Domain Security Lead

PLP Group; Stockholms kommun; On-site; SEK 1,321,000 - 1,747,000; Full time

Job summary

Klarna is seeking a Domain Security Lead (DSL) to act as the BISO for several business domains, including payments, fraud prevention, banking, and partner integrations. You will bridge business objectives with security requirements and ensure security is embedded in day‑to‑day operations so domains move fast and safely.

You will partner with domain leads and senior stakeholders, own each domain's security posture, conduct risk assessments, and drive improvements.

Qualifications

• Several years of information security experience, ideally in a BISO or security lead role.
• Strong risk management, threat modeling, secure design and incident response.
• Familiar with ISO 27001, DORA, NIS2, PCI DSS, SOX and audits.
• Ability to translate between business language and technical security details.

Responsibilities

• Partner with Domain Leads and senior stakeholders to align plans, ownership of security posture.
• Lead, perform and support risk identification and assessments for new products and initiatives.
• Help engineering and product teams identify security requirements, data classifications, and dependencies early.
• Drive security improvement programs and manage security metrics, remediation work.
• Establish and maintain domain security routines that fit team needs.
• Coordinate audit management with internal/external auditors and follow up on findings.
• Act as the local security and compliance expert, including vendor/outsourcing support.
• Review security incidents and vulnerabilities and support retrospectives and root cause analyses.
• Grow the security culture by leading the Security Champions community.
• Advocate for domain needs in Klarna's security planning and improvement initiatives.

Job description

Domain Security LeadJob detailsEngineering / EngineeringStockholm, Milan, LondonFull-time£102,138 GBP - £135,068 GBPAs a Domain Security Lead (DSL), you act as the Business Information Security Officer (BISO) for a set of business domains at Klarna, for example payments, fraud prevention, banking, partner integrations, or engineering platforms. You are the bridge between business objectives and security requirements: you develop deep insight into the threats, vulnerabilities, systems, data, and risks unique to your assigned problem spaces, and you make sure security is embedded in day-to-day operations and major decisions so your domains can move fast, safely.You'll join the Security Enablement team within our first line of defense, working in close collaboration with our second-line assurance functions. You are the primary point of contact for all security matters in your domains: a strategic advisor and enabler.Our vision: enable Klarna to provide market-leading, secure, high-quality, and compliant solutions that everyone loves developing and customers love using.## **What you'll do*** Partner with Domain Leads and senior stakeholders to align business plans, roadmaps, and security practices. Take full ownership of your domains' security posture and communicate it clearly to senior management.* Lead, perform, and support risk identification and assessments, both for new products and initiatives before go-live and through periodic risk reviews.* Help engineering and product teams identify security requirements, data classifications, and dependencies early in the design process.* Drive security improvement programs within your area of expertise, and manage security engineering metrics, follow-up, and remediation work.* Establish and maintain domain security routines that fit the teams' actual needs.* Coordinate audit management: liaise with internal and external auditors, facilitate their inquiries, and follow up on the resolution of findings.* Act as the local expert on security and compliance matters, including support for third-party vendors and outsourcing management.* Review security incidents and vulnerabilities, and support retrospectives and root cause analyses.* Grow the security culture: lead the Security Champions community in your domains and encourage participation in security training and competence development.* Advocate for your domains' needs in Klarna's overall security planning and improvement initiatives.## ## **Who you are*** Several years of experience in information security, ideally in a BISO, security lead, security architect, GRC, or security consulting role, preferably within fintech, banking, or another regulated industry.* Strong grasp of risk management, threat modeling, secure design and engineering practices, and incident response.* Working knowledge of relevant regulatory and compliance frameworks such as ISO 27001, DORA, NIS2, PCI DSS, and SOX, and experience supporting audits against them.* Comfortable operating across the full stack of stakeholders, from engineers and product managers to domain leadership and auditors, and translating between business language and technical security detail.* A pragmatic enabler: you help teams find secure ways to ship, rather than just saying no.* Experience building security culture and communities (e.g., security champions programs) is a strong plus.* A technical background (software engineering, cloud infrastructure, or security engineering) is highly valued, as the role sits within our engineering competence.## **What we offer*** A pivotal role with broad ownership and direct influence on how one of the world's leading fintechs secures its products.* A diverse, senior team of security specialists to learn from and collaborate with.* The chance to work on security challenges spanning payments, banking, AI, fraud prevention, and large-scale engineering platforms.