ASMLCountry Security Lead
任职要求
Essential Skills & Experience (key competencies) Minimum of 10 years (Information) Security experience Minimum of 8 years experience with physical security Minimum of 5 years IT working experience. Able to engage with Senior Leadership in China Ability to build strong, trusting relationships with technical and non-technical user base; Highly-motivated, with a strong work ethic and able to work effectively under minimal supervision Excellent verbal and written communication skills in English and Mandarin. Excellent multi-tasking skills. Skills - Functional Enterprise Security risk expertise: Strong understanding of risk frameworks, strategic security risk mgt, policy management, and business continuity management. Security Risk mitigation & advisory: Ability to identify, assess, manage and monitor security risk mitigation strategies at a country level Business acumen: Deep understanding of ASML business context, priorities, processes, and dependencies in China or related to China Security leadership: Strong knowledge and leadership in Security Risk and Compliance, including regulatory requirements, governance, security control (frameworks) and risk management Stakeholder management: Ability to engage, influence, and advise key stakeholders in the business Strategic thinking: Anticipate future security risks and opportunities, translating them into effective strategies Skills - Behavioral Collaborate – proven ability to build strong relationships, establish and foster interactions across levels and across teams, working closely with business leaders and risk owners to ensure security risk management is an integrated function Inspire: Proven ability to set a compelling security vision, motivate teams into actions, and act as a role model for all people leaders Ensure accountability: Act with a clear sense of ownership and ensures risk accountabilities are clear, accepted and acted upon Communicate effectively: Ensure transparency in risk reporting, effectively communicating risk insights to senior leadership Certifications and/or Membership Master’s degree in Information Science/Security or equivalent experience Valid industry certifications such as the Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), , Certified Cloud Security Professional (CCSP), etc. Experience with multiple frameworks (e.g. ISO 27001, NIST)Knowledge on country specific laws and regulations related to information security.
工作职责
KEY PURPOSE OF ROLE The Country Security Lead (CSL) for ASML China acts as the local representative of the ASML CISO and protects and secures ASML’s Intellectual property, digital assets and technologies in China, in line with ASML’s Security strategy. The CSL for China develops and implements comprehensive security roadmaps for China, in close alignment with the local sector 1st line Security Risk Managers and the central 2nd line security team, to protect sensitive data against cyber and physical threats and ensures compliance with relevant regulations. ASML manages 1st line security via the sectors which creates a challenge on country level where multiple sectors can be represented. To manage security from a country point of view with local security risk managers reporting into the central sector SRM’s, ASML set up a Virtual Security Team (VST) to bring all relevant (security) representatives together in one virtual team to manage jointly security for China. The CSL forms and drives the Virtual Security Team (VST) in China, consisting of China’s first and second line security representatives and other relevant stakeholders, to improve the level of security maturity in China and report progress to the country’s Management Team. KEY RESPONSIBILITIES Overall: responsible for managing the China security organization on behalf of the CISO of ASML, driving the development and delivery of security services in China. Challenge and verify the adequate performance of security controls in China, against ASML and China risk appetite and as executed by the first line of responsibility in the sectors in China. Strategy: execute the central security strategy as determined by the CISO and adding country specific aspects to it to improve security maturity. Risk management: Collaboration with the 1st line sector SRMs to identify, assess and mitigate security risks, overseeing and reporting via the China Virtual Security Team (VST). Identify improvement opportunities together with the 1st line sector SRMs’ and the 2nd line team in terms of processes and activities. The CSL provides necessary support for improvements and will act in a pivotal role to bring (security) teams together where needed Incident response: overseeing the development of country specific response plans, assuring the timely and thorough handling of security indents under coordination of the central Security Operations Centre Compliance oversight: ensuring adherence to centrally determined or country specific laws and regulations related to information security. Team leadership & capability building: act on behalf of the CISO of ASML and work closely together with the 1st line country SRM’s to define and execute a joined security roadmap for China. Assure the capabilities as required by the central Second Line Security, Intelligence Fusion Centre and Security Operations Center teams are developed and maintained, as well as organizing Security activities related to risk culture and awareness initiatives. Will drive the preparation of a uniform reporting out to the China Country Management Team and align with the CISO and the VST team the agenda for these meetings. Stakeholder engagement: Providing regular updates, in alignment with the local first line sector Security Risk Managers of the VST, to senior management in China on the status of information security in China and the central information security program. Considering the given governance, this will always be in alignment with the respective 1st line SRM. Providing the general security training to all China staff to improve their awareness Some travel will be required to other ASML offices in China, and abroad (+/- 15%) KEY WORKING RELATIONSHIPS External: Security Vendors, Customers, Suppliers, (always in alignment with local account management and procurement teams, Industry Peers and Forums) Internal: ASML China IT, local ASML Sector Security Functions, RBA&S, Legal, Sectors
• Customer AI and Security Strategy Leadership - Document and articulate the customer’s business objectives, technology landscape and AI and Security strategy. • Technology Relevant Trusted Seller - Drive Microsoft Business growth including partner co-sell motions and governance around consumption and intent to use • Technology Leadership across Solution Areas - Lead AI, (including data and migration) and Security, conversations across the rooms of the house showcasing how they align to the customers business priorities. • Industry Knowledge – Apply expertise in customer businesses, technology platforms and industry to build AI strategy with the customer that is aligned to business outcomes. Challenge customers’ assumptions with constructive dialogue about their business and technology. • Applies expertise (deep expertise across few accounts or broad expertise across many accounts) and thought leadership to identify and inform the development of the right Industry Sales Kits and industry partners within the customer's vertical industry. • Articulates and understands specific industry-related market trends, as well as customer threats, opportunities, and barriers to growth as they relate to the customer's broader industry.
Customer and Industry InsightsApplies expertise (deep expertise across few accounts or broad expertise across many accounts) and thought leadership to identify and inform the development of the right Industry Sales Kits and industry partners within the customer's vertical industry. Articulates and understands specific industry-related market trends, as well as customer threats, opportunities, and barriers to growth as they relate to the customer's broader industry. Leverages industry trends from other industries to gather insights and develop an informed perspective on similar issues that may occur within their industry/industries. Applies industry knowledge to support customers in solving issues.Synthesizes and combines various business and industry insights from their team, global best practices, proof points from experience/case studies with countries and/or regions, and deep industry expertise (e.g., level 200) related to customers and their competitors to conduct forecasting and develop recommendations for managing accounts and subsidiary planning. Ensures that all levels of the organization challenge customers to consider alternatives and adapt strategies, plans, business models, and solutions to insights. Orchestrates cross-regional teams to gather information, collaborate on performance markers, and identify potential risks in customer accounts. Oversees technical teams for driving opportunities with others, as necessary. Brings in business and industry insights to address the broader business challenges for the customer and deliver solutions. Differentiated Value PropositionPartners with a line-of-business leader or senior executive within a large-scale or high-impact customer organization to articulate how complex Microsoft technology/services will meet future business needs better than the competition and will enable the achievement of long-term growth and success. Provides an outside-in view around existing and emerging compete or other solutions that are also a requirement for the customer.Acts as the customer's Technology Mentor in established relationships with a line-of-business leader or senior executive within a large-scale or high-impact customer organization senior leaders, including technical decision makers (TDMs) and/or Business Unit leaders at the C-level (e.g., HR, Risk, Finance leadership). Develops extended relationships beyond core customers, advises on solutions, and aligns Microsoft capabilities with customer needs. Drives market share (e.g., cloud, collaboration, AI). Leads customer business transformations through digital technologies for assigned accounts to drive business outcomes and create business value for customers by understanding customer industry and position to provide guidance and to challenge customer thinking with innovative ideas that showcase the need for change and new strategic direction, and proactively involves corporate and cross-industry resources to drive customer transformation. Ensures line-of-business wins are captured (e.g., customer write-ups) as reference for scale, and represents the face of the business during public relations events for significant business wins. Education and Thought LeadershipLeads customer technology engagement by engaging and influencing technical resources of customer, partner, and Microsoft towards customer’s business transformation. Delivers regular (e.g., quarterly, monthly) industry/technology briefings to customer technology senior decision-makers technical teams.Uses existing and new readiness resources and demonstrates expertise in creating enablement plans for large and high-stakes customers, and all-up Microsoft business. Drives innovations to help customers meet capacity and capability goals, maximize reach, and impact and drive long-term engagement and thought leadership on the Microsoft platform, and influences large customers to see and adopt the strategic value. Drives customer skilling initiatives and execution. Mapping and Account PlanningEstablishes best practices and standards around account planning for budgeting, quota attainment, consumption goals, and customer consumption gaps to inform quarterly and fiscal objectives. Coordinates highly complex extended account teams (e.g., spanning complex technologies, geographies, functions) and drives forecasting and tracking of the business. Owns the technical portion of the account plan and leads the customer plan delivery for large, critical, and/or strategic accounts. Captures all Account Planning input in MSX D365 Account Plan.Helps customer technical specialists build the message to sell Microsoft offerings to other parts of their business or end users. Creates stakeholder maps for accounts, determines, and orchestrates a coverage plan, and builds out an execution framework across multiple Rooms of the House of the customer.Orchestrates internal teams and local partners (inclusive of global systems integrators and consultancy partners) to ensure sufficient technical resources for demand generation, when appropriate. Technology Sales: Demand Generation and OrchestrationLeads Account Strategy Envisioning (ASE, formerly IDTA) with the extended account team, customer, and partner to deliver the outcomes for the customer through joint envisioning, as a vehicle for Industry Sales Kits and Solution Plays. Creates new Stage 1 opportunities, both billed and consumed, with technical decision maker (TDM) customer stakeholders, managing consumption pipeline with extended team to maintain velocity, and unblocking issues. Coaches peers (often as a mentor across a region or country) on how to create and maintain an opportunity initiation and how to map Microsoft priorities to opportunities. Defines the blueprint for opportunity initiation, and sets and shares standards and best practices for others to follow.Leads the customer journey into the era of AI and Industrial Metaverse by creating a targeted approach tailored to their current business requirements and positions Microsoft as a leader for the future, both for accelerating productivity as well as helping the customer create new capabilities to support their business. Leverages expertise of current technology landscape and understanding of AI and Industrial Metaverse capabilities to plot the foundational elements on the technology roadmap that need to be in place to realize value for the customer. Builds a mid-term strategy for AI and metaverse projects as well as an immediate opportunity pipeline and orchestrates execution through the appropriate technical teams from the Specialist Team Unit (STU) and with appropriate PartnersCreates, develops, and drives opportunities based on industry best practices, presents opportunities to the customer, and creates demand. Develops a plan, within a broader strategy, to create and qualify a set number of opportunities for product sales, solutions sales, or consumption. Leverages partners and multiple channels (e.g., social media) to create demand. Orchestrates efforts to drive MCEM lifecycle and stage progression. Leverages experience and strategic foresight to lead technical teams by driving opportunities with Specialist Team Unit (STU), Customer Success Unit (CSU), and others, as necessary. Leads efforts to reach out to key stakeholders to give customer-driven pitches and drives the appropriate customer reach together with the account executive to generate new demand. Uses advanced technical knowledge of products to determine feasibility of technical customer requirements requests and works with core engineering teams to prepare solutions. Technology Strategy FormulationCreates mid- and long-term (e.g., 12 or more months) multi-horizon technology and business roadmaps for highly prominent, challenging, and/or strategic accounts based on a deep understanding of business and technology priorities and industry landscape. Challenges and validates the strategy and plan with customer stakeholders and drives envisioning and articulates business and program changes in the roadmaps around new and groundbreaking capabilities. Leads the translation of the customer's business objectives in conjunction with Industry Sales Kits and Solution Plays (including consumption-heavy workloads and cloud services) to develop an effective Industry Technology Architecture to plans for and drives consumption and adoption of Microsoft cloud and a higher share of customer potential and propensity (CPP).Leads analysis of overall customer needs, outcomes, and blockers. Determines key stakeholders for driving execution on the largest and/or most complex accounts. Partners with global executives to lead overall strategy development (e.g., blocker identification, partner strategy) to identify and address gaps and drive end-to-end solutions. Leads the adoption of technologies by plotting the long-term vision of the customer's business strategy and driving action to bring to fruition.Leads and ensures execution of technology strategy and digital transformation by anticipating and/or leading the resolution of technical blockers that arise during strategy planning and implementation, and driving technology adoption. Trusted AdvisorLeverages a broad knowledge of Microsoft's product landscape, solutions, and strategy to address customer's needs. Proactively coordinates with internal and external network of industry experts (e.g., Regional Experts, industry-specific partners) to build strong knowledge of the industry and the competitive landscape. Drives and leverages leaders from the partner ecosystem to bridge process gaps. Leverages deep understanding of their customer to share knowledge with extended team and leverages advanced knowledge of competitors to promote customer business perspectives. Partners with others (e.g., enterprise-channel managers) to provide sponsorship and increase impact.Provides Account thought leadership inclusive of information technology (IT), business strategy knowledge, and technology landscape, and shares best practices internally while providing coaching to subsidiary resources. Leverages account thought leadership in partnership with account executives to set strategy, own accountability for outcomes, and lead extended teams. Provides technical guidance to internal teams to position technology while using customer landscape knowledge. Creates connections and feedback loops with Product and Engineering teams.Acts as the voice of the customer, industry, and internal advocate by providing insights, feedback, and challenges from the customer to internal teams (e.g., product groups, engineers) across all levels of the organization. Drives action to ensure that internal teams understand and respond to insights. Articulates the business opportunity for Microsoft based on product gaps.Creates security thought leadership with the customer's executives (e.g., technical decision maker [TDM]/business decision maker [BDM]) using the Microsoft Security and Zero Trust narratives and engages TDM and BDM stakeholders to position security as a business enabler and instill a security mindset in all aspects of the customer's technology landscape. Uses their understanding of the customers' technology and security needs to establish Microsoft’s security credentials and to build opportunities to improve the customer's security posture and orchestrates execution through security specialists.
Customer and Industry InsightsApplies expertise (deep expertise across few accounts or broad expertise across many accounts) and thought leadership to identify and inform the development of the right Industry Sales Kits and industry partners within the customer's vertical industry. Articulates and understands specific industry-related market trends, as well as customer threats, opportunities, and barriers to growth as they relate to the customer's broader industry. Leverages industry trends from other industries to gather insights and develop an informed perspective on similar issues that may occur within their industry/industries. Applies industry knowledge to support customers in solving issues.Synthesizes and combines various business and industry insights from their team, global best practices, proof points from experience/case studies with countries and/or regions, and deep industry expertise (e.g., level 200) related to customers and their competitors to conduct forecasting and develop recommendations for managing accounts and subsidiary planning. Ensures that all levels of the organization challenge customers to consider alternatives and adapt strategies, plans, business models, and solutions to insights. Orchestrates cross-regional teams to gather information, collaborate on performance markers, and identify potential risks in customer accounts. Oversees technical teams for driving opportunities with others, as necessary. Brings in business and industry insights to address the broader business challenges for the customer and deliver solutions. Differentiated Value PropositionPartners with a line-of-business leader or senior executive within a large-scale or high-impact customer organization to articulate how complex Microsoft technology/services will meet future business needs better than the competition and will enable the achievement of long-term growth and success. Provides an outside-in view around existing and emerging compete or other solutions that are also a requirement for the customer.Acts as the customer's Technology Mentor in established relationships with a line-of-business leader or senior executive within a large-scale or high-impact customer organization senior leaders, including technical decision makers (TDMs) and/or Business Unit leaders at the C-level (e.g., HR, Risk, Finance leadership). Develops extended relationships beyond core customers, advises on solutions, and aligns Microsoft capabilities with customer needs. Drives market share (e.g., cloud, collaboration, AI). Leads customer business transformations through digital technologies for assigned accounts to drive business outcomes and create business value for customers by understanding customer industry and position to provide guidance and to challenge customer thinking with innovative ideas that showcase the need for change and new strategic direction, and proactively involves corporate and cross-industry resources to drive customer transformation. Ensures line-of-business wins are captured (e.g., customer write-ups) as reference for scale, and represents the face of the business during public relations events for significant business wins. Education and Thought LeadershipLeads customer technology engagement by engaging and influencing technical resources of customer, partner, and Microsoft towards customer’s business transformation. Delivers regular (e.g., quarterly, monthly) industry/technology briefings to customer technology senior decision-makers technical teams.Uses existing and new readiness resources and demonstrates expertise in creating enablement plans for large and high-stakes customers, and all-up Microsoft business. Drives innovations to help customers meet capacity and capability goals, maximize reach, and impact and drive long-term engagement and thought leadership on the Microsoft platform, and influences large customers to see and adopt the strategic value. Drives customer skilling initiatives and execution. Mapping and Account PlanningEstablishes best practices and standards around account planning for budgeting, quota attainment, consumption goals, and customer consumption gaps to inform quarterly and fiscal objectives. Coordinates highly complex extended account teams (e.g., spanning complex technologies, geographies, functions) and drives forecasting and tracking of the business. Owns the technical portion of the account plan and leads the customer plan delivery for large, critical, and/or strategic accounts. Captures all Account Planning input in MSX D365 Account Plan.Helps customer technical specialists build the message to sell Microsoft offerings to other parts of their business or end users. Creates stakeholder maps for accounts, determines, and orchestrates a coverage plan, and builds out an execution framework across multiple Rooms of the House of the customer.Orchestrates internal teams and local partners (inclusive of global systems integrators and consultancy partners) to ensure sufficient technical resources for demand generation, when appropriate. Technology Sales: Demand Generation and OrchestrationLeads Account Strategy Envisioning (ASE, formerly IDTA) with the extended account team, customer, and partner to deliver the outcomes for the customer through joint envisioning, as a vehicle for Industry Sales Kits and Solution Plays. Creates new Stage 1 opportunities, both billed and consumed, with technical decision maker (TDM) customer stakeholders, managing consumption pipeline with extended team to maintain velocity, and unblocking issues. Coaches peers (often as a mentor across a region or country) on how to create and maintain an opportunity initiation and how to map Microsoft priorities to opportunities. Defines the blueprint for opportunity initiation, and sets and shares standards and best practices for others to follow.Leads the customer journey into the era of AI and Industrial Metaverse by creating a targeted approach tailored to their current business requirements and positions Microsoft as a leader for the future, both for accelerating productivity as well as helping the customer create new capabilities to support their business. Leverages expertise of current technology landscape and understanding of AI and Industrial Metaverse capabilities to plot the foundational elements on the technology roadmap that need to be in place to realize value for the customer. Builds a mid-term strategy for AI and metaverse projects as well as an immediate opportunity pipeline and orchestrates execution through the appropriate technical teams from the Specialist Team Unit (STU) and with appropriate PartnersCreates, develops, and drives opportunities based on industry best practices, presents opportunities to the customer, and creates demand. Develops a plan, within a broader strategy, to create and qualify a set number of opportunities for product sales, solutions sales, or consumption. Leverages partners and multiple channels (e.g., social media) to create demand. Orchestrates efforts to drive MCEM lifecycle and stage progression. Leverages experience and strategic foresight to lead technical teams by driving opportunities with Specialist Team Unit (STU), Customer Success Unit (CSU), and others, as necessary. Leads efforts to reach out to key stakeholders to give customer-driven pitches and drives the appropriate customer reach together with the account executive to generate new demand. Uses advanced technical knowledge of products to determine feasibility of technical customer requirements requests and works with core engineering teams to prepare solutions. Technology Strategy FormulationCreates mid- and long-term (e.g., 12 or more months) multi-horizon technology and business roadmaps for highly prominent, challenging, and/or strategic accounts based on a deep understanding of business and technology priorities and industry landscape. Challenges and validates the strategy and plan with customer stakeholders and drives envisioning and articulates business and program changes in the roadmaps around new and groundbreaking capabilities. Leads the translation of the customer's business objectives in conjunction with Industry Sales Kits and Solution Plays (including consumption-heavy workloads and cloud services) to develop an effective Industry Technology Architecture to plans for and drives consumption and adoption of Microsoft cloud and a higher share of customer potential and propensity (CPP).Leads analysis of overall customer needs, outcomes, and blockers. Determines key stakeholders for driving execution on the largest and/or most complex accounts. Partners with global executives to lead overall strategy development (e.g., blocker identification, partner strategy) to identify and address gaps and drive end-to-end solutions. Leads the adoption of technologies by plotting the long-term vision of the customer's business strategy and driving action to bring to fruition.Leads and ensures execution of technology strategy and digital transformation by anticipating and/or leading the resolution of technical blockers that arise during strategy planning and implementation, and driving technology adoption. Trusted AdvisorLeverages a broad knowledge of Microsoft's product landscape, solutions, and strategy to address customer's needs. Proactively coordinates with internal and external network of industry experts (e.g., Regional Experts, industry-specific partners) to build strong knowledge of the industry and the competitive landscape. Drives and leverages leaders from the partner ecosystem to bridge process gaps. Leverages deep understanding of their customer to share knowledge with extended team and leverages advanced knowledge of competitors to promote customer business perspectives. Partners with others (e.g., enterprise-channel managers) to provide sponsorship and increase impact.Provides Account thought leadership inclusive of information technology (IT), business strategy knowledge, and technology landscape, and shares best practices internally while providing coaching to subsidiary resources. Leverages account thought leadership in partnership with account executives to set strategy, own accountability for outcomes, and lead extended teams. Provides technical guidance to internal teams to position technology while using customer landscape knowledge. Creates connections and feedback loops with Product and Engineering teams.Acts as the voice of the customer, industry, and internal advocate by providing insights, feedback, and challenges from the customer to internal teams (e.g., product groups, engineers) across all levels of the organization. Drives action to ensure that internal teams understand and respond to insights. Articulates the business opportunity for Microsoft based on product gaps.Creates security thought leadership with the customer's executives (e.g., technical decision maker [TDM]/business decision maker [BDM]) using the Microsoft Security and Zero Trust narratives and engages TDM and BDM stakeholders to position security as a business enabler and instill a security mindset in all aspects of the customer's technology landscape. Uses their understanding of the customers' technology and security needs to establish Microsoft’s security credentials and to build opportunities to improve the customer's security posture and orchestrates execution through security specialists.
• Review, author, and optimize high-quality, extensible web and mobile code (React, React Native, Swift, Kotlin) to meet team standards for performance, security, testability, reliability, and maintainability. • Integrate automated static analysis (ESLint, SonarQube) and testing frameworks (Jest, XCTest) into the CI/CD pipeline, and provide timely, insightful code reviews to drive adherence to best practices and accelerate development. • Define and own the architecture and design of web and mobile features, producing clear design documents, trade-off analyses, and testability plans that ensure performance, scalability, reliability, security, and compliance across the entire stack. • Identify upstream and downstream dependencies, model system interactions, and collaborate with cross-functional teams to validate design hypotheses, integrate AI-driven testing strategies, and continuously improve test coverage, defect localization, and overall solution quality. • Lead security, privacy, and compliance excellence by embedding “security as code” invariants, implementing deployment gates and automated scanners, instrumenting telemetry and audit trails, conducting threat models and incident drills, and collaborating with cross-functional security partners to uphold global and local regulations. • Integrate end-to-end observability into web and mobile services by instrumenting comprehensive logging, telemetry, and real-time dashboards for performance, availability, and security; serve as the DRI on on-call rotations to swiftly diagnose and remediate incidents, drive root-cause postmortems, refine troubleshooting guides, and implement automated alerts and mitigations to continuously boost reliability and supportability. • Partner with product managers, privacy/security experts, technical leads, and customer-facing teams to elicit, validate, and prioritize user requirements for web and mobile solutions, embedding continuous feedback loops with quantitative metrics (usage patterns, performance) and qualitative indicators (accessibility, globalization), while championing end-user privacy and security throughout the development lifecycle.