Senior Management, Platform & Infrastructure Audit

As Senior Manager, Platform & Infrastructure Audit at OKX, you lead hands-on assurance projects over the technology foundation that keeps the exchange running. You report to the Board and Group Audit and Risk Committee as part of OKX Internal Audit, the organization's independent third line of defense. Your work spans cloud infrastructure, DevOps, containerization, middleware, site reliability, and data pipelines across a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and global customer operations. You'll bring deep technical expertise in both auditing AI (how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting).

What you'll do

• Conduct deep, hands-on audits of cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm)
• Assess how OKX's AI/ML systems are built, deployed, and monitored, including model and data lineage, training-data provenance and quality, access controls, human-in-the-loop approvals, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations
• Apply AI tools to your own audit work including scoping, evidence review, control testing, script generation, and reporting, and help the function build reusable AI-enabled audit tooling
• Identify emerging infrastructure risks and help shape the risk-based audit plan
• Partner with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment

What you bring

• Proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective remediation that engineering teams will adopt
• Demonstrable experience auditing control design and operating effectiveness across several of the following domains: cloud security and identity (IAM, network segmentation, secrets management, encryption and key management); site reliability and resilience (observability, incident and problem management, capacity, backup and disaster recovery); software development lifecycle (code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk); data engineering and analytics (integrity and quality of data pipelines and ETL processes); or AI/ML platform and MLOps (model registries, feature stores, inference infrastructure)
• Prior experience at a crypto exchange or with a crypto product

Nice to have

• AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP
• Regulated financial-services, fintech, or crypto experience
• Mandarin fluency

What we offer

• Competitive total compensation package
• Learning and development programs and education subsidy
• Team building programs and company events
• Wellness and meal allowances
• Comprehensive healthcare schemes for employees and dependants

About OKX

OKX is a global, multi-entity crypto exchange with operations spanning financial, operational, technology, security, and regulatory functions worldwide. The organization operates under rigorous governance and risk management frameworks overseen by its Board and Group Audit and Risk Committee.