Senior Management, Platform & Infrastructure Audit

OKX • San Jose, CA

2d

About The Position

OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee. The Platform & Infrastructure Audit role sits within the Global Platform & Engineering team and provides assurance over the technology foundation supporting the exchange, including network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware, site reliability and disaster recovery, and data pipelines. The environment spans AWS, Alibaba Cloud, and GCP and supports global trading, custody, and customer-facing operations.

The Senior Manager is a hands-on, deeply technical individual-contributor auditor who owns assurance projects across the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and ITGC validation. The role also covers auditing AI/ML systems and applying AI tools to audit scoping, testing, evidence review, and reporting. The auditor contributes to the risk-based audit plan by identifying emerging infrastructure risks and partners with Engineering, SRE, and Security stakeholders to deliver actionable findings and recommendations. The role may also cover cloud security and identity, resilience engineering, secure SDLC, and data engineering.

Requirements

• Deep, hands-on expertise auditing cloud platforms, including Alibaba Cloud and AWS.
• Experience auditing containerization and orchestration technologies such as Docker and Kubernetes.
• Experience auditing CI/CD pipelines and infrastructure-as-code tools such as Terraform and Helm.
• Demonstrated ability to audit AI/ML systems and their governance, deployment, and monitoring.
• Demonstrated use of AI in audit work, such as scoping, evidence review, control testing, script generation, or reporting.
• Demonstrable experience auditing control design and operating effectiveness in several adjacent platform domains, including cloud security and identity; site reliability and resilience; software development lifecycle; data engineering and analytics; or AI/ML platform and MLOps.
• Ability to analyze novel technical and control environments, identify root causes, and propose context-specific remediation that engineering teams can adopt.

Nice To Haves

• Prior experience at a crypto exchange or with a crypto product.
• AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP certification.
• Experience in regulated financial services, fintech, or crypto.
• Mandarin speaking.

Responsibilities

• Own critical assurance projects spanning cloud infrastructure and the DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation.
• Audit cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
• Assess how AI/ML systems are built, deployed, governed, and monitored, including model and data lineage, training-data provenance and quality, access controls, human approvals, evaluation, and drift monitoring.
• Use AI tools in audit scoping, evidence review, control testing, script generation, and reporting; help develop reusable AI-enabled audit tooling.
• Identify emerging infrastructure risks and help shape the risk-based audit plan.
• Partner with Engineering, SRE, and Security stakeholders to deliver findings and recommendations.
• Audit relevant adjacent domains, including cloud security and identity, site reliability and resilience, software development lifecycle controls, data engineering and analytics, and AI/ML platforms and MLOps.

Benefits

• Competitive total compensation package.
• Various team-building programs and company events.
• Wellness and meal allowances.
• Comprehensive healthcare schemes for employees and dependants.
• A performance bonus and long-term incentives may be provided, depending on the position offered.
• A full range of medical, financial, and/or other benefits, dependent on the position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed