Security specialist – identity access management governance & risk

ASML; Veldhoven; On-site; EUR 70,000 - 105,000; Full time

Job summary

ASML is seeking a Security specialist in IAM governance & risk to mature Identity & Access Management governance across the organization. The role provides independent oversight, assurance, monitoring to ensure IAM controls and risk practices are effectively implemented and improved.

You will work across governance, risk, compliance, access governance, lineage data governance, and emerging identity security domains.

Qualifications

• 3+ years of IAM, information security, governance, risk management, or audit experience.
• Understanding of Identity Lifecycle Management, access governance, PAM, SoD and security controls.
• Preferred experience with IAM governance programs, controls, audits, reporting, and compliance programs.

Responsibilities

• Support IAM governance frameworks, standards, and control objectives.
• Assist risk assessments, risk reporting, and management insights.
• Track deficiencies, findings, and remediation activities across IAM controls.
• Support SoD and Privileged access governance and governance reporting.

Skills

IAM governance

Risk management

Data analysis

Stakeholder management

Job description

Introduction to the job

As a Security specialist within the second line Identity Security team, you will support the maturation of Identity & Access Management (IAM) governance across the organization.

Introduction to the job

As a Security specialist within the second line Identity Security team, you will support the maturation of Identity & Access Management (IAM) governance across the organization. Operating within the second line, you will provide independent oversight, assurance, monitoring to ensure IAM controls, standards, governance processes, and risk management practices are effectively implemented and continuously improved. You will work across multiple IAM capability areas including governance, compliance, access governance, identity data governance, access visibility, resilience, and emerging identity security domains such as non-human identities and AI agents. This role is suited for professionals who enjoy understanding how IAM capabilities operate in practice and using that knowledge to identify risks, improve governance effectiveness, and strengthen control frameworks.

Role and responsibilities

As a Security specialist - IAM governance & risk, you will be responsible for the following areas:

Governance, controls & assurance

• Support the implementation, monitoring, and continuous improvement of IAM governance frameworks, standards, and control objectives
• Support the maintenance and continuous improvement of the IAM control framework
• Maintain traceability between IAM controls and applicable regulatory, audit, business, and internal policy requirements
• Support control testing, evidence collection, assurance activities, and audit readiness efforts
• Assess governance effectiveness of IAM processes and support continuous improvement initiatives across core IAM capabilities
• Track control deficiencies, findings, recommendations, and remediation activities
• Support governance forums, reporting processes, and management reviews

Risk management

• Perform IAM risk assessments and thematic risk reviews
• Support risk identification, analysis, treatment, and acceptance activities
• Maintain traceability between IAM risks, controls, capabilities, and requirements
• Evaluate risks arising from new technologies, business initiatives, and evolving IAM capabilities
• Provide risk-based challenge and recommendations to stakeholders
• Support the development and maintenance of risk reporting and management insights

Compliance & maturity

• Support IAM maturity assessments and continuous improvement initiatives
• Monitor and report on IAM control effectiveness and governance performance
• Maintain governance documentation, evidence repositories, and compliance records
• Support internal and external audits and regulatory assessments.
• Track and validate remediation activities resulting from audit findings, risk assessments, and control reviews

Access governance & identity security

• Support governance activities relating Segregation of Duties (SoD) and Privileged access governance
• Assess governance and control effectiveness across IAM processes and capabilities
• Review IAM process outputs and identify governance weaknesses, control gaps, and improvement opportunities
• Contribute to access risk reporting and governance oversight activities

Education and experience

• 3+ years of relevant experience in Identity & Access Management (IAM), information security, cybersecurity governance, risk management, compliance, internal or external Audit or related disciplines
• Demonstrated understanding of Identity Lifecycle Management (joiner-mover-leaver), access governance, authentication and authorization, Privileged Access Management (PAM), access reviews & certifications, Segregation of Duties (SoD), security controls and compliance frameworks, risk management principles
• Preferred experience with one or more of the following: IAM governance programs, internal controls and audit support, control testing and assurance activities, metrics, reporting, and governance dashboards, regulatory compliance programs

Skills

• Data analysis and reporting and documentation and traceability management
• Excellent critical thinking and analytical problem solving skills
• Strong stakeholder management skills
• Ability to communicate effectively and influence as well as collaborative attitude
• Continuous improvement mindset
• Attention to detail and prioritization skills
• Ability to work independently

Other information

Identity has become the primary control plane for enterprise security. As the organization continues to mature its IAM capabilities across governance, access governance, visibility, resilience, analytics, non-human identities, and AI identity security, Security Specialists play a critical role in ensuring these capabilities remain effective, measurable, compliant, and aligned with risk management objectives. This position offers the opportunity to influence how identity security is governed across the enterprise while developing deep expertise in one of the fastest-growing areas of cybersecurity.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company. Need to know more about applying for a job at ASML? Read our frequently asked questions.