Security risk expert - AI & emerging technology

Role

As Security risk expert - AI & emerging technology, you are responsible for performing security risk assessments and providing specialist security expertise for Artificial Intelligence (AI), Generative AI, Agentic AI, machine learning solutions and other emerging technologies. You perform detailed security analyses, identify risks, evaluate controls and develop practical recommendations to support informed, risk-based decisions.

You operate as a senior individual contributor under the direction and prioritization of the Security risk manager. You join the first-line Corporate Sector Security Risk Management department, are part of the ASML Security community and work closely with sector Security Risk Management (SRM) teams, central security competence teams, AI and data governance, Information Technology, Privacy, Legal & Compliance, Internal Audit and business stakeholders.

Responsibilities

• Perform security risk assessments for AI and emerging technology initiatives: identify threats, vulnerabilities, control gaps and risk scenarios and develop evidence-based findings and recommendations.
• Perform detailed analysis of proposed technologies and architectures, including threat modelling, attack-path analysis and evaluation of security controls and mitigations.
• Assess AI-specific risks, including model compromise, prompt injection, data leaks, risks around training data, supply chain vulnerabilities, agentic behavioural risks and weaknesses in access management.
• Support security-by-design reviews throughout the technology lifecycle, provide subject matter expertise to project teams, advise stakeholders on security-by-design principles and support solution design reviews.
• Help teams understand security expectations and requirements, validate the implementation of agreed security controls and review remediation activities and compensating measures.
• Support exception management, risk treatment planning and risk acceptance discussions with technical security expertise and recommendations.
• Contribute to the improvement of assessment methodologies, security standards, control frameworks, procedures and reporting mechanisms, share knowledge and mentor less experienced practitioners, and report material risks, new technologies, risk appetite concerns, regulatory concerns and significant disagreements o