Senior Management, Platform & Infrastructure Audit

Singapore·Singaporesenior

Finance & AccountingAudit

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm). AI Use,

Technical Tools

Finance & AccountingAudit

OKX Internal Audit is the organization's independent third line of defense, reporting to the Board and the Group Audit and Risk Committee on the design and effectiveness of governance, risk management, and internal controls across a global, multi-entity crypto exchange. The function executes a risk-based annual audit plan covering financial, operational, technology, security, and regulatory risk, and operates with full, unrestricted access to systems, records, and personnel.

Within Internal Audit, the Platform & Infrastructure team sits inside the Global Platform & Engineering (GP&E) team and owns assurance over the technology foundation that keeps the exchange running: network administration, cloud infrastructure and infrastructure-as-code, containerization and orchestration, middleware services, site reliability and disaster recovery, and the data pipelines feeding OKX's financial and operational systems. Reflecting a multi-cloud environment (AWS, Alibaba Cloud, GCP) supporting live trading, custody, and customer-facing operations on a global scale.

About the Role

~1 min read

As Senior Manager, Platform & Infrastructure Audit, you'll be a hands-on, deeply technical individual-contributor auditor who owns critical assurance projects spanning the cloud infrastructure and DevOps lifecycle, from platform build and configuration through CI/CD pipelines and hands-on ITGC validation. You'll bring subject matter expertise to both dimensions of AI in scope: auditing AI (assessing how OKX's AI/ML systems are built, governed, and monitored) and auditing with AI (applying AI tools to your own scoping, testing, and reporting) while also flexing into adjacent domains such as cloud security and identity, resilience engineering, secure SDLC, and data engineering. You'll help shape the risk-based audit plan by identifying emerging infrastructure risks, and partner closely with Engineering, SRE, and Security stakeholders to deliver findings and recommendations that hold up in a fast-moving, high-technology crypto environment.

Responsibilities

~1 min read

→
Cloud Infrastructure & Platform Engineering Audit (SME): Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).
→
AI Use, Adoption & Governance: Two dimensions, both required.
- →
  Auditing AI: Assessing how AI/ML systems are built, deployed, and monitored — model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.
- →
  Auditing with AI: A demonstrated bias toward using AI in your own audit work — scoping, evidence review, control testing, script generation, and reporting — and an interest in helping the function build reusable AI-enabled audit tooling.

Crypto & Blockchain Acumen: Prior experience at a crypto exchange or with a crypto product is preferred.
Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.
Breadth Across Adjacent Platform Domains: Demonstrable experience auditing control design and operating effectiveness in several of the following:
- Cloud security and identity — IAM, network segmentation, secrets management, encryption and key management
- Site reliability and resilience — observability, incident and problem management, capacity, backup and disaster recovery
- Software development lifecycle — code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk
- Data engineering and analytics — integrity and quality of data pipelines and ETL processes
- AI/ML platform and MLOps — model registries, feature stores, inference infrastructure, and the data feeding them

Nice to Have

~1 min read

Cloud or Security Certifications: AWS or GCP professional-level certification, Certified Kubernetes Administrator (CKA), CISA, CISSP, or CCSK/CCSP.
Crypto and blockchain literacy: regulated financial-services, fintech, or crypto experience.
Mandarin speaking

What We Offer

~1 min read

✓Competitive total compensation package

✓L&D programs and Education subsidy for employees' growth and development

✓Various team building programs and company events

✓Wellness and meal allowances

✓Comprehensive healthcare schemes for employees and dependants

✓More that we love to tell you along the process!

Location & Eligibility

Where is the job

Singapore, Singapore

On-site at the office

Who can apply

About this job

Who can apply: Singapore
Posted: Today
Employer: has 376 open jobs on Jobera in 25 countries.

Listing Details

Posted: November 6, 2026
First seen: November 6, 2026
Last seen: November 6, 2026

Posting Health

Days active: 0
Repost count: 0
Trust Level: 67%
Scored at: November 6, 2026

Signal breakdown

freshnesssource trustcontent trustemployer trust

Apply for this position

OKX is a global cryptocurrency exchange and Web3 technology company, offering trading, wallet services, and access to decentralized finance. Founded in 2017, it serves millions of users in over 100 countries.

Employees

5,000+

Founded

2017

Domain

Jobs

View 376 jobs

View company profile

Apply now

External application