Domain Security Lead
Pubblicato il 26-10-2026 - Klarna in Milano
Overview
In this role you will act as the Domain Security Lead and BISO for Klarna's business domains, ensuring security is embedded in day-to-day operations and major decisions. You advise senior stakeholders, manage risk posture, and align security with business roadmaps to enable fast, safe development. You collaborate with first-line and second-line security functions to drive improvement programs and cultivate a security-conscious culture. This role offers broad ownership across payments, fraud prevention, banking, and engineering platforms in a leading fintech environment.
Retribuzione / Benefits
- pivotal role
- diverse senior team
- broad ownership across payments and banking
- opportunity to work on AI and large-scale platforms
- fintech industry exposure
- collaborative security culture
Responsabilità
- Own and communicate the security posture of assigned domains to senior management
- Identify and assess risk for new products and ongoing initiatives
- Define security requirements, data classifications, and dependencies early in design
- Lead security improvement programs and track remediation and metrics
- Establish domain security routines that fit team needs
- Coordinate audit management with internal and external auditors
- Provide security and compliance guidance to vendors and outsourcing arrangements
- Review incidents and coordinate post-incident reviews
- Grow the security culture through Security Champions programs
- Advocate for domain needs in security planning and initiatives
Requisiti fondamentali
- Several years of information security experience (BISO/security lead/architect/GRC/consulting)
- Strong risk management, threat modeling, secure design/engineering, and incident response
- Knowledge of ISO 27001, DORA, NIS2, PCI DSS, SOX; experience with audits
- Ability to translate business language to technical security detail across stakeholders
- Pragmatic enabling mindset to help teams ship securely
- Experience building security culture or communities (nice to have)
- Technical background in software engineering, cloud, or security engineering (valued)
- communication with senior stakeholders
- cross-functional collaboration
- problem-solving and pragmatism
- risk assessment
- threat modeling
- security governance and controls