Incident Manager

Deel; Stockholms kommun; On-site; SEK 900,000 - 1,300,000; Full time

Benefits offered by this job

On-call rotation

Job summary

Klarna in Stockholm is seeking an experienced cyber incident manager to lead the response to high-impact operational and cyber-security incidents across a global, regulated banking and financial-services environment.

You will coordinate technical teams, communicate decisions in real time, establish clear ownership for each incident, and apply regulatory obligations such as DORA, NIS2, GDPR and PCI DSS while working hands-on with cloud environments like AWS.

Qualifications

• Experience leading cyber incident responses and incident management.
• Ability to coordinate across technical teams and senior stakeholders.
• Proven track record of driving root-cause and mitigations.

Responsibilities

• Lead real-time response to high-impact operational and cyber-security incidents.
• Coordinate with technical teams, domain owners, and senior stakeholders to maintain incident workstreams.
• Make and communicate real-time decisions as priorities shift.
• Apply regulatory obligations (DORA, NIS2, GDPR, PCI DSS) to incident handling and reporting.

Skills

Incident management

Cyber incident response

Stakeholder coordination

Decision making under pressure

Regulatory compliance knowledge

Tools

AWS

Job description

Klarna, briefly At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands-on enough that the interesting part of the work lands with you, not someone else, you'll build with AI, not watch it happen. This is the stretch zone. Come find out what you're capable of.

About the role

When Klarna's systems or security posture come under real pressure, someone has to take charge of the response in real time - coordinating the right technical teams, keeping decisions moving, and closing the loop with senior stakeholders instead of letting action items stall. That's what this position exists to do. You'll lead Klarna's response to high-impact operational and cyber-security incidents across a global, regulated banking and financial-services environment - bringing order to situations where priorities shift quickly and the information in front of you is often incomplete. This position is based in Stockholm and sits within Klarna's incident response team.

What you'll do

You'll lead the response to high-impact operational and cyber-security incidents across Klarna's banking and financial-services environment. You'll work closely with technical teams, domain owners, and senior stakeholders to keep incident workstreams moving, closing loops rather than letting action items stall. You'll make and communicate decisions in real time as priorities shift and information is incomplete. You'll establish clear ownership for each incident, challenge assumptions, and drive toward root cause and mitigation. You'll apply Klarna's regulatory incident obligations - including DORA, NIS2, GDPR, and PCI DSS - to how you run and report on incidents.

Who you are

You've led high-impact incidents as a cyber incident manager or an operations lead, and you know how to bring order and decisive direction when it matters most. You have a background in incident management, particularly cyber incident response or blue-team work. You take real ownership: you drive progress and organizational change, continuously improve incident management, and bring an uncompromising attitude to ensuring lessons learned turn into action. You have a strong technical understanding on what underpins financial services and banking environments, and you've worked hands-on with AWS or another large-scale cloud environment. You create structure and clarity in fast-moving, ambiguous situations, and you are comfortable making decisions under pressure while staying calm and constructive. You communicate clearly and effectively, coordinating multiple stakeholders during high-pressure situations. You understand the regulatory incident obligations that apply to Klarna, including DORA, NIS2, GDPR, and PCI DSS.

Things you should know before applying

This position is based in Stockholm and includes participation in a compensated on-call rotation as part of the incident response team. Working together: we value co-located teams; most teams currently meet in the office 2-3 days per week, and this varies by team and can change over time. Non-obvious backgrounds are welcome. Diversity of skills, perspectives and backgrounds is how we create, innovate, and disrupt like no other. Final compensation will be based on the candidate's qualifications, skills, and experience.