Team lead SAP security – security second line IT

In this role, you lead the SAP Security domain within ASML’s Security Second Line IT, guiding a small team to deliver risk-based security outcomes. You shape the SAP security roadmap, governance, and operating model, partnering with cross-functional teams to improve risk posture and regulatory compliance. You drive continuous improvement, automation, and secure-by-design practices across SAP landscapes. This is a strategic, leadership-focused role with meaningful impact on enterprise security.

• Lead and manage a high-performing SAP Security team (~5 FTE) and align priorities with risk appetite
• Provide independent risk reviews, assessments, and advisory on SAP security controls
• Act as primary focal point for SAP security audits, regulatory reviews, and assurance activities
• Develop and maintain policies, standards, baselines, and control frameworks for SAP Security
• Translate market developments into risk-based requirements and step-ups in the security environment
• Drive roadmap, capability maturity, and operating model improvements for SAP Security
• Ensure security-by-design principles across planning, design, implementation, and operations
• Monitor and report on risk exposure, remediation progress, and control maturity
• Support strategic programs from an SAP security perspective and ensure cross-domain collaboration
• Lead across SAP security disciplines: access, application, platform, cloud security, data protection, vulnerability management
• Escalate and resolve high-priority security matters and lead cross-team improvement initiatives

• 10+ years in cybersecurity, SAP security, risk management, audit or assurance functions
• Experience with SAP ECC, S/4HANA, Fiori, HANA, BTP and SAP cloud services (preferred)
• CISSP, CISM, CRISC, CISA or SAP Security certifications (preferred)
• Strong leadership, coaching, and team-building in international environments
• Trusted advisor with deep SAP Security expertise (authorization concepts, SAP GRC, SoD controls, IAM)
• Experience in security governance, risk management, control design, compliance and audit evidence
• Excellent stakeholder management and ability to influence across engineering, architecture, audit and boards
• Analytical ability to explain complex risks to diverse audiences
• Knowledge of DevSecOps, CI/CD, Automation, Project management and Agile (advantage)
• Professional fluency in English
• Resilience and continuous improvement mindset

• leadership and people-development
• stakeholder management
• analytical and risk communication
• SAP authorization concepts
• SAP GRC
• SoD controls