Domain Security Lead

Overview

In this role you will act as the Domain Security Lead and BISO for Klarna's business domains, ensuring security is embedded in day-to-day operations and major decisions. You advise senior stakeholders, manage risk posture, and align security with business roadmaps to enable fast, safe development. You collaborate with first-line and second-line security functions to drive improvement programs and cultivate a security-conscious culture. This role offers broad ownership across payments, fraud prevention, banking, and engineering platforms in a leading fintech environment.

Retribuzione / Benefits

• pivotal role
• diverse senior team
• broad ownership across payments and banking
• opportunity to work on AI and large-scale platforms
• fintech industry exposure
• collaborative security culture

Responsabilità

• Own and communicate the security posture of assigned domains to senior management
• Identify and assess risk for new products and ongoing initiatives
• Define security requirements, data classifications, and dependencies early in design
• Lead security improvement programs and track remediation and metrics
• Establish domain security routines that fit team needs
• Coordinate audit management with internal and external auditors
• Provide security and compliance guidance to vendors and outsourcing arrangements
• Review incidents and coordinate post-incident reviews
• Grow the security culture through Security Champions programs
• Advocate for domain needs in security planning and initiatives

Requisiti fondamentali

• Several years of information security experience (BISO/security lead/architect/GRC/consulting)
• Strong risk management, threat modeling, secure design/engineering, and incident response
• Knowledge of ISO 27001, DORA, NIS2, PCI DSS, SOX; experience with audits
• Ability to translate business language to technical security detail across stakeholders
• Pragmatic enabling mindset to help teams ship securely
• Experience building security culture or communities (nice to have)
• Technical background in software engineering, cloud, or security engineering (valued)
• communication with senior stakeholders
• cross-functional collaboration
• problem-solving and pragmatism
• risk assessment
• threat modeling
• security governance and controls