Principal ICT and Security Operations Lead

We are on a mission to liberate humanity from all the meaningless time spent managing their purchases and finances, so they can do more of what they love. Klarna was founded on a bold belief: that people are capable of achieving the extraordinary, even when faced with the seemingly impossible. Our journey has been one of continuous learning, facing immense challenges head-on, dedicating countless hours of hard work, and never wavering in our commitment or resilience - and now we are looking for individuals to join us on our journey and contribute to our mission.

What You Will Do

Reporting directly to the Chief Security Risk Officer (CSRO) in the 2nd line of defense, you will lead and mentor a dynamic team responsible for the company's audit, compliance, and technical security operations oversight. Your position involves leading strategic oversight of Klarna’s security policies and compliance frameworks, ensuring alignment with business objectives and regulatory requirements. You will collaborate with senior stakeholders across the organization to develop security strategies that protect the company's assets and data while enhancing operational efficiencies and customer trust.

Key Responsibilities

• Lead, develop, and manage the EA Operations team, promoting a holistic approach to Klarna’s security, governance, and compliance initiatives.
• Design and implement comprehensive security strategies and frameworks that address Klarna’s risk landscape.
• Oversee the execution of regular security risk assessments, penetration testing, and compliance audits, ensuring all practices meet industry standards and regulatory requirements.
• Lead comprehensive audits such as SOX, ISAE (SOC2), PCAOB, SWIFT, PCI-DSS, ensuring Klarna’s compliance with all relevant financial and security regulations. Strategically guide the audit process from planning through execution, coordinating with internal teams and external auditors.
• Foster strong relationships with regulatory bodies, staying ahead of changes in compliance laws and standards to dynamically adapt Klarna’s policies and procedures.
• Drive the development and implementation of training programs to raise security and compliance awareness across all departments.
• Regularly report to Klarna’s senior management on the status of security and compliance efforts, providing strategic insights and recommendations for enhancements.

Who You Are

• A seasoned leader in security, governance, and compliance with a proven track record of managing diverse teams.
• Proficiency in both written and spoken English, enabling you to comprehend regulatory requirements and contracts effortlessly and lead meetings efficiently.
• Minimum of 7 years of experience as an Information Security Professional with a technical background, as well as experience in managing an ISMS or its components.
• Proven leadership skills with the ability to manage and inspire a team of security and compliance professionals.
• Experience in defining, testing (automation), and monitoring of controls with a solid grasp of their organizational impact, particularly in relation to Engineering teams.
• Thorough understanding of how information security assurance is implemented in practice, with a strong desire to optimize and simplify its application.
• Strong analytical skills with the ability to leverage data for informed decision-making. Basic Python and experience in prompt engineering (ChatGPT) is desired.
• Strong knowledge of global financial regulations, cybersecurity frameworks, and best practices (e.g., GDPR, PCI-DSS, ISO/IEC 27001).
• Strong communication and interpersonal skills, capable of engaging effectively with both technical teams and executive management.

Awesome to Have

• Experience with advanced JavaScript libraries and frameworks.
• Familiarity with CI/CD tools such as Jenkins and experience with cloud platforms like AWS.

Closing

• Please include a CV in English.