Senior Management, Platform & Infrastructure Audit

OKX • San Jose, CA

2d

About The Position

OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and Group Audit and Risk Committee on governance, risk management, and internal controls across a global, multi-entity crypto exchange. The Platform & Infrastructure team provides assurance over the technology foundation supporting the exchange, including cloud infrastructure, infrastructure-as-code, containerization and orchestration, middleware, site reliability, disaster recovery, and data pipelines.

The Senior Manager, Platform & Infrastructure Audit is a hands-on, deeply technical individual-contributor auditor responsible for critical assurance projects across cloud infrastructure and the DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. The role brings expertise in auditing AI/ML systems and applying AI tools to audit work, and may also cover cloud security and identity, resilience engineering, secure SDLC, and data engineering. The position helps shape the risk-based audit plan by identifying emerging infrastructure risks and partners with Engineering, SRE, and Security stakeholders to develop findings and recommendations suited to a fast-moving technology environment.

Requirements

• Deep, hands-on expertise auditing cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
• Demonstrated experience auditing control design and operating effectiveness in several adjacent platform domains, including cloud security and identity; site reliability and resilience; software development lifecycle; data engineering and analytics; or AI/ML platforms and MLOps.
• Demonstrated use of AI in audit work, with interest in building reusable AI-enabled audit tooling.
• Proven ability to analyze novel technical and control environments, identify root causes, and propose effective, context-specific remediation that engineering teams will adopt.

Nice To Haves

• Prior experience at a crypto exchange or with a crypto product.
• AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP certification.
• Regulated financial-services, fintech, or crypto experience.
• Mandarin speaking.

Responsibilities

• Own critical assurance projects spanning cloud infrastructure and the DevOps lifecycle, including platform build and configuration, CI/CD pipelines, and hands-on ITGC validation.
• Audit cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
• Assess how AI/ML systems are built, deployed, governed, and monitored, including model and data lineage, training-data provenance and quality, model and prompt access, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment with AI governance and regulatory expectations.
• Apply AI tools to audit scoping, evidence review, control testing, script generation, and reporting; help develop reusable AI-enabled audit tooling.
• Flex into adjacent audit domains, including cloud security and identity, resilience engineering, secure SDLC, and data engineering.
• Identify emerging infrastructure risks and help shape the risk-based audit plan.
• Partner with Engineering, SRE, and Security stakeholders to deliver findings and recommendations.

Benefits

• Competitive total compensation package.
• Learning and development programs and education subsidy.
• Team-building programs and company events.
• Wellness and meal allowances.
• Healthcare schemes for employees and dependants.
• Performance bonus and long-term incentives may be provided, depending on the position offered.
• Medical, financial, and/or other benefits, depending on the position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed