Position overviewThe Information Security Manager is responsible for establishing, coordinating, and maintaining all information security–related activities within the division. The role ensures compliance with relevant security standards and regulatory requirements (e.g. NIS2, ISO/IEC 27001, Cyber Resilience Act), supports secure processes across IT, OT, and product environments, and aligns divisional practices with Group Security Strategy. The position acts as the divisional subject‑matter expert and single point of contact for security, operating independently and cross‑functionally.Your Responsibilities <ul><li>Information Security Management: Define and maintain division‑specific security policies, standards, and procedures; perform risk assessments; manage the security risk register; and support correct information classification and protection</li><li>Regulatory Compliance (NIS2 / ISO 27001 / CRA): Lead divisional readiness for NIS2 and ISO/IEC 27001, coordinate audits and documentation, and support product‑related cybersecurity requirements in line with the Cyber Resilience Act; maintain a regulatory dotted‑line reporting relationship to the EVP to ensure transparency and escalation on compliance‑relevant matters</li><li>Security Operations &amp; Incident Handling: Serve as divisional coordinator for security incidents and align with Group processes, including vulnerability management and remediation tracking</li><li>Supplier &amp; Third‑Party Security: Conduct supplier security assessments, ensure contractual requirements are met, and follow up on deviations and corrective actions</li><li>Awareness &amp; Training: Coordinate mandatory security awareness activities and enable role‑based security competence across relevant teams</li><li>Project &amp; Product Security Support: Advise ISM, R&amp;D, Operations, and other functions on necessary security requirements, ensuring their integration into projects, products, systems, and processes</li><li>Governance, Process Oversight &amp; Reporting: Define, monitor, and continuously improve security‑relevant governance and compliance processes; act as senior escalation authority for internal and external audits; prepare regular reports on security status, risks, and KPIs for divisional management; and ensure close alignment with Group Security and other divisions</li></ul>

TOMRA was founded on an innovation in 1972 that began with the design, manufacturing and sale of reverse vending machines (RVMs) for automated collection of used beverage containers. Today TOMRA provides technology-led solutions that enable the circular economy with advanced collection and sorting systems that optimize resource recovery and minimize waste in the food, recycling and mining industries.

Information Security Manager*

About the Job

About the Company

Tomra

Similar Jobs

Senior Officer, Security & Governance

Senior Officer, Security & Governance

Senior IT Security GRC Specialist

Senior IT Security GRC Specialist

Information Systems Security Manager (ISSM)

Information Systems Security Manager (ISSM)

Director of Information Security

Director of Information Security

Global IT Security Expert - OT

Global IT Security Expert - OT

Risk Manager (Information and Cyber Risks)

Risk Manager (Information and Cyber Risks)

Information Security Engineer

Information Security Engineer

Senior IT Security Compliance Specialist

Senior IT Security Compliance Specialist

Information Security Manager

Information Security Manager

Security Specialist

Security Specialist