Senior Management, Platform & Infrastructure Audit

OKX • San Jose, CA

3d • $171,000 - $257,000

About The Position

OKX Internal Audit is the organization’s independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function conducts a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risks. The Platform & Infrastructure team provides assurance over the technology foundation supporting the exchange, including network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware, site reliability and disaster recovery, and data pipelines. The environment spans AWS, Alibaba Cloud, and GCP and supports global trading, custody, and customer-facing operations.

The Senior Manager, Platform & Infrastructure Audit is a hands-on, deeply technical individual-contributor auditor responsible for critical assurance projects across cloud infrastructure and the DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. The role provides expertise in auditing AI/ML systems and applying AI tools to audit scoping, testing, and reporting. It also covers adjacent areas such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. The role contributes to the risk-based audit plan by identifying emerging infrastructure risks and partners with Engineering, SRE, and Security stakeholders to deliver actionable findings and recommendations.

Requirements

• Deep, hands-on expertise auditing cloud platforms, including Alibaba Cloud and AWS.
• Experience auditing containerization and orchestration technologies such as Docker and Kubernetes, CI/CD pipelines, and infrastructure-as-code tools such as Terraform and Helm.
• Demonstrable experience auditing control design and operating effectiveness in several adjacent platform domains: cloud security and identity; site reliability and resilience; software development lifecycle; data engineering and analytics; or AI/ML platform and MLOps.
• Ability to analyze complex technical and control environments, identify root causes, and develop effective, context-specific remediation.
• Demonstrated use of AI in audit work, including scoping, evidence review, control testing, script generation, or reporting.
• Expertise assessing AI/ML systems, including their development, deployment, governance, and monitoring.

Nice To Haves

• Prior experience at a crypto exchange or with a crypto product.
• AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, CCSK, or CCSP.
• Experience in regulated financial services, fintech, or crypto.
• Mandarin speaking.

Responsibilities

• Lead hands-on audits of cloud platforms, containerization and orchestration, CI/CD pipelines, and infrastructure-as-code.
• Assess how AI/ML systems are built, deployed, and monitored, including model and data lineage, training-data provenance and quality, access controls, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment with AI governance and regulatory expectations.
• Apply AI tools to audit scoping, evidence review, control testing, script generation, and reporting, and help develop reusable AI-enabled audit tooling.
• Audit control design and operating effectiveness across relevant platform domains, including cloud security and identity, site reliability and resilience, software development lifecycle, data engineering and analytics, and AI/ML platforms and MLOps.
• Identify emerging infrastructure risks and help shape the risk-based audit plan.
• Partner with Engineering, SRE, and Security stakeholders to deliver findings and recommendations suitable for a fast-moving, high-technology crypto environment.
• Analyze complex and novel technical and control environments, identify root causes, and propose context-specific remediation.

Benefits

• Competitive total compensation package.
• Learning and development programs and education subsidy.
• Team-building programs and company events.
• Wellness and meal allowances.
• Comprehensive healthcare schemes for employees and dependants.
• Performance bonus and long-term incentives may be provided as part of the compensation package.
• Medical, financial, and/or other benefits, depending on the position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed