The Role
Owns technical audit projects covering cloud infrastructure, DevOps, CI/CD, infrastructure as code, containerization, IT general controls, AI/ML governance, cloud security, identity, resilience, secure SDLC, and data engineering. Identifies emerging technology risks, performs control testing, uses AI to enhance audit work, and partners with Engineering, SRE, and Security teams on practical remediation in a global crypto exchange environment.
Summary Generated by Built In
About the Team About the Role What You'll be Doing What We Look For in You
OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on the design and effectiveness of governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function executes a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risk, and operates with full, unrestricted access to systems, records, and personnel.
Within Internal Audit, the Platform & Infrastructure team sits inside the Global Platform & Engineering (GP&E) team and owns assurance over the technology foundation that keeps the exchange running: network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and the data pipelines feeding OKX's financial and operational systems. Reflecting a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations on a global scale.
As Senior Manager, Platform & Infrastructure Audit, you'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. You'll bring subject matter expertise to both dimensions of AI in scope: auditing AI (assessing how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting) while also flexing into adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks, and partner closely with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment.
- Cloud Infrastructure & Platform Engineering Audit (SME): Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).
- AI Use, Adoption & Governance: Two dimensions, both required.
- Auditing AI: Assessing how AI/ML systems are built, deployed, and monitored — model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.
- Auditing with AI: A demonstrated bias toward using AI in your own audit work — scoping, evidence review, control testing, script generation, and reporting — and an interest in helping the function build reusable AI-enabled audit tooling.
- Crypto & Blockchain Acumen: Prior experience at a crypto exchange or with a crypto product is preferred.
- Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.
- Breadth Across Adjacent Platform Domains: Demonstrable experience auditing control design and operating effectiveness in several of the following:
- Cloud security and identity — IAM, network segmentation, secrets management, encryption and key management
- Site reliability and resilience — observability, incident and problem management, capacity, backup and disaster recovery
- Software development lifecycle — code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk
- Data engineering and analytics — integrity and quality of data pipelines and ETL processes
- AI/ML platform and MLOps — model registries, feature stores, inference infrastructure, and the data feeding them
Nice to Haves
Perks & Benefits - Cloud or Security Certifications: AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.
- Crypto and blockchain literacy: regulated financial-services, fintech, or crypto experience.
- Mandarin speaking
- Competitive total compensation package
- L&D programs and Education subsidy for employees' growth and development
- Various team building programs and company events
- Wellness and meal allowances
- Comprehensive healthcare schemes for employees and dependants
- More that we love to tell you along the process!
OKX Statement:
OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Notice:
All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.
Skills Required
- Hands-on experience auditing cloud platforms, including AWS and Alibaba Cloud
- Experience auditing containerization and orchestration technologies, including Docker and Kubernetes
- Experience auditing CI/CD pipelines and infrastructure as code, including Terraform and Helm
- Experience assessing AI/ML systems, including model and data lineage, training-data provenance, access controls, human-in-the-loop controls, evaluation, and drift monitoring
- Demonstrated use of AI tools for audit scoping, evidence review, control testing, script generation, or reporting
- Experience auditing cloud security and identity controls, including IAM, network segmentation, secrets management, encryption, and key management
- Experience auditing site reliability and resilience controls, including observability, incident management, capacity, backup, and disaster recovery
- Experience auditing software development lifecycle controls, including code review, branch protection, artifact integrity, secure SDLC, and dependency risk
- Experience auditing data engineering and analytics controls, including data pipeline and ETL integrity and quality
- Experience auditing AI/ML platforms or MLOps, including model registries, feature stores, inference infrastructure, and supporting data
- Strong critical-thinking ability in complex technical and control environments
- Crypto exchange or crypto product experience
- AWS or GCP professional-level certification, CKA, CISA, CISSP, CCSK, or CCSP
- Regulated financial-services, fintech, or crypto experience
- Mandarin language skills
OKX Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about OKX and has not been reviewed or approved by OKX.
-
Fair & Transparent Compensation — Pay is considered competitive or above market, especially in engineering, product, and legal roles across major hubs. This positioning is consistently cited as a major attraction for candidates.
-
Healthcare Strength — Role descriptions indicate comprehensive medical, dental, vision, life, and disability coverage, with employer-paid premiums in some cases. Health coverage is highlighted alongside core benefits like PTO and parental leave.
-
Wellbeing & Lifestyle Benefits — Allowances for education and fitness, meal perks and snacks, team-building budgets, and structured learning programs are described across locations. These extras enhance the total rewards package beyond base pay.
OKX Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Founded in 2017, OKX is one of the world’s leading cryptocurrency spot and derivatives exchanges. OKX innovatively adopted blockchain technology to reshape the financial ecosystem by offering some of the most diverse and sophisticated products, solutions, and trading tools on the market. Trusted by more than 20 million users in over 180 regions globally, OKX strives to provide an engaging platform that empowers every individual to explore the world of crypto. In addition to its world-class DeFi exchange, OKX serves its users with OKX Insights, a research arm that is at the cutting edge of the latest trends in the cryptocurrency industry. With its extensive range of crypto products and services, and unwavering commitment to innovation, OKX’s vision is a world of financial access backed by blockchain and the power of decentralized finance.
.jpeg)
.png){kind=logo}
