Domain Security Lead: Enable Secure Fintech Growth

PLP Group; Stockholms kommun; On-site; SEK 1,321,000 - 1,747,000; Full time

Job summary

Klarna is seeking a Domain Security Lead (DSL) to act as the BISO for several business domains, including payments, fraud prevention, banking, and partner integrations. You will bridge business objectives with security requirements and ensure security is embedded in day‑to‑day operations so domains move fast and safely.

You will partner with domain leads and senior stakeholders, own each domain's security posture, conduct risk assessments, and drive improvements.

Qualifications

• Several years of information security experience, ideally in a BISO or security lead role.
• Strong risk management, threat modeling, secure design and incident response.
• Familiar with ISO 27001, DORA, NIS2, PCI DSS, SOX and audits.
• Ability to translate between business language and technical security details.

Responsibilities

• Partner with Domain Leads and senior stakeholders to align plans, ownership of security posture.
• Lead, perform and support risk identification and assessments for new products and initiatives.
• Help engineering and product teams identify security requirements, data classifications, and dependencies early.
• Drive security improvement programs and manage security metrics, remediation work.
• Establish and maintain domain security routines that fit team needs.
• Coordinate audit management with internal/external auditors and follow up on findings.
• Act as the local security and compliance expert, including vendor/outsourcing support.
• Review security incidents and vulnerabilities and support retrospectives and root cause analyses.
• Grow the security culture by leading the Security Champions community.
• Advocate for domain needs in Klarna's security planning and improvement initiatives.

Job description

Klarna is seeking a Domain Security Lead (DSL) to act as the BISO for several business domains, including payments, fraud prevention, banking, and partner integrations. You will bridge business objectives with security requirements and ensure security is embedded in day‑to‑day operations so domains move fast and safely.

You will partner with domain leads and senior stakeholders, own each domain's security posture, conduct risk assessments, and drive improvements.