Team lead SAP security - security second line IT

ASML US, LP. (US30); Veldhoven; On-site; EUR 140,000 - 210,000; Full time

Job summary

ASML is seeking a Senior SAP Security leader for the Security Second Line IT organization. Lead a ~5 FTE team, driving risk-based governance, assurance, and continual capability development across SAP security domains.

You will shape strategy, partner with peers, and ensure security-by-design in planning, design, implementation and operations. Requires 10+ years in SAP security and governance.

Qualifications

• Bachelor's or Master's degree in information security, CS, engineering or related field.
• 10+ years in cybersecurity, SAP security, risk management, audit or assurance.
• Experience with SAP ECC, S/4HANA, Fiori, HANA, SAP cloud services preferred.
• Certifications such as CISSP, CISM, CRISC, CISA or SAP Security certs preferred.

Responsibilities

• Lead and oversee the SAP Security domain within the Security Second Line IT organization.
• Develop, maintain, contribute to, and institutionalize policies, standards, baselines and guidelines.
• Provide independent risk assessments, oversight and advisory on security risks and control effectiveness.
• Act as primary focal point for SAP security audits and regulatory reviews.

Skills

Leadership

SAP Security

Governance & Risk Mgmt

Stakeholder Mgmt

Audits & Compliance

Education

Bachelor’s or Master’s in information security / CS / engineering

Tools

SAP ECC

S/4HANA

Fiori

HANA

SAP BTP & SAP cloud

Job description

Introduction to the job

As Second line we aim to provide integrated, AI and data-driven, risk-based governance that enables ASML to make informed security decisions, maintain regulatory compliance, and continuously improve security resilience through standardized controls, automated assurance and trusted business partnerships.

The team lead SAP security is responsible for leading the SAP Security domain within the Security Second Line IT organization. You will be both leading and working as part of the team (50/50 split).

You lead a team of professionals (~5 fte), providing independent oversight, assurance, risk management, governance and expert guidance on SAP Security. As a member of the Security Second Line IT leadership team, you actively contribute to the overall cybersecurity strategy, roadmap, operating model and capability development objectives. You support the head of Security Second Line IT in shaping and driving strategic priorities, increasing organizational maturity and ensuring a coherent risk-based approach across security domains. The role combines people leadership, content expertise, stakeholder management and strategic influence.

Role and responsibilities

Responsible for ensuring that the Second Line has a strong, effective and efficient team for the SAP Security domain, ensuring related cybersecurity risks and compliance are managed within ASML's risk appetite. The role works closely with peer security domain leaders, architects, control and compliance functions, risk management teams and business stakeholders to deliver integrated security outcomes and support enterprise-wide cybersecurity objectives.

• Build and manage a successful high-performing team: turning priorities into results, so your team knows what matters most and can execute with focus and quality
• Help your people grow and develop: their development is clear, continuous and tailored learning, ready for current and future needs
• Care for your people: a team people want to be part of, where tough conversations deepen engagement, accountability and trust
• Drive risk reduction: owning and evangelizing the second line vision, roadmap, capability maturity plan and operating model for SAP Security. Ensure consistent application of SAP security best practices across the SAP landscape
• Develop, maintain, contribute to and institutionalize policies, standards, baselines, guidelines, operating procedures, control frameworks and other related documents
• Provide independent and trusted Second Line challenge, assessments, risk reviews, oversight and advisory regarding security risks and control effectiveness
• Act as the primary focal point for SAP security audits, regulatory reviews and assurance activities
• Identify systemic gaps, control weaknesses and emerging risks, ensuring that accountable and responsible owners in the First Line receive clear recommendations and track follow-up actions
• Develop management reporting, dashboards and metrics providing transparency on risk exposure, remediation progress and control maturity
• Drive continuous improvement, automation and standardization initiatives to increase effectiveness and efficiency
• Support ASML strategic programs and initiatives from an SAP security perspective and ensure security-by-design principles are embedded throughout planning, design, implementation and operations
• Provide leadership across SAP security disciplines including access security, application security, platform security, cloud security, data protection, vulnerability management and integration security
• Monitor developments in the market (threats and opportunities), and translate relevant developments into risk-based requirements and required step-ups in our environment
• Act as an escalation point for complex and high priority matters
• Lead and contribute to improvement initiatives across teams/departments/sectors

Education and experience

• Bachelor's or Master's degree in information security, computer science, engineering, business information technology, or related field
• 10+ years of experience in cybersecurity, SAP security, risk management, audit or assurance functions
• Experience with SAP ECC, S/4HANA, Fiori, HANA, BTP and SAP cloud services is preferred
• CISSP, CISM, CRISC, CISA, SAP Security certifications or equivalent are preferred

Skills

• Proven leadership, coaching and high performing team-building capability in multidisciplinary and international environments
• Trusted advisor on SAP Security. Deep SAP Security expertise across SAP authorization concepts, SAP GRC, SoD controls, SAP Identity & Access Management, and security governance within complex enterprise SAP environments
• Experienced with security governance, risk management, control design, compliance and audit evidence
• Strong stakeholder management across teams/departments/sectors: enabling you and your team members to be effective (e.g., engineers, architects, audit, (senior) management and boards). Able to foster collaboration, influence, convince and