Senior Management, Platform & Infrastructure Audit

OKX; Singapore; Presencial; SGD 180.000 - 260.000; Jornada completa

Descripción de la vacante

OKX Internal Audit is seeking a Senior Manager to lead Platform & Infrastructure Audit across cloud infrastructure, AI governance, and related DevOps controls. The role combines hands-on technical auditing with risk-based planning in a fast-moving crypto environment.

You will partner with Engineering, SRE, and Security teams to shape the audit plan, drive findings, and implement practical remediation across multi-cloud platforms including AWS, Alibaba Cloud, and GCP.

Formación

• Crypto & Blockchain acumen: prior crypto exchange or crypto product experience preferred.
• Critical thinking for complex environments: analyze novel technical/control environments and propose remediation.
• Breadth across adjacent platform domains: audit cloud security/identity, SRE, SDLC, data pipelines, and AI/ML platforms.

Responsabilidades

• Audit cloud platforms (Alibaba Cloud, AWS), containers (Docker, Kubernetes), CI/CD pipelines, and IaC (Terraform, Helm).
• Audit AI: model/data lineage, data provenance, access controls, and governance expectations.
• Auditing with AI: use AI to scope, review evidence, test controls, generate scripts, and report.

Conocimientos

Cloud auditing

AI auditing

Crypto domain knowledge

SRE fundamentals

CI/CD awareness

Educación

AWS/GCP professional-level certification

CKA

CCSP/CCSK

CISA

CISSP

Herramientas

Docker

Kubernetes

Terraform

Helm

Descripción del empleo

Senior Management, Platform & Infrastructure Audit

About the Team

OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on the design and effectiveness of governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function executes a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risk, and operates with full, unrestricted access to systems, records, and personnel.

Within Internal Audit, the Platform & Infrastructure team sits inside the Global Platform & Engineering (GP&E) team and owns assurance over the technology foundation that keeps the exchange running: network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and the data pipelines feeding OKX's financial and operational systems. Reflecting a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations on a global scale.

About the Role

As Senior Manager, Platform & Infrastructure Audit, you'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. You'll bring subject matter expertise to both dimensions of AI in scope: auditing AI (assessing how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting) while also flexing into adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks, and partner closely with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment.

What You'll be Doing

Cloud Infrastructure & Platform Engineering Audit (SME): Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).

Auditing AI: Assessing how AI/ML systems are built, deployed, and monitored — model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.

Auditing with AI: A demonstrated bias toward using AI in your own audit work — scoping, evidence review, control testing, script generation, and reporting — and an interest in helping the function build reusable AI-enabled audit tooling.

What We Look For in You

Crypto & Blockchain Acumen: Prior experience at a crypto exchange or with a crypto product is preferred.

Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.

Breadth Across Adjacent Platform Domains: Demonstrable experience auditing control design and operating effectiveness in several of the following:

Cloud security and identity — IAM, network segmentation, secrets management, encryption and key management

Site reliability and resilience — observability, incident and problem management, capacity, backup and disaster recovery

Software development lifecycle — code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk

Data engineering and analytics — integrity and quality of data pipelines and ETL processes

AI/ML platform and MLOps — model registries, feature stores, inference infrastructure, and the data feeding them

Nice to Haves

Cloud or Security Certifications: AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.

Crypto and blockchain literacy: regulated financial-services, fintech, or crypto experience.

L&D programs and Education subsidy for employees' growth and development

Various team building programs and company events

Wellness and meal allowances

Comprehensive healthcare schemes for employees and dependants

More that we love to tell you along the process!

OKX Statement:

OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in OKX's Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.