Senior Management, Platform & Infrastructure Audit
About The Position
The Senior Manager, Platform & Infrastructure Audit is a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning cloud infrastructure and the DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. The role brings subject matter expertise to auditing AI systems and applying AI tools to audit work, while also covering adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. The role helps shape the risk-based audit plan by identifying emerging infrastructure risks and partners with Engineering, SRE, and Security stakeholders to deliver actionable findings and recommendations in a fast-moving, high-technology crypto environment. The Platform & Infrastructure team is part of OKX Internal Audit and provides assurance over the technology foundation that supports the exchange, including network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and data pipelines feeding financial and operational systems. The environment spans multiple cloud providers and supports live trading, custody, and customer-facing operations globally.
Requirements
- Deep, hands-on expertise auditing cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
- Experience assessing AI/ML systems, including their development, deployment, monitoring, data lineage, access controls, human oversight, evaluation, and drift monitoring.
- Demonstrated use of AI tools in audit work, including scoping, evidence review, control testing, script generation, and reporting.
- Proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will adopt.
- Demonstrable experience auditing control design and operating effectiveness in several adjacent platform domains, including cloud security and identity; site reliability and resilience; software development lifecycle; data engineering and analytics; or AI/ML platform and MLOps.
Nice To Haves
- Prior experience at a crypto exchange or with a crypto product.
- AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.
- Regulated financial-services, fintech, or crypto experience.
- Mandarin speaking.
Responsibilities
- Own critical assurance projects covering cloud infrastructure and the DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation.
- Audit cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
- Assess how AI/ML systems are built, deployed, and monitored, including model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment with emerging AI governance and regulatory expectations.
- Use AI in audit work, including scoping, evidence review, control testing, script generation, and reporting, and help build reusable AI-enabled audit tooling.
- Identify emerging infrastructure risks and help shape the risk-based audit plan.
- Partner with Engineering, SRE, and Security stakeholders to deliver findings and recommendations.
- Audit control design and operating effectiveness across relevant adjacent platform domains, including cloud security and identity, site reliability and resilience, software development lifecycle, data engineering and analytics, and AI/ML platforms and MLOps.
Benefits
- Competitive total compensation package.
- Various team building programs and company events.
- Wellness and meal allowances.
- Comprehensive healthcare schemes for employees and dependants.
- Performance bonus and long-term incentives may be provided as part of the compensation package.
- A full range of medical, financial, and/or other benefits, dependent on the position offered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
