Security Lead for RVM Software

Tomra; Asker; On-site; NOK 1,000,000 - 1,400,000; Full time

Job summary

TOMRA is seeking a Security Lead for the RVM Software team in Asker, Norway. You will drive security practices across development, architectures, and DevOps, translating requirements into robust, secure, and future-ready products.

Join a cross-functional team of 30+ developers and influence security across the software platform, helping ensure compliance with the Cyber Resilience Act, ISO 27001, and secure development practices while coaching others.

Qualifications

• Experience in cybersecurity for software products.
• Experience with encryption, authentication, and secure communications.
• Familiarity with vulnerability management and incident management.
• Knowledge of ISO 27001 and the Cyber Resilience Act.

Responsibilities

• Drive operational security activities within RVM Software.
• Contribute to CRA compliance and other security standards.
• Establish and improve security-related processes.
• Coordinate security activities across development teams and stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Skills

Cybersecurity

Security testing

Incident management

Risk assessment

Communication

Security architecture

Job description

TOMRAwas founded in 1972, based on the design, manufacturing and sale of reverse vending machines (RVMs) for automated collection of used beverage containers. Today TOMRA provides solutions that enable the circular economy with advanced collection and sorting systems, and food processing by employing sensor-based sorting and grading technology.

The TOMRA Groupemploys 5500 people globally and is listed on the Oslo Stock Exchange (OSE: TOM).TOMRA was named Norway’s Most Innovative Business in 2023 and 2026.

Shape the Future of Secure Software at TOMRA

The RVM Software department at TOMRA Collection is responsible for developing and maintaining software for TOMRA’s reverse vending machines (RVMs). The department is made up of more than 30 developers, organized into six cross-functional teams where eachteamowns a functional part of the RVM. Our technology spans from OS-level components and microcontrollers to application development, user interfaces, and advanced computer vision.

We are currently looking for a Security Lead for RVM Software who will help ensure that our software products and development processes meet current and future security requirements. This role will be instrumental in driving compliance with the Cyber Resilience Act and ISO 27001, secure software development practices, vulnerability management, and the continuous improvement of our security initiatives.

Job Description

As Security Lead, you will play a key role in advancing and embedding security practices across RVM Software. You will work closely with development teams, architects, and the DevOps function, as well as key stakeholders such as the ISMS Manager, Group IT, and Digital Software. Through technical leadership, competence building, and the establishing of effective processes, you will help translate security requirements into practical solutions and ensure our teams deliver robust, secure, and future-ready products.

Key Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Qualifications

Who Are We Looking For?

We believe you have experience in several of the following areas:

• Cybersecurity for software products, with AI serving as a key enabler for analysis, automation, and secure software development.
• Development and security testing, including experience with encryption, authentication, and secure communications.
• Secure development practices, including vulnerability management, incident management, and risk assessments.
• Security standards and frameworks such as ISO 27001 and the Cyber Resilience Act.

Personal Qualities

We are looking for someone who:

• Has strong professional integrity and a genuine passion for security.
• Can translate security requirements into practical and implementable solutions.
• Is an effective communicator and enjoys influencing others without necessarily having formal line management responsibility.
• Enjoy building networks and foster understanding and engagement around security topics across different disciplines.

Additional Information

Why TOMRA?

At TOMRA, you will have:

• A central role in an area of growing importance to our products and customers.
• The opportunity to shape how security is integrated into the software platforms of the future.
• Collaboration with highly skilled technologists.
• An international environment with modern technologies and complex technical challenges.
• The opportunity to contribute to a more sustainable world through technology.

Workplace is Asker (Norway).