAM processes and capabilities
• Review IAM process outputs and identify governance weaknesses, control gaps, and improvement opportunities
• Contribute to access risk reporting and governance oversight activities

Education and experience

3+ years of relevant experience in Identity & Access Management (IAM), information security, cybersecurity governance, risk management, compliance, internal or external Audit or related disciplines

Demonstrated understanding of Identity Lifecycle Management (joiner-mover-leaver), access governance, authentication and authorization, Privileged Access Management (PAM), access reviews & certifications, Segregation of Duties (SoD), security controls and compliance frameworks, risk management principles

Preferred experience with one or more of the following: IAM governance programs, internal controls and audit support, control testing and assurance activities, metrics, reporting, and governance dashboards, regulatory compliance programs

Skills

• Data analysis and reporting and documentation and traceability management
• Excellent critical thinking and analytical problem solving skills
• Strong stakeholder management skills
• Ability to communicate effectively and influence as well as collaborative attitude
• Continuous improvement mindset
• Attention to detail and prioritization skills
• Ability to work independently

Other information

Identity has become the primary control plane for enterprise security. As the organization continues to mature its IAM capabilities across governance, access governance, visibility, resilience, analytics, non-human identities, and AI identity security, Security Specialists play a critical role in ensuring these capabilities remain effective, measurable, compliant, and aligned with risk management objectives.

This position offers the opportunity to influence how identity security is governed across the enterprise while developing deep expertise in one of the fastest-growing areas of cybersecurity.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the comp