Cybersecurity resilience and recovery expert

Description

Introduction to the job

As a Cybersecurity resilience and recovery expert within the 2nd line of security at ASML, you play a key role in strengthening and overseeing the organization’s resilience against cyber threats. From a 2nd line perspective, you provide direction, challenge, independent oversight, and assurance to ensure that resilience and recovery capabilities are risk-based, consistent, and effective across the organization.

This role operates at the intersection of cyber resilience, enterprise risk management, and business continuity, with a strong focus on governance, standardization, and cross-sector alignment. You are also responsible for developing and maintaining enterprise-wide, cross-sector cyber resilience and recovery artefacts, such as recovery blueprints, strategies, and standardized recovery approaches, to ensure a coherent and scalable recovery capability across ASML.

You will work in multidisciplinary teams of security risk and continuity experts to support and strengthen ASML's cyber resilience, business continuity, and recovery capabilities. This position combines deep expertise in cyber security and recovery management with strong interpersonal capabilities, including, stakeholder engagement, and the ability to influence stakeholders across the organization.

Role and responsibilities

As a Cybersecurity resilience and recovery expert, you bring deep expertise in risk management, cyber resilience and business continuity management, and use this expertise to strengthen and mature ASML's cyber resilience and recovery capabilities through governance, standards, oversight, and assurance. You are positioned within ASML’s CISO Security organization, and work closely with Security, Corporate Business Continuity Management, Risk colleagues and the ASML IT and business sectors to effectively organize for business continuity and recovery.

You ensure resilience and recovery requirements are embedded throughout the organization by driving framework improvements, capability maturity initiatives, risk-based decision making, and adoption across ASML. By continuously improving ASML's cyber resilience, recovery, and business continuity capabilities, you help ensure the organization can respond effectively and efficiently to cyber disruptions.

In this role, you will:

Define and drive the adoption of ASML's Cyber resilience and recovery framework improvements to ensure organizational readiness. You will align resilience and recovery requirements to applicable standards, regulatory obligations, and enterprise risk objectives

Develop and maintain enterprise-wide resilience and recovery artefacts, standards, and methodologies, such as dependency mapping approaches, recovery blueprints, testing methodologies, recovery requirements, and resilience and recovery strategies for cyber disruptions

Act as a trusted advisor to business managers, translating risk and continuity insights into actionable recommendations and helping bridge the gap between business and IT

Provide independent 2nd line oversight, challenge, and assurance to ensure the effectiveness and consistency of cyber resilience, BCM, and recovery capabilities across sectors

Leverage data-driven insights, risk assessments, and business impact analyses to define and oversee risk-based resilience and recovery testing programs. Assess outcomes and provide assurance that recovery capabilities are tested, current, and capable of meeting defined recovery objectives

Coordinate and evaluate complex cross-sector business continuity and recovery exercises for cyber disruptions, providing independent challenge, assurance, and recommendations for improvement

Drive strategic planning and resilience capability maturity initiatives in the cyber resilience, recovery and continuity space across the organization

Produce risk, resilience, and assurance reporting and metrics for executive stakeholders and sector leads

Education and experience

A Bachelor’s or Master’s degree in a relevant field such as business economics, risk management, information management, cybersecurity, or equivalent

Extensive experience in risk management, cyber resilience, business continuity, or recovery management, preferably within a large and complex organization

A deep understanding of cyber resilience, business continuity, and recovery challenges, with a proven ability to advise, coach, and collaborate effectively

Experience engaging, influencing, and providing credible challenge to senior business and IT stakeholders

Understanding of relevant cyber resilience, business continuity, and security standards, frameworks, and regulations, such as NIS2, NIST CSF, ISO 27001, and ISO 22301

Relevant certifications in cybersecurity, risk management, and resilience, such as CISM, CRISC, CISSP, CBCI, or equivalent, are preferred

Requirements

• Working at the cutting edge of tech, you’ll always face new challenges. You’ll be part of a dynamic work environment where collaboration is key and there’s space for bold ideas and innovation.
• To thrive in this job, you’ll need the following skills:
• Solid business insight, strategic thinking, and data analysis capabilities
• Competency in stakeholder management and risk communication
• Understanding of IT recovery mechanisms, disaster recovery, cyber resilience, and business continuity concepts
• Ability to influence and coach across levels and sectors
• Proficiency in policy development and the application of cyber resilience, recovery, and business continuity frameworks
• Excellent verbal and written communication skills
• Strong collaboration and teamwork skills
• Ability to adapt approaches based on organization maturity
• Ability to manage multiple priorities and work under pressure
• Ability to work independently and manage large, complex tasks
• Decisive personality, taking responsibility
• Strong presentation and training skills
• This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.
• Inclusion and diversity
• Need to know more about applying for a job at ASML? Read our frequently asked questions .