About the role
AI summarisedThe Senior Analyst, Cybersecurity role at ASM involves strengthening the company's global digital foundation by embedding security into systems and initiatives. The position requires collaboration across regions and functions to build resilient security capabilities, conduct risk assessments, support audits, and act as a subject matter expert. The role focuses on protecting people, technology, and operations in a fast-moving semiconductor landscape through proactive security measures and compliance frameworks.
EquipmentOnsite
Key Responsibilities
- Participate in architecture and design discussions for new solutions and initiatives
- Partner with cross-functional teams to integrate effective security controls into systems and processes
- Support security investigations, assessments, and remediation efforts
- Develop, implement, and maintain IT governance, risk, and compliance (GRC) frameworks, standards, and policies
- Conduct cybersecurity and compliance risk assessments across technologies, processes, and business areas
- Validate that security controls are operating effectively and consistently across teams
- Support gap assessments, internal audits, and external audits
- Contribute to vendor due-diligence activities and vendor risk management
- Participate in disaster recovery and business continuity activities, including cyber drills and business impact analysis
- Act as a cybersecurity subject matter expert for global IT teams, business partners, vendors, and contractors
- Engage stakeholders to ensure cybersecurity priorities align with business needs
- Collaborate with teams across time zones, with flexibility for occasional after-hours meetings
Requirements
- Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field
- Minimum five years of cybersecurity experience
- Professional certifications such as CISSP, CISM, or CCSP
- Knowledge of cybersecurity threats, vulnerabilities, hacking techniques, and exploitation methods
- Experience with security technologies such as WAF, EDR, SSE, and DLP
- Experience performing risk assessments, audits, and compliance monitoring
- Knowledge of industry frameworks such as NIST
- Strong analytical and problem-solving skills
- Ability to work independently and collaboratively
- Deep cybersecurity domain expertise with global exposure
- Experience with cloud security and cloud computing environments
- Experience developing security standards and best-practice guidance
- Creative and strategic thinking to identify risks and design effective mitigation strategies