Chief Information Security Officer - Klarna Bank USA

Klarna•Salt Lake City, UT

13d•Hybrid

About The Position

Klarna Bank USA operates as a regulated U.S. banking entity, which means its information security program answers not just to internal risk committees but to banking regulators and supervisory examination teams. As Chief Information Security Officer, Klarna Bank USA, you'll own that program end to end — the bank's cyber risk, its regulatory relationships, and how well it draws on Klarna's global Security organization without duplicating it. You'll be part of Klarna's global Security organization and report to the Group CISO. For matters relating to the U.S. bank entity, you'll also have a direct reporting and governance relationship with the Klarna Bank USA Chief Risk Officer.

Requirements

Worked in cybersecurity, information security, or technology risk within U.S. banking or another regulated financial institution.
Led or materially owned an information security program in a regulated financial institution.
Background in a de novo bank, industrial bank, fintech, or bank charter process is especially relevant.
Worked directly with U.S. banking regulators and regulatory examination teams.
Presented cybersecurity risk to Boards, executive management, and regulators.
Understand modern cloud infrastructure, software engineering, and technology platforms well enough to assess the risk in them yourself.
Operated in an environment where important technology or control capabilities are owned by a parent company, affiliate, or shared service, and know how to build clear accountability across that boundary.
Can tell which risks are material and which are theoretical, and act on that distinction instead of treating every finding the same way.
Take ownership of problems proactively.
Build relationships across organizational boundaries without relying on hierarchy.
Form views from evidence rather than from what worked at your last organization.

Nice To Haves

Can move between governance conversations and detailed technical discussions with the same audience.

Responsibilities

Own the information security and cybersecurity program for Klarna Bank USA — governance, strategy, policies and standards; risk assessments and control oversight; and security requirements for products, services, and material technology changes.
Lead identity and access security, cloud, infrastructure, and application security, data protection, and vulnerability and exposure management, along with security monitoring, detection, and response across the bank's environment.
Own incident management and cyber resilience, third-party and intra-group technology risk, security testing and assurance, and security awareness and training, and report on all of it to the Board and senior management.
Represent Klarna Bank USA to regulators and supervisory teams on information security and cybersecurity matters, and lead security-related regulatory examinations, reviews, and information requests.
Turn regulatory observations and commitments into effective, sustainable control improvements, and keep the bank in continuous examination readiness rather than treating compliance as a periodic exercise.
Connect Klarna Bank USA to the security capabilities Klarna operates group-wide, establishing clear accountability across entity and group boundaries and closing any gaps that are specific to the U.S. bank.
Advise the Klarna Bank USA CRO, CEO, Board, and Group CISO on the bank's cyber risk profile, turning security concerns into concrete recommendations and escalating material issues as they arise.
Move between Board-level discussions, regulatory meetings, architecture reviews, and significant security incidents, staying close to the substance of what you're accountable for.