We at ASML enable groundbreaking technology to solve some of humanity’s toughest challenges. Together with our partners, we provide leading patterning solutions that drive the advancement of microchips.
Do you have a passion for SAP security and application security? Do you wish to have an impact on how we secure our SAP environment and how we conduct security assessments? Then we would like to talk to you!
As a Senior Specialist in SAP Application Security you are part of the Application Security team within the Technology Security Competence Center (TSCC) which is part of the Risk & Business Assurance (R&BA) department of ASML Corporate.
You will be responsible for conducting detailed security assessments mainly on SAP and on new and existing Applications and IT services within ASML, assist and advice projects on security related questions and help drive the security improvements for ASML. You will be interacting with stakeholders on different levels in ASML IT, but also within ASML sectors.
SAP technology plays a key role in the security assessments. Experience with security for a wide range of SAP applications is a must in this role.
The role is contributing in protection of ASML’s information, Intellectual Property (IP) and assets, and that of ASML’s customers and suppliers for the scope of the projected solution. This includes the alignment of the solution with ASML Information Security strategies and security policies/standards/ guidelines, and where necessary suggesting additions and improvement to standards.
As aSenior SAP Security Specialist you will be responsible for:
Performing SAP project intake assessments in cooperation with the Project Security Officer;
Assessing SAP applications and systems to be implemented or actual implementations based on assessments of high and low level designs, interviews and/or testing;
Assessing existing or new IT services (on premise or cloud) on technical vulnerabilities and weaknesses based on ASML process and tooling;
Translating assessment results into an Information Security Specification (security plan for service);
Communicate observations to the relevant stakeholders, advise on mitigation and follow up on actions;
Adding information to the different security registers from Business Impact assessments (BIA’s), IT Security Assessments (ITSA’s), penetration/security tests, vulnerability scans, exceptions and other sources;
Adding information to security finding register, which contains all security assessment findings and risks that are reported within the TSCC, and is used to follow up on security assessment findings;
Improving and maintaining an Application Security Register, manage and follow-up on actions and register application progress;
Keep track of follow up actions and deliver management reporting;
Represent, on occasion, the TSCC in IT projects and intake boards where required;
Assess IT security exception requests on validity and provide advice to the Team Lead Application Security and business stakeholder for acceptance or rejection including advice on additional security controls;
Improve procedures to keep the security registers, application registers and assessment processes up to date;
Advise on security improvements and additional controls;
Update and maintain security baselines and standards;
Assist IT Security risk management;
Providing SAP security guidance for projects and installed applications;
Performing SAP security and vulnerability reviews;
Developing/improving SAP security dashboards/reports.
Valid industry certifications such as CISSP, CISM and/or CISA are a plus;
Min 6+ years professional experience with a focus on IT applications / information security, risk and compliance;
Experience in Executing Threat and Vulnerability analysis (TVA) or IT Security risk assessments on IT services and applications;
Experience with a wide range of SAP applications is a plus (no authorization management);
SAP Security & Controls;
SAP Vulnerability testing;
SAP Security implementation;
SAP GRC access & process controls;
Experience in collecting information through research and interviews;
Good working knowledge of Office suite applications like Excel, SharePoint and Teams
Deep Knowledge of current security technologies and governance processes;
IT audit experience is a plus;
In-depth working knowledge of IT Risk / security frameworks and best practices, e.g.:
NIST Cyber Security Framework
ISF Standard of Good Practice for Information Security
NIST SP 800 30 framework
ISO 27001/2 framework
Knowledge of the Scaled Agile Framework (SAFe) is a plus
Able to operate independently/with minimal supervision, self-starter;
Ability to interact with all levels including users, engineers, executives and senior managers;
Analytical, precise, tenacious, autonomous;
Knowledge of IT-security, Information Security and Architecture methodology;
Ability to overcome organizational resistance;
Excellent organizational skills and the ability to prioritize multiple tasks and assignments;
Able to grasp the deep technical characteristics of new environments quickly
Able to draft clear and concise visualizations of complex processes and environments
Able to stand your ground in a flexible / changing environment
ASML does not accept unsolicited resumes from any agencies that have not signed a mutual service agreement. All unsolicited resumes will be considered ASML’s property, and ASML will not be obligated to pay a referral fee. This includes resumes submitted directly to hiring managers without contacting the Resource Center Department.
ASML is GDPR compliant, therefore we cannot process applications sent outside of our recruitment system.
If you are interested in this vacancy please apply.