Team lead SAP security – security second line IT

ASML; Veldhoven; On-site; EUR 140,000 - 180,000; Full time

Job summary

ASML in the Netherlands seeks an experienced leader to head the SAP Security domain within the Security Second Line IT organization. You will lead a team of ~5 FTE, provide independent oversight, risk governance and strategic guidance on SAP security across the enterprise.

You will shape the security strategy, drive capability maturation, and partner with risk, audit and business stakeholders to embed security-by-design principles in planning, design and operations.

Qualifications

• Bachelor’s or Master’s degree in information security, computer science, engineering, business information technology, or related field.
• 10+ years of experience in cybersecurity, SAP security, risk management, audit or assurance functions.
• Experience with SAP ECC, S/4HANA, Fiori, HANA, BTP and SAP cloud services is preferred.
• CISSP, CISM, CRISC, CISA, SAP Security certifications or equivalent are preferred.

Responsibilities

• Build and manage a successful high-performing SAP Security team: turning priorities into results, so your team knows what matters most and can execute with focus and quality.
• Help your people grow and develop: their development is clear, continuous and tailored learning, ready for current and future needs.
• Care for your people: a team people want to be part of, where tough conversations deepen engagement, accountability and trust.
• Drive risk reduction: owning and evangelizing the second line vision, roadmap, capability maturity plan and operating model for SAP Security. Ensure consistent application of SAP security best practices across the SAP landscape.
• Develop, maintain, contribute to and institutionalize policies, standards, baselines, guidelines, operating procedures, control frameworks and other related documents.
• Provide independent and trusted Second Line challenge, assessments, risk reviews, oversight and advisory regarding security risks and control effectiveness.
• Act as the primary focal point for SAP security audits, regulatory reviews and assurance activities.
• Identify systemic gaps, control weaknesses and emerging risks, ensuring that accountable and responsible owners in the First Line receive clear recommendations and track follow-up actions.
• Develop management reporting, dashboards and metrics providing transparency on risk exposure, remediation progress and control maturity.
• Drive continuous improvement, automation and standardization initiatives to increase effectiveness and efficiency.
• Support ASML strategic programs and initiatives from an SAP security perspective and ensure security-by-design principles are embedded throughout planning, design, implementation and operations.
• Provide leadership across SAP security disciplines including access security, application security, platform security, cloud security, data protection, vulnerability management and integration security
• Monitor developments in the market (threats and opportunities), and translate relevant developments into risk-based requirements and required step-ups in our environment
• Act as an escalation point for complex and high priority matters.
• Lead and contribute to improvement initiatives across teams/departments/sectors

Skills

Leadership

SAP Security

Governance

Risk mgmt

Audit support

Stakeholder mgmt

English fluency

DevSecOps awareness

Education

Bachelor’s or Master’s in information security

Tools

SAP ECC/S/4HANA

SAP GRC

SoD controls

Job description

Introduction to the job

As Second line we aim to provide integrated, AI and data-driven, risk-based governance that enables ASML to make informed security decisions, maintain regulatory compliance, and continuously improve security resilience through standardized controls, automated assurance and trusted business partnerships.

The team lead SAP security is responsible for leading the SAP Security domain within the Security Second Line IT organization. You will be both leading and working as part of the team (50/50 split).

You lead a team of professionals (~5 fte), providing independent oversight, assurance, risk management, governance and expert guidance on SAP Security. As a member of the Security Second Line IT leadership team, you actively contribute to the overall cybersecurity strategy, roadmap, operating model and capability development objectives. You support the head of Security Second Line IT in shaping and driving strategic priorities, increasing organizational maturity and ensuring a coherent risk-based approach across security domains. The role combines people leadership, content expertise, stakeholder management and strategic influence.

Role and responsibilities

Responsible for ensuring that the Second Line has a strong, effective and efficient team for the SAP Security domain, ensuring related cybersecurity risks and compliance are managed within ASML’s risk appetite. The role works closely with peer security domain leaders, architects, control and compliance functions, risk management teams and business stakeholders to deliver integrated security outcomes and support enterprise-wide cybersecurity objectives.

• Build and manage a successful high-performing team: turning priorities into results, so your team knows what matters most and can execute with focus and quality
• Help your people grow and develop: their development is clear, continuous and tailored learning, ready for current and future needs
• Care for your people: a team people want to be part of, where tough conversations deepen engagement, accountability and trust
• Drive risk reduction: owning and evangelizing the second line vision, roadmap, capability maturity plan and operating model for SAP Security. Ensure consistent application of SAP security best practices across the SAP landscape
• Develop, maintain, contribute to and institutionalize policies, standards, baselines, guidelines, operating procedures, control frameworks and other related documents
• Provide independent and trusted Second Line challenge, assessments, risk reviews, oversight and advisory regarding security risks and control effectiveness
• Act as the primary focal point for SAP security audits, regulatory reviews and assurance activities
• Identify systemic gaps, control weaknesses and emerging risks, ensuring that accountable and responsible owners in the First Line receive clear recommendations and track follow-up actions
• Develop management reporting, dashboards and metrics providing transparency on risk exposure, remediation progress and control maturity
• Drive continuous improvement, automation and standardization initiatives to increase effectiveness and efficiency
• Support ASML strategic programs and initiatives from an SAP security perspective and ensure security-by-design principles are embedded throughout planning, design, implementation and operations
• Provide leadership across SAP security disciplines including access security, application security, platform security, cloud security, data protection, vulnerability management and integration security
• Monitor developments in the market (threats and opportunities), and translate relevant developments into risk-based requirements and required step-ups in our environment
• Act as an escalation point for complex and high priority matters.
• Lead and contribute to improvement initiatives across teams/departments/sectors

Education and experience

• Bachelor’s or Master’s degree in information security, computer science, engineering, business information technology, or related field
• 10+ years of experience in cybersecurity, SAP security, risk management, audit or assurance functions
• Experience with SAP ECC, S/4HANA, Fiori, HANA, BTP and SAP cloud services is preferred
• CISSP, CISM, CRISC, CISA, SAP Security certifications or equivalent are preferred

Skills

• Proven leadership, coaching and high performing team-building capability in multidisciplinary and international environments
• Trusted advisor on SAP Security. Deep SAP Security expertise across SAP authorization concepts, SAP GRC, SoD controls, SAP Identity & Access Management, and security governance within complex enterprise SAP environments
• Experienced with security governance, risk management, control design, compliance and audit evidence
• Strong stakeholder management across teams/departments/sectors: enabling you and your team members to be effective (e.g., engineers, architects, audit, (senior) management and boards). Able to foster collaboration, influence, convince and challenge where needed
• Strong analytical skills and the ability to explain complex technical risks to both specialist and non-specialist audiences
• Experience with DevSecOps, CI/CD, Automation, Project management and Agile are considered an advantage
• Professional fluency in English
• Resilience and continuous improvement mindset

If you do not fully meet all the above requirements but still feel that your profile is a strong match for this role, we encourage you to apply.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.

Need to know more about applying for a job at ASML? Read our frequently asked questions.