阿里巴巴LAZADA-Risk and Security Business Risk Manager-PH

KEY PURPOSE OF ROLE The Country Security Lead (CSL) for ASML China acts as the local representative of the ASML CISO and protects and secures ASML’s Intellectual property, digital assets and technologies in China, in line with ASML’s Security strategy. The CSL for China develops and implements comprehensive security roadmaps for China, in close alignment with the local sector 1st line Security Risk Managers and the central 2nd line security team, to protect sensitive data against cyber and physical threats and ensures compliance with relevant regulations. ASML manages 1st line security via the sectors which creates a challenge on country level where multiple sectors can be represented. To manage security from a country point of view with local security risk managers reporting into the central sector SRM’s, ASML set up a Virtual Security Team (VST) to bring all relevant (security) representatives together in one virtual team to manage jointly security for China. The CSL forms and drives the Virtual Security Team (VST) in China, consisting of China’s first and second line security representatives and other relevant stakeholders, to improve the level of security maturity in China and report progress to the country’s Management Team. KEY RESPONSIBILITIES Overall: responsible for managing the China security organization on behalf of the CISO of ASML, driving the development and delivery of security services in China. Challenge and verify the adequate performance of security controls in China, against ASML and China risk appetite and as executed by the first line of responsibility in the sectors in China. Strategy: execute the central security strategy as determined by the CISO and adding country specific aspects to it to improve security maturity. Risk management: Collaboration with the 1st line sector SRMs to identify, assess and mitigate security risks, overseeing and reporting via the China Virtual Security Team (VST). Identify improvement opportunities together with the 1st line sector SRMs’ and the 2nd line team in terms of processes and activities. The CSL provides necessary support for improvements and will act in a pivotal role to bring (security) teams together where needed Incident response: overseeing the development of country specific response plans, assuring the timely and thorough handling of security indents under coordination of the central Security Operations Centre Compliance oversight: ensuring adherence to centrally determined or country specific laws and regulations related to information security. Team leadership & capability building: act on behalf of the CISO of ASML and work closely together with the 1st line country SRM’s to define and execute a joined security roadmap for China. Assure the capabilities as required by the central Second Line Security, Intelligence Fusion Centre and Security Operations Center teams are developed and maintained, as well as organizing Security activities related to risk culture and awareness initiatives. Will drive the preparation of a uniform reporting out to the China Country Management Team and align with the CISO and the VST team the agenda for these meetings. Stakeholder engagement: Providing regular updates, in alignment with the local first line sector Security Risk Managers of the VST, to senior management in China on the status of information security in China and the central information security program. Considering the given governance, this will always be in alignment with the respective 1st line SRM. Providing the general security training to all China staff to improve their awareness Some travel will be required to other ASML offices in China, and abroad (+/- 15%) KEY WORKING RELATIONSHIPS External: Security Vendors, Customers, Suppliers, (always in alignment with local account management and procurement teams, Industry Peers and Forums) Internal: ASML China IT, local ASML Sector Security Functions, RBA&S, Legal, Sectors

The AvSec Manager responsibilities include managing ambiguity through knowledge, experience and to allocate resources to meet daily goals. This role will manage processes, vendor x-ray screening operators and be responsible for securing the supply chain for external fulfillment to air. This position will assist with developing the workforce to meet long-term process targets. This position will directly support a team of 3rd party vendors. The AvSec Manager responsibilities also include verifying compliance with security procedures and regulatory standards, physical security design standards and policies and utilize Security Management Systems (SeMS) processes for risk mitigation. Additional responsibilities include developing new and evaluating existing security standards by establishing workflows, SLAs, and operational excellence mechanisms by ensuring customer outcomes are data driven, measured and validated. We are looking for someone who can introduce best practices and move with a strong bias for action as we ramp up these efforts. This is a new and evolving business operation. We are looking for someone who can introduce best practices and move with a strong bias for action as we ramp up these efforts. Other responsibilities include: a. Program management b. Tactical management c. Audits and service level agreement (SLA) adherence;

1. Physical Security:• Develop and maintain physical security standards and procedures for all facilities.• Manage access control systems, surveillance technologies (CCTV), detection, and perimeter security.• Coordinate site risk assessments and implement corrective measures.• Oversee security contractors and ensure compliance with service-level agreements. 2. Security Operations Center (SOC):• Lead 24/7 monitoring of incidents, threats, and emergencies affecting personnel, facilities, and operations.• Manage incident reporting, escalation protocols, and real-time response coordination.• Ensure SOC integration with emergency services, crisis response, and business continuity teams.• Maintain incident tracking systems and dashboards with KPIs and performance reports. 3. EHS (Environment, Health & Safety):• Implement EHS programs aligned with local regulations and global standards.• Conduct safety audits, risk assessments, and compliance inspections.• Promote a safety culture through training, awareness campaigns, and best practice sharing.• Lead investigations of EHS-related incidents and ensure timely reporting and corrective actions. 4. Risk Management & Compliance:• Identify and assess security and safety risks across operations.• Ensure adherence to applicable laws, regulations, and industry best practices.• Develop and test emergency response plans, including fire drills, evacuation procedures, and crisis simulations. 5. Stakeholder Engagement & Reporting:• Prepare regular reports and presentations for senior leadership on security performance, incident trends, and risk posture.• Support cross-functional projects requiring security and safety input.

ASML China brings together the most creative minds in science and technology to develop lithography machines that are key to producing faster, cheaper, more energy-efficient microchips. The CRE Physical Security Operations Specialist is responsible for the strategical and tactical security operations to safeguard its assets in China, so ASML can accomplish its business goals in a secured environment. Our headquarters are in Veldhoven, the Netherlands, and we have 25 building locations around the China, including main offices and training centers in Shanghai, Beijing, and Shenzhen. Job Summary: The Corporate Real Estate Physical Security Operations Specialist ensures the safety and security of ASML’s assets and facilities in China. You will work across various security disciplines to support daily operations, safeguard assets, and enhance the company's security posture while maintaining business continuity and compliance with relevant regulations. Key Responsibilities: Security Operations Management: Presents complex Security topics in an understandable way, offering solutions and suggestions. Speaks up when risks, opportunities or concerns are identified that could impact goals, operations, or people. Effectively and independently manages complex tasks and projects. Has a solid foundation in internal and external stakeholder management, is able to understand different perspectives, can act upon those and can prioritize needs. Oversee daily physical security operations across ASML facilities in China, including offices and training centers. Manage security guards, access control systems, and security incident response procedures. Collaborate with third-party security providers and internal teams to ensure smooth operations and maintain high standards of physical security. Monitor and report on the performance of physical security systems and ensure they align with ASML's security policies. Policy & Standard Execution: Implement and enforce physical security policies, procedures, and standards across all locations in China. Regularly review and improve security protocols and recommend necessary changes based on evolving risks. Support the execution of ASML's security strategy and assist in setting operational goals. Risk & Incident Management: Proactively identify and assess physical security risks across ASML China locations. Lead and coordinate the response to security incidents, ensuring they are managed according to company protocols. Manage investigations related to security breaches and collaborate with local law enforcement if necessary. Stakeholder & Team Engagement: Develop and maintain relationships with key internal stakeholders, including facilities management, HR, and legal teams. Provide guidance and support to security guards and other security staff to ensure adherence to procedures. Engage with external stakeholders, including security vendors and law enforcement agencies, to address security issues and share updates. Training & Development: Assist in the training and development of security personnel to ensure consistent service and high standards of security practice. Lead training sessions on security protocols, incident response, and access control procedures. Continuous Improvement: Contribute to ongoing improvements in security processes, tools, and systems. Monitor trends and technologies in physical security and apply relevant innovations to improve ASML’s security operations.