Product Security Officer

**Company Description**
TOMRA Recycling is a global leader in automated sensor-based waste sorting and a pioneer in this field - currently TOMRA Recycling has an installed base of almost 6,460 units in more than 40 markets.

At TOMRA, we want people to innovate, be passionate about their work and take responsibility. We encourage the freedom to innovate and take risks that lead to breakthroughs that challenge the status quo. We value passion that is focussed and committed to success. We believe in a responsible and safe mindset that takes care of our customers, products and employees.

Join the Resource Revolution

As a **Product Security Officer**, you will play a key role in ensuring the security of our industrial sorting machines from design to deployment. You will work cross-functionally with engineering, product development, and operational teams to integrate security best practices and safeguard our products against evolving threats.

**Your Responsibilities in detail**:

- Identify, assess, and prioritize security risks related to sorting machines throughout the product lifecycle.
- Collaborate with engineering and product teams to integrate security best practices and secure design principles during the development phase.
- Ensure products meet relevant industry security standards, regulations, and certifications (e.g., ISO, IEC).
- Conduct regular security testing, vulnerability assessments, and audits to identify and address potential threats.
- Lead incident response efforts in the event of security breaches, working to mitigate risks and prevent recurrence.
- Maintain comprehensive security documentation for all products, including security protocols, testing results, and compliance records.
- Provide ongoing security training and awareness programs for development, engineering, and operational teams.
- Work closely with internal teams, third-party vendors, and customers to ensure product security requirements are met.
- Oversee the implementation of security features and patches for existing products in the field.

**Qualifications**
- Background in computer science with expertise in cybersecurity.
- Understanding of industrial control systems (ICS) and embedded systems security.
- Experience in secure software development, threat modeling, and risk management.
- Knowledge of encryption, authentication, and secure communication protocols.
- Familiarity with security testing tools, penetration testing, and vulnerability scanning.
- Ability to communicate complex security concepts to non-technical stakeholders.
- Experience with ISO 27001, IEC 62443, or similar frameworks is a big plus - willingness to become an expert is essential.
- Strong problem-solving skills and ability to adapt to evolving security challenges.
- Experience in the industrial manufacturing or automation industry is a plus.
- Familiarity with GDPR, NIST, or other data protection regulations is an advantage.

**Additional Information** Our Benfits**:

- 30 days annual leave
- Hybrid working (3x per week on site, 2x per week mobile working)
- Flexible working hours
- Supported company pension scheme
- Supported group accident insurance
- Opportunity to purchase TOMRA shares at a discount
- Employee discounts on various online shops via corporate benefits
- Company (e-)bike leasing
- Opportunity to become a member of the company fitness network ‘Wellpass’
- ERG (employee resource groups) for women, LGTBQ, Roots
- Health Management Programme
- On-site canteen and car park

Please send us your motivation letter and your CV including your:

- Salary expectations (gross annual salary)
- Period of notice
- *TOMRA does not differentiate on the basis of gender, race or ethnicity, religion, color, sexual orientation or identity, disability, age, or other protected statuses as given by applicable law. We are committed to creating a diverse and inclusive environment and are proud to be an equal opportunity employer._
- Most importantly, it’s a match_

LI-MH1