Domain Security Lead (DSL)

As a Domain Security Lead (DSL), you act as the Business Information Security Officer (BISO) for a set of business domains at Klarna, for example payments, fraud prevention, banking, partner integrations, or engineering platforms. You are the bridge between business objectives and security requirements: you develop deep insight into the threats, vulnerabilities, systems, data, and risks unique to your assigned problem spaces, and you make sure security is embedded in day-to-day operations and major decisions so your domains can move fast, safely. You'll join the Security Enablement team within our first line of defense, working in close collaboration with our second-line assurance functions.

You are the primary point of contact for all security matters in your domains: a strategic advisor and enabler.

Our vision: enable Klarna to provide market-leading, secure, high-quality, and compliant solutions that everyone loves developing and customers love using.

What you'll do

• Partner with Domain Leads and senior stakeholders to align business plans, roadmaps, and security practices.
• Take full ownership of your domains' security posture and communicate it clearly to senior management.
• Lead, perform, and support risk identification and assessments, both for new products and initiatives before go-live and through periodic risk reviews.
• Help engineering and product teams identify security requirements, data classifications, and dependencies early in the design process.
• Drive security improvement programs within your area of expertise, and manage security engineering metrics, follow-up, and remediation work.
• Establish and maintain domain security routines that fit the teams' actual needs.
• Coordinate audit management: liaise with internal and external auditors, facilitate their inquiries, and follow up on the resolution of findings.
• Act as the local expert on security and compliance matters, including support for third-party vendors and outsourcing management.
• Review security incidents and vulnerabilities, and support retrospectives and root cause analyses.
• Grow the security culture: lead the Security Champions community in your domains and encourage participation in security training and competence development.
• Advocate for your domains' needs in Klarna's overall security planning and improvement initiatives.