Security Lead for RVM Software

Shape the Future of Secure Software at TOMRA The RVM Software department at TOMRA Collection is responsible for developing and maintaining software for TOMRA’s reverse vending machines (RVMs). The department is made up of more than 30 developers, organized into six cross-functional teams where each team owns a functional part of the RVM. Our technology spans from OS-level components and microcontrollers to application development, user interfaces, and advanced computer vision. We are currently looking for a Security Lead for RVM Software who will help ensure that our software products and development processes meet current and future security requirements. This role will be instrumental in driving compliance with the Cyber Resilience Act and ISO 27001, secure software development practices, vulnerability management, and the continuous improvement of our security initiatives. The Role As Security Lead, you will play a key role in advancing and embedding security practices across RVM Software. You will work closely with development teams, architects, and the DevOps function, as well as key stakeholders such as the ISMS Manager, Group IT, and Digital Software. Through technical leadership, competence building, and the establishing of effective processes, you will help translate security requirements into practical solutions and ensure our teams deliver robust, secure, and future-ready products. Key Responsibilities

• Drive operational security activities within RVM Software, including vulnerability management and incident response.
• Contribute to compliance with the Cyber Resilience Act (CRA) and other relevant security standards and regulations.
• Establish, maintain, and continuously improve security-related processes.
• Coordinate security related activities across development teams and with relevant stakeholders.
• Contribute to security requirements, architecture reviews, and technical decision-making.
• Plan and follow up on security testing and verification activities.
• Own security documentation and support customer dialogues related to security.
• Build security competence through coaching, training, and awareness initiatives.

Who Are We Looking For? We believe you have experience in several of the following areas:

• Cybersecurity for software products, with AI serving as a key enabler for analysis, automation, and secure software development.
• Development and security testing, including experience with encryption, authentication, and secure communications.
• Secure development practices, including vulnerability management, incident management, and risk assessments.
• Security standards and frameworks such as ISO 27001 and the Cyber Resilience Act.

Personal Qualities We are looking for someone who:

• Has strong professional integrity and a genuine passion for security.
• Can translate security requirements into practical and implementable solutions.
• Is an effective communicator and enjoys influencing others without necessarily having formal line management responsibility.
• Enjoy building networks and foster understanding and engagement around security topics across different disciplines.

Why TOMRA? At TOMRA, you will have:

• A central role in an area of growing importance to our products and customers.
• The opportunity to shape how security is integrated into the software platforms of the future.
• Collaboration with highly skilled technologists.
• An international environment with modern technologies and complex technical challenges.
• The opportunity to contribute to a more sustainable world through technology.