Senior Management, Platform & Infrastructure Audit
Security
Who We Are
About the Team
OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on the design and effectiveness of governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function executes a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risk, and operates with full, unrestricted access to systems, records, and personnel.
Within Internal Audit, the Platform & Infrastructure team sits inside the Global Platform & Engineering (GP&E) team and owns assurance over the technology foundation that keeps the exchange running: network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and the data pipelines feeding OKX's financial and operational systems. Reflecting a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations on a global scale.
About the Role
As Senior Manager, Platform & Infrastructure Audit, you'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. You'll bring subject matter expertise to both dimensions of AI in scope: auditing AI (assessing how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting) while also flexing into adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks, and partner closely with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment.
What You'll be Doing
-
Cloud Infrastructure & Platform Engineering Audit (SME): Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).
-
AI Use, Adoption & Governance: Two dimensions, both required.
-
Auditing AI: Assessing how AI/ML systems are built, deployed, and monitored - model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.
-
Auditing with AI: A demonstrated bias toward using AI in your own audit work - scoping, evidence review, control testing, script generation, and reporting - and an interest in helping the function build reusable AI-enabled audit tooling.
-
What We Look For in You
-
Crypto & Blockchain Acumen: Prior experience at a crypto exchange or with a crypto product is preferred.
-
Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.
-
Breadth Across Adjacent Platform Domains: Demonstrable experience auditing control design and operating effectiveness in several of the following:
-
Cloud security and identity - IAM, network segmentation, secrets management, encryption and key management
-
Site reliability and resilience - observability, incident and problem management, capacity, backup and disaster recovery
-
Software development lifecycle - code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk
-
Data engineering and analytics - integrity and quality of data pipelines and ETL processes
-
AI/ML platform and MLOps - model registries, feature stores, inference infrastructure, and the data feeding them
-
Nice to Haves
-
Cloud or Security Certifications: AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.
-
Crypto and blockchain literacy: regulated financial-services, fintech, or crypto experience.
-
Mandarin speaking
Perks & Benefits
-
Competitive total compensation package
-
L&D programs and Education subsidy for employees' growth and development
-
Various team building programs and company events
-
Wellness and meal allowances
-
Comprehensive healthcare schemes for employees and dependants
-
More that we love to tell you along the process!
OKX Statement:
OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
-
The salary range for this position is $171,000 - $257,000
-
The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site.
Notice:
All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.
Salary Range
USD 171,000 - 257,000 per year
About OKX
OKX is a leading global Web3 technology company and cryptocurrency exchange, dedicated to building the future of decentralized finance and digital asset ownership. With a robust presence and growing operations across Colombia, Argentina, and Mexico, we provide a secure, innovative, and user-friendly platform for millions worldwide to trade, invest, and explore the vast potential of the blockchain ecosystem. We're at the forefront of developing cutting-edge solutions, from advanced trading tools and DeFi protocols to immersive metaverse experiences and NFT marketplaces, all powered by our unwavering commitment to security and transparency. Our culture at OKX is driven by innovation, collaboration, and a passion for pushing the boundaries of what's possible in Web3. We foster an environment where bright minds are empowered to contribute to a decentralized future, thrive on challenging projects, and grow alongside pioneering technology. We value diversity of thought, encourage continuous learning, and believe in building a team that is as global and interconnected as the blockchain itself. Joining OKX means being part of a dynamic, fast-paced team that is shaping the next generation of the internet. If you're a blockchain professional eager to make a tangible impact and contribute to a truly global platform, OKX offers unparalleled opportunities. We're seeking visionary talent in LATAM to join our mission of making crypto and Web3 accessible to everyone, everywhere. Come build with us and play a pivotal role in accelerating the adoption of decentralized technologies, empowering individuals, and revolutionizing financial systems around the world.
Ready to Apply?
To submit your application for this position, please visit OKX's official website and follow their application process.
Related Security Jobs
Staff Machine Learning Engineer（Risk Intelligence/AI Agent）
OKXSan Jose, California, United States
Senior/Staff Java Engineer, Fraud Risk
OKXSingapore, Singapore
Senior Compliance Analyst, KYC
OKXSan Jose, California, United States
Staff/Senior Java Engineer, OKX Web3 Wallet
OKXRemote
Senior/Staff Engineer - Web3 - Onchain Data
OKXRemote
Deputy General Counsel, Web3 Products
OKXRemote
IT Security Engineer
Career HubRemote
Security Operations Centre Specialist
Career HubRemote
Chief Information Security Officer
Decentralized MastersRemote
Senior Offensive Security Penetration Tester - Crypto and Digital Assets, Senior Vice President
CitiSingapore, Singapore, Singapore
Application Security Engineer (AppSec)
W GroupCopenhagen, Capital Region of Denmark, Denmark
IAM/PAM Governance Specialist
W GroupUkraine