Cyber Security | Information Management internship: security assurance & strategy

During this internship, you will support the development of security assurance, governance, and strategic reporting capabilities within the Security organization. You will analyze data, contribute to process improvements, and help create insights that support leadership decisions. The assignment provides broad exposure to security governance, regulatory compliance, and organizational strategy in an innovative international environment.

Your main responsibilities will be:

• Support the development of a security controls inventory and assurance framework.
• Map security controls to regulatory requirements and industry standards.
• Analyze audit results, assessments, and improvement actions to identify trends.
• Create dashboards, reports, and management insights for security leadership.
• Conduct benchmarking and research on cybersecurity governance practices.
• Contribute to process documentation, reporting improvements, and automation opportunities.
• Support workshops and stakeholder engagement activities across security domains.

This is a bachelor/master internship (non-thesis) for minimum 6 months, minimum 4 days per week (3 days on-site). The start date of this internship is as of February 2027.

To be suitable for the internship, you:

• Are pursuing a bachelor's or master's degree in Cyber Security, Information Management, Business Information Technology, Computer Science, Data Analytics, Business Administration, or a related field.
• Have a strong interest in cybersecurity governance, risk management, compliance, and strategy.
• Possess analytical and problem-solving skills and can translate data into meaningful insights.
• Communicate effectively in English, both verbally and in writing.
• Demonstrate a proactive and independent way of working while collaborating with stakeholders.

During this internship, you will gain valuable experience in security governance, regulatory compliance, assurance processes, strategic reporting, stakeholder management, and data-driven decision-making within a global technology company. The role is well suited for students who are curious, analytical, and eager to learn how security strategy and governance enable business success at scale.

• You are enrolled at an educational institute for the entire duration of the internship, and you are at least 18 years old at the start of the internship;
• If you are a non-EU citizen, studying in the Netherlands, your university is willing to sign the documents relevant for doing an internship (i.e., Nuffic agreement);
• You attach your cover letter with a clear motivation on why you are interested in this internship assignment in particular;
• You need to be located in the Netherlands to be perform your internship. In case you are currently living/studying outside of the Netherlands, your application shows the willingness to relocate.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.