This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Country Security Lead (CSL) for ASML China acts as the local representative of the ASML CISO and protects and secures ASML’s Intellectual property, digital assets and technologies in China, in line with ASML’s Security strategy. The CSL for China develops and implements comprehensive security roadmaps for China, in close alignment with the local sector 1st line Security Risk Managers and the central 2nd line security team, to protect sensitive data against cyber and physical threats and ensures compliance with relevant regulations. The CSL forms and drives the Virtual Security Team (VST) in China, consisting of China’s first and second line security representatives and other relevant stakeholders, to improve the level of security maturity in China and report progress to the country’s Management Team.
Job Responsibility:
Responsible for managing the China security organization on behalf of the CISO of ASML, driving the development and delivery of security services in China
Challenge and verify the adequate performance of security controls in China, against ASML and China risk appetite and as executed by the first line of responsibility in the sectors in China
Execute the central security strategy as determined by the CISO and adding country specific aspects to it to improve security maturity
Collaboration with the 1st line sector SRMs to identify, assess and mitigate security risks, overseeing and reporting via the China Virtual Security Team (VST)
Identify improvement opportunities together with the 1st line sector SRMs’ and the 2nd line team in terms of processes and activities
Provide necessary support for improvements and will act in a pivotal role to bring (security) teams together where needed
Overseeing the development of country specific response plans, assuring the timely and thorough handling of security indents under coordination of the central Security Operations Centre
Ensuring adherence to centrally determined or country specific laws and regulations related to information security
Act on behalf of the CISO of ASML and work closely together with the 1st line country SRM’s to define and execute a joined security roadmap for China
Assure the capabilities as required by the central Second Line Security, Intelligence Fusion Centre and Security Operations Center teams are developed and maintained, as well as organizing Security activities related to risk culture and awareness initiatives
Drive the preparation of a uniform reporting out to the China Country Management Team and align with the CISO and the VST team the agenda for these meetings
Providing regular updates, in alignment with the local first line sector Security Risk Managers of the VST, to senior management in China on the status of information security in China and the central information security program
Providing the general security training to all China staff to improve their awareness
Requirements:
Minimum of 10 years (Information) Security experience
Minimum of 8 years experience with physical security
Minimum of 5 years IT working experience
Able to engage with Senior Leadership in China
Ability to build strong, trusting relationships with technical and non-technical user base
Highly-motivated, with a strong work ethic and able to work effectively under minimal supervision
Excellent verbal and written communication skills in English and Mandarin
Excellent multi-tasking skills
Enterprise Security risk expertise: Strong understanding of risk frameworks, strategic security risk mgt, policy management, and business continuity management
Security Risk mitigation & advisory: Ability to identify, assess, manage and monitor security risk mitigation strategies at a country level
Business acumen: Deep understanding of ASML business context, priorities, processes, and dependencies in China or related to China
Security leadership: Strong knowledge and leadership in Security Risk and Compliance, including regulatory requirements, governance, security control (frameworks) and risk management
Stakeholder management: Ability to engage, influence, and advise key stakeholders in the business
Strategic thinking: Anticipate future security risks and opportunities, translating them into effective strategies
Collaborate – proven ability to build strong relationships, establish and foster interactions across levels and across teams, working closely with business leaders and risk owners to ensure security risk management is an integrated function
Inspire: Proven ability to set a compelling security vision, motivate teams into actions, and act as a role model for all people leaders
Ensure accountability: Act with a clear sense of ownership and ensures risk accountabilities are clear, accepted and acted upon
Communicate effectively: Ensure transparency in risk reporting, effectively communicating risk insights to senior leadership
Master’s degree in Information Science/Security or equivalent experience
Valid industry certifications such as the Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), etc.
Experience with multiple frameworks (e.g. ISO 27001, NIST)
Knowledge on country specific laws and regulations related to information security
Welcome to CrawlJobs.com – Your Global Job Discovery Platform
At CrawlJobs.com, we simplify finding your next career opportunity by bringing job listings directly to you from all corners of the web. Using cutting-edge AI and web-crawling technologies, we gather and curate job offers from various sources across the globe, ensuring you have access to the most up-to-date job listings in one place.
We use cookies to enhance your experience, analyze traffic, and serve personalized content. By clicking “Accept”, you agree to the use of cookies.