Security Lead, RVM Software — ISO 27001 & CRA Compliance

TOMRA SYSTEMS ASA; Asker; On-site; NOK 1,200,000 - 1,800,000; Full time

Job summary

TOMRA SYSTEMS ASA is seeking a Security Lead for RVM Software to advance and embed security across multiple development teams. You will drive compliance with CRA and ISO 27001, implement secure software development, and lead vulnerability management and incident response initiatives.

You will collaborate with architects, DevOps, ISMS managers, and stakeholders to translate security requirements into practical, robust solutions and to ensure products remain secure and future-ready across

Qualifications

• Experience in cybersecurity for software products, including AI-assisted analysis and automation.
• Experience with security testing, encryption, authentication, and secure communications.
• Experience with secure development practices, vulnerability management, and risk assessments.
• Knowledge of security standards and frameworks such as ISO 27001 and the Cyber Resilience Act (CRA).

Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Skills

Cybersecurity for software products

Security testing

Vulnerability management

Secure development practices

ISO 27001

Cyber Resilience Act (CRA)

Encryption

Authentication

Secure communications

Job description

TOMRA SYSTEMS ASA is seeking a Security Lead for RVM Software to advance and embed security across multiple development teams. You will drive compliance with CRA and ISO 27001, implement secure software development, and lead vulnerability management and incident response initiatives.

You will collaborate with architects, DevOps, ISMS managers, and stakeholders to translate security requirements into practical, robust solutions and to ensure products remain secure and future-ready across