Senior Management, Platform & Infrastructure Audit

About the role

OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on governance, risk management and internal controls across its global crypto exchange. The Platform & Infrastructure team sits within the Global Platform & Engineering team and covers assurance over the technology foundation: network administration, cloud infrastructure, infrastructure-as-code, containerization and orchestration, middleware, site reliability, disaster recovery and data pipelines. As Senior Manager, Platform & Infrastructure Audit, you will be a hands-on, technical auditor owning critical assurance projects across the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and ITGC validation.

Key responsibilities

• Audit cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines and infrastructure-as-code (Terraform, Helm)
• Audit AI use, adoption and governance: assess how AI/ML systems are built, deployed and monitored, including model and data lineage, training-data provenance, access controls, human-in-the-loop approvals, evaluation and drift monitoring, and alignment with emerging AI governance and regulatory expectations
• Apply AI tools to your own audit work (scoping, evidence review, control testing, script generation, reporting) and help build reusable AI-enabled audit tooling
• Identify emerging infrastructure risks and help shape the risk-based audit plan
• Partner with Engineering, SRE and Security stakeholders to deliver findings and recommendations

Required profile

• Prior experience at a crypto exchange or with a crypto product is preferred
• Proven ability to analyze complex technical and control environments, find root causes and propose practical remediation
• Experience auditing control design and operating effectiveness in several adjacent areas: cloud security and identity (IAM, secrets management, encryption and key management), site reliability and resilience (observability, incident management, backup and disaster recovery), software development lifecycle (code review, branch protection, secure SDLC, third-party and open-source dependency risk), data engineering and analytics (data pipeline and ETL integrity and quality), and AI/ML platform and MLOps (model registries, feature stores, inference infrastructure)

Required skills

• Nice to have: AWS or GCP professional certification, CKA, CISA, CISSP, CCSK/CCSP
• Nice to have: regulated financial-services, fintech or crypto experience
• Nice to have: Mandarin speaking

What we offer

• Competitive total compensation package
• L&D programs and education subsidy
• Team building programs and company events
• Wellness and meal allowances
• Comprehensive healthcare schemes for employees and dependants