Shape the Future of Secure Software at TOMRA

Capus AS; Asker; On-site; NOK 1,100,000 - 1,700,000; Full time

Job summary

TOMRA Collection is seeking a Security Lead for RVM Software to strengthen security across development, testing, and operations. You will drive incident response, vulnerability management, and ensure compliance with evolving cyber resilience standards while guiding architecture decisions.

You will collaborate with ISMS, IT, and software teams to implement practical security controls and scalable processes suited for next‑generation reverse vending machines.

Qualifications

• Experience securing software products and development processes.
• Experience with encryption, authentication, and secure communications.
• Knowledge of ISO 27001 and Cyber Resilience Act requirements.

Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act and ISO 27001.
• Establish and continuously improve security-related processes.
• Coordinate security activities with development teams and stakeholders.
• Support security requirements, architecture reviews, and technical decisions.
• Plan and follow up on security testing and verification.
• Own security documentation and customer dialogues related to security.
• Coach and raise security competence across teams.

Skills

Cybersecurity for software products

Security testing

Secure development practices

Compliance frameworks (ISO 27001, CRA)

Job description

The RVM Software department at TOMRA Collection is responsible for developing and maintaining software for TOMRA’s reverse vending machines (RVMs). The department is made up of more than 30 developers, organized into six cross-functional teams where eachteamowns a functional part of the RVM. Our technology spans from OS-level components and microcontrollers to application development, user interfaces, and advanced computer vision.

We are currently looking for a Security Lead for RVM Software who will help ensure that our software products and development processes meet current and future security requirements. This role will be instrumental in driving compliance with the Cyber Resilience Act and ISO 27001, secure software development practices, vulnerability management, and the continuous improvement of our security initiatives.

The Role

As Security Lead, you will play a key role in advancing and embedding security practices across RVM Software. You will work closely with development teams, architects, and the DevOps function, as well as key stakeholders such as the ISMS Manager, Group IT, and Digital Software. Through technical leadership, competence building, and the establishing of effective processes, you will help translate security requirements into practical solutions and ensure our teams deliver robust, secure, and future-ready products.

Key Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Who Are We Looking For?

We believe you have experience in several of the following areas:

• Cybersecurity for software products, with AI serving as a key enabler for analysis, automation, and secure software development.
• Development and security testing, including experience with encryption, authentication, and secure communications.
• Secure development practices, including vulnerability management, incident management, and risk assessments.
• Security standards and frameworks such as ISO 27001 and the Cyber Resilience Act.

Personal Qualities

We are looking for someone who:

• Has strong professional integrity and a genuine passion for security.
• Can translate security requirements into practical and implementable solutions.
• Is an effective communicator and enjoys influencing others without necessarily having formal line management responsibility.
• Enjoy building networks and foster understanding and engagement around security topics across different disciplines.

Why TOMRA?

At TOMRA, you will have:

• A central role in an area of growing importance to our products and customers.
• The opportunity to shape how security is integrated into the software platforms of the future.
• Collaboration with highly skilled technologists.
• An international environment with modern technologies and complex technical challenges.
• The opportunity to contribute to a more sustainable world through technology.