CS&S - Security Risk Manager - Linkou/Hsinchu/Taichung/Tainan

that:

• Identifies and assesses information security risks in processes and applications

• Recommends mitigations to reduce risk to acceptable levels

• Supports risk owners in implementing mitigation actions

• Monitors and reports progress to stakeholders

The team is involved in programs, projects, and changes, assessing risks related to new or modified assets by defining security requirements and validating their implementation.

Creating awareness and educating stakeholders at all levels is a key responsibility. In addition, the team drives company-wide initiatives to strengthen and mature information security capabilities.

As a Security Risk Manager, you will be the first point of contact in Taiwan for assigned sectors on security-related topics. Your main responsibilities include:

• Handle local security incidents

• Provide security awareness training

• Execute application risk assessments

• Support new initiatives through risk scoping

• Define security requirements and validate proper implementation

• Create visibility into the local risk landscape of supported sectors

• Evaluate risks against the organization's risk appetite

• Recommend, support, and guide risk owners in implementing mitigation actions

• Report to local and central stakeholders

• Actively participate in programs, projects, and changes

• Support the business during internal and external audits

By driving initiatives, identifying gaps, and supporting continuous improvement efforts, you will contribute to strengthening and maturing ASML's security capabilities.

To be successful in this role, you bring strong expertise in security risk management and experience working in complex environments, along with:

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field

• Minimum of 10 years' experience in information security risk management

• Relevant certifications such as CISSP, CISM, or CRISC (strongly preferred)

• Experience with risk assessment, risk treatment, and control design

• Knowledge of information security standards and risk frameworks (e.g., ISO 27001, NIST)

• Experience protecting confidential information and intellectual property

• Familiarity with identity and access management and secure collaboration practices

• Experience working with stakeholders at different organizational levels and in cross-functional teams

• Ability to translate policies and procedures into operational activities

Working at the cutting edge of technology means continuously solving new challenges. You will collaborate across teams and functions in a dynamic environment. To be successful in this role, you bring:

• Strong communication and influencing skills

• Ability to analyze risks and translate them into business impact

• Ownership and ability to drive results in a complex environment

• Strong relationship-building skills and ability to influence without authority

• Strong analytical and problem-solving capabilities

• Ability to collaborate effectively across diverse teams

• Proactive mindset with a focus on continuous improvement

• Strategic thinking and strong risk prioritization skills

• Flexibility to adapt to changing priorities and organizational needs

• Passion for improving security awareness and maturity

• Strong verbal and written communication skills in English

• Confidence to speak up when risks, opportunities, or concerns are identified