Domain Security Lead

Klarna; Bardi; On-site; EUR 120,000 - 180,000; Full time

Job summary

Klarna seeks a Domain Security Lead and BISO to embed security in day-to-day operations and major decisions across business domains. You will advise senior stakeholders, manage risk posture, and align security with roadmaps to enable fast, safe development.

You will own security posture across payments, fraud, banking and engineering platforms in a leading fintech environment, driving improvements and cultivating a security-conscious culture.

Qualifications

• Multiple years of information security experience in BISO/security lead roles.
• Strong risk management, threat modeling and secure design skills.
• Experience with ISO 27001, DORA, NIS2, PCI DSS, SOX and audits.
• Ability to translate business language to technical security detail.
• Proactive, pragmatic mindset to enable teams to ship securely.

Responsibilities

• Own and communicate the security posture of assigned domains to senior management.
• Identify and assess risk for new products and ongoing initiatives.
• Define security requirements, data classifications, and dependencies early in design.
• Lead security improvement programs and track remediation and metrics.
• Establish domain security routines that fit team needs.
• Coordinate audit management with internal and external auditors.
• Provide security and compliance guidance to vendors and outsourcing arrangements.
• Review incidents and coordinate post-incident reviews.
• Grow the security culture through Security Champions programs.

Skills

BISO/security lead

Risk management

Threat modeling

Secure design/engineering

Incident response

Security governance and controls

Communication with senior stakeholders

Cross-functional collaboration

Pragmatic enabling mindset

Security culture development

Job description

In this role you will act as the Domain Security Lead and BISO for Klarna’s business domains, ensuring security is embedded in day-to-day operations and major decisions. You advise senior stakeholders, manage risk posture, and align security with business roadmaps to enable fast, safe development. You collaborate with first-line and second-line security functions to drive improvement programs and cultivate a security-conscious culture. This role offers broad ownership across payments, fraud prevention, banking, and engineering platforms in a leading fintech environment.

• diverse senior team
• broad ownership across payments and banking
• opportunity to work on AI and large-scale platforms
• fintech industry exposure
• collaborative security culture
• Own and communicate the security posture of assigned domains to senior management
• Identify and assess risk for new products and ongoing initiatives
• Define security requirements, data classifications, and dependencies early in design
• Lead security improvement programs and track remediation and metrics
• Establish domain security routines that fit team needs
• Coordinate audit management with internal and external auditors
• Provide security and compliance guidance to vendors and outsourcing arrangements
• Review incidents and coordinate post-incident reviews
• Grow the security culture through Security Champions programs
• Advocate for domain needs in security planning and initiatives
• Several years of information security experience (BISO/security lead/architect/GRC/consulting)
• Strong risk management, threat modeling, secure design/engineering, and incident response
• Knowledge of ISO 27001, DORA, NIS2, PCI DSS, SOX; experience with audits
• Ability to translate business language to technical security detail across stakeholders
• Pragmatic enabling mindset to help teams ship securely
• Experience building security culture or communities (nice to have)
• Technical background in software engineering, cloud, or security engineering (valued)
• communication with senior stakeholders
• cross-functional collaboration
• problem-solving and pragmatism
• threat modeling
• security governance and controls

Domain Security Lead pavia, lombardia, it