Incident Manager

Klarna; Stockholms kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Klarna in Stockholm is seeking an experienced cyber incident manager to lead the response to high‑impact operational and cyber security incidents across Klarna's banking and financial services environment.

You will coordinate technical teams and senior stakeholders, keep incident workstreams moving, communicate decisions in real time, establish clear ownership, and drive root‑cause analysis and mitigations while applying DORA, NIS2, GDPR and PCI DSS.

Qualifications

• Experience leading high-impact cyber incidents or operations leadership.
• Background in incident management, cyber incident response or blue-team work.
• Strong ownership: drive progress and turn lessons learned into action.
• Technical understanding of financial services environments and AWS or similar cloud platforms.

Responsibilities

• Lead response to high-impact operational and cyber-security incidents.
• Coordinate with technical teams and stakeholders to keep incident workstreams moving.
• Make and communicate real-time decisions as priorities shift and information is incomplete.
• Establish clear ownership for each incident and drive root cause and mitigation.
• Apply regulatory obligations (DORA, NIS2, GDPR, PCI DSS) to incident management and reporting.

Skills

Cyber incident management

Incident response

Blue-team

Cloud AWS

Job description

Klarna, briefly

At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands‑on enough that the interesting part of the work lands with you, not someone else, you'll build with AI, not watch it happen.

Klarna, briefly

At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands‑on enough that the interesting part of the work lands with you, not someone else, you'll build with AI, not watch it happen.

This is the stretch zone. Come find out what you're capable of.

About The Role

When Klarna's systems or security posture come under real pressure, someone has to take charge of the response in real time - coordinating the right technical teams, keeping decisions moving, and closing the loop with senior stakeholders instead of letting action items stall. That's what this position exists to do.

You'll lead Klarna's response to high-impact operational and cyber‑security incidents across Klarna's banking and financial‑services environment - bringing order to situations where priorities shift quickly and the information in front of you is often incomplete.

This position is based in Stockholm and sits within Klarna's incident response team.

What You'll Do

• You'll lead the response to high-impact operational and cyber‑security incidents across Klarna's banking and financial‑services environment.
• You'll work closely with technical teams, domain owners, and senior stakeholders to keep incident workstreams moving, closing loops rather than letting action items stall.
• You'll make and communicate decisions in real time as priorities shift and information is incomplete.
• You'll establish clear ownership for each incident, challenge assumptions, and drive toward root cause and mitigation.
• You'll apply Klarna's regulatory incident obligations - including DORA, NIS2, GDPR, and PCI DSS - to how you run and report on incidents.

Who you are

• You've led high-impact incidents as a cyber incident manager or an operations lead, and you know how to bring order and decisive direction when it matters most.
• You have a background in incident management, particularly cyber incident response or blue-team work.
• You take real ownership: you drive progress and organizational change, continuously improve incident management, and bring an uncompromising attitude to ensuring lessons learned turn into action.
• You have a strong technical understanding on what underpins financial services and banking environments, and you've worked hands‑on with AWS or another large‑scale cloud environment.
• You create structure and clarity in fast-moving, ambiguous situations, and you are comfortable making decisions under pressure while staying calm and constructive.
• You communicate clearly and effectively, coordinating multiple stakeholders during high-pressure situations.
• You understand the regulatory incident obligations that apply to Klarna, including DORA, NIS2, GDPR, and PCI DSS.

Things you should know before applying

• This position is based in Stockholm and includes participation in a compensated on‑call rotation as part of the incident response team.
• Working together: we value co‑located teams; most teams currently meet in the office 2–3 days per week, and this varies by team and can change over time.
• Non‑obvious backgrounds are welcome. Diversity of skills, perspectives and backgrounds is how we create, innovate, and disrupt like no other.
• Final compensation will be based on the candidate's qualifications, skills, and experience.