Head of Non-Financial Risk, Audit

OKX•New York, NY

30d

About The Position

The Head of Non-Financial Risk, Audit will report to the Head of Corporate Risk and Finance inInternal Audit. This is a senior leadership role within the audit function with direct line of sightto Senior audit leadership, Risk Management, Business and Product Strategy. The role is one of several foundational roles in building an innovative and strong internal audit function at OKX.

Requirements

Experience: 15+ years of relevant experience in Finance, Crypto or combined in an auditor risk role.
Subject Matter Expertise: Substantial experience in financial services is required, with specific subject-matter expertise in ERM, Risk Appetite Frameworks, Third-Party RiskManagement (TPRM), operational risk, and strategic risk.
Regulatory Knowledge: Solid understanding of relevant banking regulations and supervisory expectations for financial institutions; specific crypto experience is a strong plus.
Analytical & Critical Thinking: Strong ability to analyze complex problems, clearly articulate findings, and develop proposed solutions for senior stakeholders.
Project Management: Proficiency in executing complex projects and managing multiple initiatives simultaneously with agility.
Technical Aptitude: Understanding of data governing principles and technology infrastructures is considered a strong plus.
Bachelor’s degree in Finance, Economics, or another financial field is required.

Nice To Haves

Master’s degree is not required but is considered a strong plus.
The successful candidate will have excellent verbal and presentation communication skills.
Certifications are a plus.

Responsibilities

Strategic Audit Leadership: Direct the execution of global audit projects covering non-financial risks across multiple regulatory jurisdictions and versatile product offerings.Ensure holistic coverage of emerging risks, including new regulatory requirements.
Third-Party & Vendor Risk Oversight: Lead the audit strategy for Third-Party RiskManagement (TPRM), ensuring comprehensive oversight of vendor lifecycles, outsourcing arrangements, and external dependencies to mitigate supply chain and service risks.
ERM & Framework Development: Develop comprehensive Enterprise Risk Management (ERM) coverage strategies that encompass the full risk management lifecycle, including Risk Appetite Frameworks, strategic risk, and reputation risk.
Executive Assurance: Own the communication of risk disposition and provide assessments of aggregate risk management effectiveness to senior management in Audit and Risk.
Stakeholder Partnership: Actively partner with business and risk management stakeholders to promote intelligent risk assessment and mitigation, driving improvements to the control framework.
Resource Orchestration & Agile Delivery: Orchestrate audit execution by leveraging a flexible resource model, utilizing cross-functional internal engagement and staff augmentation to ensure specialized, agile coverage across complex risk landscapes.
Strategic Planning & Quality: Drive the calibration of multi-year risk-based audit plans with insightful recommendations for non-financial risk coverage. Deliver timely, high-quality audit reviews with constructive, value-add remediation actions.