Senior Manager, Platform & Infrastructure Audit
OKX is a leading global cryptocurrency exchange offering a wide range of trading services, including spot and derivatives trading, as well as Web3 solutions.
Investors
Projects
About OKX
OKX is a global cryptocurrency exchange known for its trading services and financial products. The platform offers a wide range of features, including spot and derivatives trading, staking services, and a user-friendly interface suitable for both beginners and experienced traders.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects across the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and ITGC validation. You'll audit AI/ML systems and use AI in your own audit work, flex into adjacent domains like cloud security, resilience, secure SDLC and data engineering, help shape the risk-based audit plan, and partner with Engineering, SRE and Security stakeholders to deliver practical findings and recommendations.
Requirements
- Demonstrable experience auditing control design and operating effectiveness across several of: cloud security and identity, site reliability and resilience, software development lifecycle, data engineering and analytics, AI/ML platform and MLOps
- Proven ability to analyze novel technical and control environments, identify root causes and propose effective remediation
- Deep hands-on expertise auditing cloud infrastructure, containers, CI/CD and infrastructure-as-code
- Prior experience at a crypto exchange or with a crypto product is preferred
Responsibilities
- Audit cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines and infrastructure-as-code (Terraform, Helm)
- Assess how AI/ML systems are built, deployed and monitored, including model and data lineage, training-data provenance, access controls, human-in-the-loop controls, evaluation and drift monitoring
- Use AI in scoping, evidence review, control testing, script generation and reporting
- Help build reusable AI-enabled audit tooling
- Own critical assurance projects and hands-on ITGC validation
- Identify emerging infrastructure risks to shape the risk-based audit plan
- Partner with Engineering, SRE and Security stakeholders to deliver findings and recommendations
Benefits
- Team building programs and company events
- Wellness and meal allowances
- Comprehensive healthcare for employees and dependants
- Performance bonus and long-term incentives may be provided
