Senior Management, Platform & Infrastructure Audit
San Jose, California, United States·Posted today
web3blockchainfintechinfrastructurekubernetesdockerawsgcpterraform
<div class="ace-line ace-line old-record-id-doxuseysYUio6Qia64JLLAwE7dh"> <div data-page-id="doxusokjWsaOkSCIjzixAfRM3sd" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxusaUYeCmu82WSkkm5KDd00db"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxuseysYUio6Qia64JLLAwE7dh"> <div data-page-id="doxusokjWsaOkSCIjzixAfRM3sd" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxusaUYeCmu82WSkkm5KDd00db"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div data-page-id="Kpucdjv7JoAcSZxSf7PuRl5Yscb" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-Cfb8dvi9voxFkWxhNcmuJX50sZb"> <div data-page-id="PNNZdiw4Yo1ZOmx8btbucw8qsLG" data-lark-html-role="root" data-docx-has-block-data="false"> <h2 class="heading-2 ace-line old-record-id-ARMWdtKDIowwlyxaSOuuzEqssIf"><strong>Who We Are</strong></h2> </div> At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: <em>We Before Me</em>, <em>Do the Right Thing</em>, and <em>Get Things Done</em>. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.</div> <div class="ace-line ace-line old-record-id-Cfb8dvi9voxFkWxhNcmuJX50sZb"> </div> <div class="ace-line ace-line old-record-id-Cfb8dvi9voxFkWxhNcmuJX50sZb"> <div data-page-id="PNNZdiw4Yo1ZOmx8btbucw8qsLG" data-lark-html-role="root" data-docx-has-block-data="false"> <h2 class="heading-2 ace-line old-record-id-PiRwdXFmiomeQDxx0RUuDGJ1sag"><strong>About the Team</strong></h2> <div class="ace-line ace-line old-record-id-NrSYd8kjeoNTrexRDNsuNpZOsMd"> <div data-page-id="KG9od3xXVo5GblxJa4IlTQoYglg" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxlgDbKRKJhOKS844bLC9n1SUb">OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on the design and effectiveness of governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function executes a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risk, and operates with full, unrestricted access to systems, records, and personnel.</div> <div class="ace-line ace-line old-record-id-UYkad3L2OoOalqxknRzlWj3Dgyf">Within Internal Audit, the Platform & Infrastructure team sits inside the Global Platform & Engineering (GP&E) team and owns assurance over the technology foundation that keeps the exchange running: network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and the data pipelines feeding OKX's financial and operational systems. Reflecting a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations on a global scale.</div> </div> </div> <div class="ace-line ace-line old-record-id-NQ1gdeOLNoEsm2xDroWukiwGs3g"> </div> <h2 class="heading-2 ace-line old-record-id-HytwdMMd1o5PQtxqi9QudDSMsWV"><strong>About the Role</strong></h2> <div data-page-id="KG9od3xXVo5GblxJa4IlTQoYglg" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-ZOFUdZBSjokF2bxdSnGlaKoMgah">As Senior Manager, Platform & Infrastructure Audit, you'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. You'll bring subject matter expertise to both dimensions of AI in scope: auditing AI (assessing how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting) while also flexing into adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks, and partner closely with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment.</div> </div> <div class="ace-line ace-line old-record-id-Gy4ydICWpol34Hxzjdhu4zdVshg"> </div> <h2 class="heading-2 ace-line old-record-id-ZvAmdvgIGoKyiHxjBTiu68Kcs9d"><strong>What You'll be Doing </strong></h2> <div data-page-id="KG9od3xXVo5GblxJa4IlTQoYglg" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-Qj3kdcz1rotY4GxT5MYlN5tMgde" data-list="bullet"> <div><strong>Cloud Infrastructure & Platform Engineering Audit (SME):</strong> Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).</div> </li> <li class="ace-line ace-line old-record-id-ZQzddbbxtoLafCxDJVQlESWag1f" data-list="bullet"> <div><strong>AI Use, Adoption & Governance:</strong> Two dimensions, both required.</div> <ul class="list-bullet2"> <li class="ace-line ace-line old-record-id-BK7hdYvpcom6T3xxFs8lCfEygih" data-list="bullet"> <div><em>Auditing AI:</em> Assessing how AI/ML systems are built, deployed, and monitored — model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.</div> </li> <li class="ace-line ace-line old-record-id-Gr2TdlYpcoOtkpxfn0dlZvMDgKb" data-list="bullet"> <div><em>Auditing with AI:</em> A demonstrated bias toward using AI in your own audit work — scoping, evidence review, control testing, script generation, and reporting — and an interest in helping the function build reusable AI-enabled audit tooling.</div> </li> </ul> </li> </ul> </div> <h2 class="heading-2 ace-line old-record-id-ZvAmdvgIGoKyiHxjBTiu68Kcs9d"><strong>What We Look For in You</strong></h2> <div data-page-id="KG9od3xXVo5GblxJa4IlTQoYglg" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-DhTZdS1YAo9kAixlGqNl5bGmgNh" data-list="bullet"> <div><strong>Crypto & Blockchain Acumen:</strong> Prior experience at a crypto exchange or with a crypto product is preferred.</div> </li> <li class="ace-line ace-line old-record-id-RZKvd5X2FoKhiCxTcx2ls77mgsf" data-list="bullet"> <div><strong>Critical Thinking for Complex Environments:</strong> A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.</div> </li> <li class="ace-line ace-line old-record-id-GgfGdCr7wo7HcKxta5elc1Cjgye" data-list="bullet"> <div><strong>Breadth Across Adjacent Platform Domains:</strong> Demonstrable experience auditing control design and operating effectiveness in several of the following:</div> <ul class="list-bullet2"> <li class="ace-line ace-line old-record-id-QuZjdPEgOoF4UMxzhwvl8sQFgkd" data-list="bullet"> <div>Cloud security and identity — IAM, network segmentation, secrets management, encryption and key management</div> </li> <li class="ace-line ace-line old-record-id-ABPGdSljco3xfyxqGUOlMThSgif" data-list="bullet"> <div>Site reliability and resilience — observability, incident and problem management, capacity, backup and disaster recovery</div> </li> <li class="ace-line ace-line old-record-id-TQfydlLXsotkBFx21SUllo6EgJb" data-list="bullet"> <div>Software development lifecycle — code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk</div> </li> <li class="ace-line ace-line old-record-id-NVYNdLfYGoPiUTxtebblvxiagcf" data-list="bullet"> <div>Data engineering and analytics — integrity and quality of data pipelines and ETL processes</div> </li> <li class="ace-line ace-line old-record-id-doxlgJoG8T8lzYWiMfj5Wu980FF" data-list="bullet"> <div>AI/ML platform and MLOps — model registries, feature stores, inference infrastructure, and the data feeding them</div> </li> </ul> </li> </ul> </div> <div class="ace-line ace-line old-record-id-Pyddd7YwWoyKAJxFqgSutn7YsFc"> <h2 class="heading-2 ace-line old-record-id-CmqsdZ2GTo6Z9VxuHx4ugzRRsm3"><strong><span style="font-size: 18pt;">Nice to Haves</span></strong></h2> <div data-page-id="KG9od3xXVo5GblxJa4IlTQoYglg" data-lark-html-role="root" data-docx-has-block-data="false"> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-VWaFdxmB6oq0vNxcSgMlrhtrg8g" data-list="bullet"> <div><strong>Cloud or Security Certifications:</strong> AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.</div> </li> <li class="ace-line ace-line old-record-id-FwnodyVYGorPSsxDmBLlk2LHgwc" data-list="bullet"> <div><strong>Crypto and blockchain literacy:</strong> regulated financial-services, fintech, or crypto experience.</div> </li> <li class="ace-line ace-line old-record-id-McxUd854koh0MixcLzfl8JHPggf" data-list="bullet"> <div>Mandarin speaking</div> </li> </ul> </div> </div> <h2 class="heading-2 ace-line old-record-id-CmqsdZ2GTo6Z9VxuHx4ugzRRsm3"><strong>Perks &<span style="font-size: 18pt;"> Benefits </span></strong></h2> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-XvQudJ7z0ouSnuxOibouMkKzsCc" data-list="bullet"> <div>Competitive total compensation package</div> </li> <li class="ace-line ace-line old-record-id-GAzBdJXxLo291PxrthXurPeds4g" data-list="bullet"> <div>L&D programs and Education subsidy for employees' growth and development</div> </li> <li class="ace-line ace-line old-record-id-CKPxdgHeoosenzxCpV2uV32ysz0" data-list="bullet"> <div>Various team building programs and company events</div> </li> <li class="ace-line ace-line old-record-id-XjPSdIa92oGeLox9Qo9uejVEs4c" data-list="bullet"> <div>Wellness and meal allowances</div> </li> <li class="ace-line ace-line old-record-id-CS34dAJCDoMDHxx95pZu43yjsxB" data-list="bullet"> <div>Comprehensive healthcare schemes for employees and dependants</div> </li> <li class="ace-line ace-line old-record-id-Uqtsd4bN8oaHt7xyPlYuxmfcsob" data-list="bullet"> <div>More that we love to tell you along the process!</div> </li> </ul> <div class="ace-line ace-line old-record-id-JGIsdeznCo2qpfxJAqkuViMfsHS"> </div> <div class="ace-line ace-line old-record-id-JGIsdeznCo2qpfxJAqkuViMfsHS"> <div> <div class="job__description body"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxuseysYUio6Qia64JLLAwE7dh"> <div data-page-id="doxusokjWsaOkSCIjzixAfRM3sd" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-doxusaUYeCmu82WSkkm5KDd00db"> <div data-page-id="AEW3d0Y2noLuIcxROuFubTLpsZd" data-docx-has-block-data="false"> <div data-page-id="Zrp2dGhcIo3UFmxud3WuQirssDb" data-lark-html-role="root" data-docx-has-block-data="false"> <div data-page-id="I1Zud8CYtoGHccx0MImuyRU4s2c" data-lark-html-role="root" data-docx-has-block-data="false"> <div data-page-id="I1Zud8CYtoGHccx0MImuyRU4s2c" data-lark-html-role="root" data-docx-has-block-data="false"> <div class="ace-line ace-line old-record-id-ICVNdKGbzoyJvjx3MkouO6E4sSb"><span style="font-size: 18pt;"><strong>OKX Statement:</strong></span></div> <div class="ace-line ace-line old-record-id-I3fmdZuJFoTBq5x36pAufcDSstf">OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</div> <div class="ace-line ace-line old-record-id-BTzbdHPT4oLKUgxn32luBDXHsLb"> </div> <ul class="list-bullet1"> <li class="ace-line ace-line old-record-id-VQLRdGn0XoVOLTx4jG6uxTLfsyc" data-list="bullet"> <div>The salary range for this position is $171,000 - $257,000</div> </li> <li class="ace-line ace-line old-record-id-doxusmlMoCSm31HSRuqUGUssOLg" data-list="bullet"> <div>The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site.</div> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <p> </p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div><div class="content-conclusion"><div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only"><span class="text-only" data-eleid="6">Notice:<br></span></span></span> <div data-lark-html-role="root"><span class="text-only" data-eleid="26"><span class="text-only">All official </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only"> vacancies are published on this website.</span></span> <span class="text-only" data-eleid="28"><span class="text-only">While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. </span></span><strong><span class="text-only" data-eleid="29"><span class="text-only">If in doubt, please apply directly through our official careers website.</span></span></strong></div> </div> <div data-lark-html-role="root"><span class="text-only" data-eleid="18"><span class="text-only">Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to </span><span class="text-only text-with-abbreviation text-with-abbreviation-bottomline">OKX</span><span class="text-only">'s </span></span><a class="link rich-text-anchor __anchor-intercept-flag__ text-content-link" href="https://www.okx.com/en-eu/help/okx-candidate-privacy-notice" target="_blank" data-eleid="19" data-lark-is-custom="true" data-lark-link="true">Candidate Privacy Notice</a><span class="text-only" data-eleid="20"><span class="text-only">.</span></span></div></div>