Information Security Manager

About the role

TOMRA is seeking an Information Security Manager to lead and coordinate all security‑related activities within its division. The role ensures that the division complies with relevant standards and regulations while supporting secure processes across IT, OT, and product environments.

Key responsibilities

• Define, maintain and enforce division‑specific security policies, standards and procedures.
• Conduct risk assessments, manage the security risk register and oversee information classification and protection.
• Lead readiness for NIS2, ISO/IEC 27001 and the Cyber Resilience Act, coordinate audits and maintain regulatory reporting.
• Act as the divisional coordinator for security incidents, vulnerability management and remediation tracking.
• Perform supplier and third‑party security assessments, ensure contractual security requirements are met and follow up on corrective actions.
• Organise mandatory security awareness activities and enable role‑based security competence.
• Provide security guidance to ISM, R&D, Operations and other functions to embed security requirements into projects and products.

Required profile

• Proven experience in information security management within an industrial or technology environment.
• Strong knowledge of NIS2, ISO/IEC 27001 and the Cyber Resilience Act.
• Ability to work independently, coordinate cross‑functional teams and act as a single point of contact for security matters.

Required skills

• NIS2 compliance
• ISO/IEC 27001 implementation
• Cyber Resilience Act requirements
• Risk assessment methodology
• Vulnerability management
• Security incident coordination