Domain Security Lead

Klarna; Milano; In loco; EUR 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Klarna is seeking a Domain Security Lead to act as the Business Information Security Officer for assigned domains such as payments, fraud prevention, banking, or partner integrations. You will align business plans with security practices, own security posture, and drive risk assessments across the lifecycle.

As a senior security advisor, you will collaborate with engineers, product teams, and auditors, fostering a security-conscious culture and ensuring compliant, high-quality solutions.

Competenze

• Several years of information security experience, ideally in fintech or regulated industry.
• Strong grasp of risk management, threat modeling, secure design and incident response.
• Familiar with ISO 27001, DORA, NIS2, PCI DSS, SOX and audits.

Mansioni

• Partner with Domain Leads and senior stakeholders to align security practices with business plans and roadmaps.
• Own domains' security posture; communicate to senior management; drive risk assessments pre-go-live and in reviews.
• Identify security requirements, data classifications, and dependencies early in design; support remediation and audits.

Conoscenze

Information security

Risk management

Threat modeling

Compliance knowledge

Security architecture

Descrizione del lavoro

Job-ID: b5b3ecfa-6a43-4daf-b390-a5329fd93cf1Location: Warsaw; Stockholm; Milan; LondonSalary: - GBPType: Full timePosted: Contact: a Domain Security Lead (DSL), you act as the Business Information Security Officer (BISO) for a set of business domains at Klarna, for example payments, fraud prevention, banking, partner integrations, or engineering platforms. You are the bridge between business objectives and security requirements: you develop deep insight into the threats, vulnerabilities, systems, data, and risks unique to your assigned problem spaces, and you make sure security is embedded in day-to-day operations and major decisions so your domains can move fast, safely. You'll join the Security Enablement team within our first line of defense, working in close collaboration with our second-line assurance functions. You are the primary point of contact for all security matters in your domains: a strategic advisor and enabler. Our vision: enable Klarna to provide market-leading, secure, high-quality, and compliant solutions that everyone loves developing and customers love using. What you'll do Partner with Domain Leads and senior stakeholders to align business plans, roadmaps, and security practices. Take full ownership of your domains' security posture and communicate it clearly to senior management. Lead, perform, and support risk identification and assessments, both for new products and initiatives before go-live and through periodic risk reviews. Help engineering and product teams identify security requirements, data classifications, and dependencies early in the design process. Drive security improvement programs within your area of expertise, and manage security engineering metrics, follow-up, and remediation work. Establish and maintain domain security routines that fit the teams' actual needs. Coordinate audit management: liaise with internal and external auditors, facilitate their inquiries, and follow up on the resolution of findings. Act as the local expert on security and compliance matters, including support for third-party vendors and outsourcing management. Review security incidents and vulnerabilities, and support retrospectives and root cause analyses. Grow the security culture: lead the Security Champions community in your domains and encourage participation in security training and competence development. Advocate for your domains' needs in Klarna's overall security planning and improvement initiatives. Who you are Several years of experience in information security, ideally in a BISO, security lead, security architect, GRC, or security consulting role, preferably within fintech, banking, or another regulated industry. Strong grasp of risk management, threat modeling, secure design and engineering practices, and incident response. Working knowledge of relevant regulatory and compliance frameworks such as ISO 27001, DORA, NIS2, PCI DSS, and SOX, and experience supporting audits against them. Comfortable operating across the full stack of stakeholders, from engineers and product managers to domain leadership and auditors, and translating between business language and technical security detail. A pragmatic enabler: you help teams find secure ways to ship, rather than just saying no. Experience building security culture and communities (e.g., security champions programs) is a strong plus. A technical background (software engineering, cloud infrastructure, or security engineering) is highly valued, as the role sits within our engineering competence. What we offer A pivotal role with broad ownership and direct influence on how one of the world's leading fintechs secures its products. A diverse, senior team of security specialists to learn from and collaborate with. The chance to work on security challenges spanning payments, banking, AI, fraud prevention, and large-scale engineering platforms.

Domain Security Lead milan, lombardy, Italy