Security Lead for RVM Software

TOMRA SYSTEMS ASA; Asker; Presencial; NOK 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

TOMRA SYSTEMS ASA is seeking a Security Lead for RVM Software to advance and embed security across multiple development teams. You will drive compliance with CRA and ISO 27001, implement secure software development, and lead vulnerability management and incident response initiatives.

You will collaborate with architects, DevOps, ISMS managers, and stakeholders to translate security requirements into practical, robust solutions and to ensure products remain secure and future-ready across

Formación

• Experience in cybersecurity for software products, including AI-assisted analysis and automation.
• Experience with security testing, encryption, authentication, and secure communications.
• Experience with secure development practices, vulnerability management, and risk assessments.
• Knowledge of security standards and frameworks such as ISO 27001 and the Cyber Resilience Act (CRA).

Responsabilidades

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Conocimientos

Cybersecurity for software products

Security testing

Vulnerability management

Secure development practices

ISO 27001

Cyber Resilience Act (CRA)

Encryption

Authentication

Secure communications

Descripción del empleo

Drive security practices, vulnerability management, and compliance with CRA and ISO 27001 across RVM Software development teams.

• Experience in cybersecurity for software products, including AI-assisted analysis and automation
• Experience with security testing, encryption, authentication, and secure communications
• Experience with secure development practices, vulnerability management, and risk assessments
• Knowledge of security standards and frameworks such as ISO 27001 and the Cyber Resilience Act (CRA)
• Central role shaping security integration in future software platforms
• Collaboration with highly skilled technologists in an international environment
• Opportunity to contribute to a more sustainable world through technology

Shape the Future of Secure Software at TOMRA

The RVM Software department at TOMRA Collection is responsible for developing and maintaining software for TOMRA's reverse vending machines (RVMs). The department is made up of more than 30 developers, organized into six cross-functional teams where each team owns a functional part of the RVM. Our technology spans from OS-level components and microcontrollers to application development, user interfaces, and advanced computer vision.

We are currently looking for a Security Lead for RVM Software who will help ensure that our software products and development processes meet current and future security requirements. This role will be instrumental in driving compliance with the Cyber Resilience Act and ISO 27001, secure software development practices, vulnerability management, and the continuous improvement of our security initiatives.

The Role

As Security Lead, you will play a key role in advancing and embedding security practices across RVM Software. You will work closely with development teams, architects, and the DevOps function, as well as key stakeholders such as the ISMS Manager, Group IT, and Digital Software. Through technical leadership, competence building, and the establishing of effective processes, you will help translate security requirements into practical solutions and ensure our teams deliver robust, secure, and future-ready products.

Key Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Who Are We Looking For?

We believe you have experience in several of the following areas:

• Cybersecurity for software products, with AI serving as a key enabler for analysis, automation, and secure software development.
• Development and security testing, including experience with encryption, authentication, and secure communications.
• Secure development practices, including vulnerability management, incident management, and risk assessments.
• Security standards and frameworks such as ISO 27001 and the Cyber Resilience Act.

Personal Qualities

We are looking for someone who:

• Has strong professional integrity and a genuine passion for security.
• Can translate security requirements into practical and implementable solutions.
• Is an effective communicator and enjoys influencing others without necessarily having formal line management responsibility.
• Enjoy building networks and foster understanding and engagement around security topics across different disciplines.

Why TOMRA?

At TOMRA, you will have:

• A central role in an area of growing importance to our products and customers.
• The opportunity to shape how security is integrated into the software platforms of the future.
• Collaboration with highly skilled technologists.
• An international environment with modern technologies and complex technical challenges.
• The opportunity to contribute to a more sustainable world through technology.

Cybersecurity, Security Testing, Cyber Resilience Act, ISO 27001, Software and development