Security risk expert - AI & emerging technology

• 3-7 years professional experience with a focus on security, IT auditing, Information Security Management Systems (ISMS). AI specialization required
• Experience with defining and running AI security baselines, assessments
• Proven track record in Security at tactical level
• Deep Knowledge of current security technologies, current and future developments for AI security, in-depth working knowledge of IT, Data and Information Risk/security frameworks and best practices, such as NIST Cyber security framework, ISF Standard of Good Practice for Information Security, IEC 62443, NIST SP 800 30 framework, NIS2, ISO 27001/2 framework

• Bachelor's or master's degree in a relevant discipline, e.g., business administration, information technology, cybersecurity, internal audit, IT management and/or data science & AI.
• Relevant certifications such as CISSP, CISM or CRISC.

As a Security risk expert - AI & emerging technology, you are responsible for executing security risk assessments and providing specialist security expertise for Artificial Intelligence (AI), Generative AI, Agentic AI, machine learning solutions, and other emerging technologies.

You will perform detailed security analysis, identify risks, evaluate controls, and develop practical recommendations to support informed risk-based decisions.

As a Security risk expert - AI & emerging technology, you will operate as a senior individual contributor under the direction and prioritization of the Security risk manager.

In this role, you will:

• Execute security risk assessments for AI and emerging technology initiatives, identifying threats, vulnerabilities, control gaps, and risk scenarios, and developing evidence-based findings and recommendations
• Perform detailed analysis of proposed technologies and architectures, including threat modelling, attack-path analysis, and evaluation of security controls and mitigations
• Assess AI-specific risks, including model compromise, prompt injection, data leakage, training data risks, supply chain vulnerabilities, agentic behaviour risks, and access control weaknesses
• Support security-by-design reviews throughout the technology lifecycle, provide subject matter expertise to project teams, advise stakeholders on security-by-design principles, and support solution design reviews
• Assist teams in understanding security expectations and requirements, validate implementation of agreed security controls, and review remediation activities and compensating measures
• Support exception management, risk treatment planning, and risk acceptance discussions, providing technical security expertise and recommendations
• Contribute to the improvement of assessment methodologies, security standards, control frameworks, procedures, and reporting mechanisms, share knowledge and mentor less experienced practitioners, and escalate material risks, novel technologies, risk appetite concerns, regulatory concerns, and significant disagreements or unresolved issues to the Security Risk Manager

To be successful in this role, you will need:

• Excellent influencing and interpersonal skills
• Ability to further develop Security Risk and Control Management within ASML by building trusting and long-term relationships
• Aability to overcome organizational resistance, as well as the ability to interact across all levels of the organization
• Solid foundation in internal and external stakeholder management as well as ability to understand different perspectives, act upon those and prioritize needs
• Self-starter mindset and ability to operate autonomously with little guidance
• Being comfortable in starting up several initiatives at the same time without losing the overview and bigger picture