Senior Management, Platform & Infrastructure Audit

As Senior Manager, Platform & Infrastructure Audit at OKX, you are a hands-on, deeply technical auditor owning critical assurance projects across the cloud infrastructure and DevOps lifecycle. You report into the Global Platform & Engineering team within OKX Internal Audit, the organization's independent third line of defense. You'll bring subject matter expertise to auditing AI systems, auditing with AI tools, and adjacent domains such as cloud security, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks and partnering closely with Engineering, SRE, and Security stakeholders to deliver findings that hold up in a fast-moving, high-technology crypto environment.

What you'll do

• Conduct deep, hands-on audits of cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm)
• Assess how OKX's AI/ML systems are built, deployed, and monitored, including model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, and evaluation and drift monitoring
• Apply AI tools to your own audit work: scoping, evidence review, control testing, script generation, and reporting; help build reusable AI-enabled audit tooling for the function
• Execute hands-on ITGC validation from platform build and configuration through CI/CD pipelines
• Identify emerging infrastructure risks and help shape the risk-based annual audit plan

What you bring

• Prior experience at a crypto exchange or with a crypto product
• Proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will adopt
• Demonstrable experience auditing control design and operating effectiveness in several of: cloud security and identity (IAM, network segmentation, secrets management, encryption and key management); site reliability and resilience (observability, incident and problem management, capacity, backup and disaster recovery); software development lifecycle (code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk); data engineering and analytics (integrity and quality of data pipelines and ETL processes); or AI/ML platform and MLOps (model registries, feature stores, inference infrastructure)

Nice to have

• AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP
• Regulated financial-services, fintech, or crypto experience
• Mandarin speaking

What we offer

• Competitive total compensation package
• Learning and development programs and education subsidy for your growth and development
• Wellness and meal allowances
• Comprehensive healthcare schemes for employees and dependants
• Team building programs and company events

About OKX

OKX is a global, multi-entity crypto exchange with Internal Audit as an independent third line of defense reporting to the Board and the Group Audit and Risk Committee. The Platform & Infrastructure team operates across a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations worldwide.