Engineering Risk Assurance Lead

Klarna; Stockholms kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Klarna seeks a Risk Control Manager in Engineering Assurance to plan and deliver risk-based reviews across software delivery, cloud infrastructure, cybersecurity, IAM, and third-party risk. You will translate regulatory obligations into testable controls, evaluate evidence, and present findings to senior stakeholders.

This role favors candidates with technology assurance, ICT risk, IT audit, or GRC engineering experience, able to challenge engineering teams with independent judgment.

Qualifications

• Experience in technology assurance, ICT risk, IT audit, security assurance, or GRC engineering.
• Ability to turn regulatory requirements into testable technical controls.
• Ability to assess evidence, identify weaknesses, and draw defensible conclusions.
• Experience in regulated or high-control environments is a plus.

Responsibilities

• Plan and deliver risk-based assurance reviews across engineering and technology.
• Review software delivery, cloud infrastructure, cybersecurity, IAM, change management, incident management, resilience, and third-party risk.
• Translate regulatory obligations into clear, testable control expectations.
• Evaluate evidence and produce defensible findings and recommendations for senior stakeholders.
• Maintain independence from engineering teams while collaborating.
• Help build automated testing and continuous control monitoring as assurance moves toward continuous delivery.

Skills

IT audit

ICT risk

Security assurance

GRC engineering

Cloud knowledge

Regulatory frameworks

Tools

GRC tooling

Cloud platforms

Job description

Klarna seeks a Risk Control Manager in Engineering Assurance to plan and deliver risk-based reviews across software delivery, cloud infrastructure, cybersecurity, IAM, and third-party risk. You will translate regulatory obligations into testable controls, evaluate evidence, and present findings to senior stakeholders.

This role favors candidates with technology assurance, ICT risk, IT audit, or GRC engineering experience, able to challenge engineering teams with independent judgment.