Apply on Employer Site

OKX · 4 months ago

Senior Manager, Digital Trust & Controls Assurance Audit (Cybersecurity SME)

San Jose, California, United States

Full-time

Onsite

Senior Level

$143K/yr - $257K/yr

OKX is a leading crypto exchange committed to reshaping the future through cryptocurrency. They are looking for a Senior Manager in Digital Trust & Controls Assurance to lead strategic audits of their cybersecurity governance and operations, ensuring the effectiveness of their cyber defense program against unique crypto threats.

AppsBitcoinBlockchainCryptocurrencyFinanceFinancial ServicesFinTechInformation TechnologyInternetWeb3

Comp. & Benefits

Responsibilities

Serve as the subject matter expert for auditing the company’s end-to-end cyber defense program, including the enterprise-wide cybersecurity strategy, governance framework, policies, and operational capabilities (e.g., SOC, incident response, threat management) against unique crypto threats

Leverage your deep expertise in cybersecurity governance and operations to lead strategic, end-to-end audits of our security program and contribute to a wide range of audits across other Digital Trust domains

Contribute to the annual risk-based audit plan by identifying emerging cybersecurity risks and scoping potential audit projects

Collaborate effectively with security, technology, and business stakeholders to communicate audit findings, provide value-add recommendations, and monitor remediation plans

Develop and maintain expert knowledge of the evolving crypto threat landscape and global regulatory requirements to ensure audit approaches remain current and effective

Qualification

Cybersecurity GovernanceCybersecurity OperationsThreat ManagementCrypto & Blockchain AcumenData Security & PrivacyIT General ControlsData Analysis & SQLBroad Expertise Across Digital TrustCritical Thinking

Required

Demonstrable experience assessing security programs and controls in complex, high-technology environments—ideally within crypto or FinTech

Deep expertise in auditing the end-to-end effectiveness of a modern cyber defense program, from the overarching strategy, policies, and standards down to the operational capabilities (SOC, SIEM, Incident Response, VAPT), with a focus on crypto-specific threats

A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific solutions

Demonstrable experience auditing the design and effectiveness of controls in several areas including Cybersecurity Governance, Cybersecurity Operations, Data Security & Privacy, IT General Controls (ITGCs), and AI Governance & Risk

Experience using SQL for data analysis

Ability to achieve proficiency in performing data analytics with SQL within the first 90 days