Controls and Governance Manager

OKX; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

OKX is seeking a governance and risk professional to strengthen the first line of defense across the organization. The role collaborates with risk management, compliance, product, legal and vendor teams to ensure control performance meets regulatory requirements (MFSA/ESMA) and supports growth with robust non-financial risk embedding.

You will maintain RCSA, monitor KRIs, oversee outsourcing governance, and drive data analytics and automation to improve risk identification and reporting.

Qualifications

• 3+ years of experience in operations, process management, or governance in a regulated environment.
• Experience in scalable, high-growth organizations where workflows evolve.
• Ability to manage complex processes and ensure compliance across cross-functional teams.
• Familiarity with governance frameworks, risk management processes, and compliance procedures.
• Collaborative mindset with the ability to work with risk, product, legal, and vendor management teams.
• Excellent organizational and communication skills.
• Comfortable in a fast-paced environment and driving improvements in governance and controls.

Responsibilities

• Enhance cross-functional coordination with Risk, Compliance and Internal Audit to align control requirements.
• Serve as central contact for first-line risk management and controls across departments.
• Maintain RCSA and design, validate and test local controls and reporting.
• Monitor Key Risk Indicators and report anomalies to Second Line Risk Management.
• Review material outsourcing and third-party/ICT governance documentation.
• Monitor third-party performance and escalate issues to governance forums.
• Support product governance reviews for launches and changes.
• Identify and report incidents, track remediation and promote risk awareness.

Skills

Governance

Risk management

Regulatory compliance

Cross-functional collaboration

Job description

About the Opportunity

This role focuses on strengthening OKX EU s first line of defense by collaborating with internal departments and centralized teams to drive risk management, process improvements, and ensure control performance is robust. The position is key in ensuring the company meets MFSA and ESMA regulatory requirements and to enhance the organizational maturity needed to sustain the business s growth and integrity while embedding non‑financial risk management within operational processes.

What You’ll Be Doing

Enhance cross-functional coordination by collaborating with second and third lines of defense (Risk Management, Compliance, and Internal Audit) to ensure alignment on control requirements, while maintaining a focus on first-line responsibilities.

Act as a central point of contact for all first-line defense risk management and control activities, coordinating between internal departments (product, risk, compliance, finance, legal) and centralized teams to ensure effective risk mitigation strategies.

Maintain Company s Risk and Control Self Assessment (RCSA) on an ongoing basis with a focus on critical processes and with designing, validating and testing of local controls as well as the associated reporting

Maintain consistent, timely monitoring of Key Risk Indicators and promptly report KRI anomalies, or deviations to the Second Line Risk Management function

Support periodic reviews of material outsourcing and relevant third-party/ICT arrangements, including required governance documentation and reporting.

TojAdklctovswkxrnKSlUNikgSh Monitor third-party performance, escalating material issues and follow‑up actions to relevant governance forums.

Support local product‑governance reviews for new product launches, material changes and periodic reviews.

Timely identification and reporting of local incidents and issues, tracking remediation, control enhancements and audit actions, whilst promoting cross-team collaboration and risk awareness through training and communication

Automation and data analytics to improve risk identification, monitoring, and reporting, leveraging automation where appropriate.

Work on any other projects and matters as raised by the local management

What We Look For In You

3+ years of experience in operations, process management, or governance in a regulated environment (e.g., fintech, crypto, SaaS, financial services).

Proven track record of working in scalable, high‑growth organizations where operational workflows and processes are evolving rapidly.

Strong ability to manage complex processes and ensure compliance and operational efficiency across cross‑functional teams.

Familiarity with governance frameworks, risk management processes, and compliance procedures.

Collaborative mindset with the ability to work closely with multiple internal teams (risk, product, legal, vendor management) to ensure alignment and successful process execution.

Exceptional organizational and communication skills, with the ability to manage multiple tasks, drive improvements, and elevate issues as needed.

Comfortable working in a fast‑paced, ever‑changing environment, and taking the initiative to drive improvements in governance and controls.

Why OKX?

Opportunity to work with one of the leading global crypto exchanges.

Be part of a dynamic, high‑performing operations team that values collaboration and operational excellence.

Play a key role in upholding governance and compliance within a rapidly growing and evolving industry.

If you re passionate about governance, risk management, and operational processes, and have a knack for building strong cross‑functional relationships, we want to hear from you!

Notice: All official OKX vacancies are published on this website. While roles may appear on selected third‑party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website.

Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to Candidate Privacy Notice.