Apply on Employer Site

OKX · 1 week ago

Senior Manager, Digital Trust & Controls Assurance Audit (Cybersecurity SME)

San Jose, CA

Full-time

Onsite

Senior Level

$178K/yr - $321K/yr

OKX is a leading crypto exchange committed to reshaping the future through cryptocurrency. They are seeking a Senior Manager for their Digital Trust & Controls Assurance team to lead critical cybersecurity audits and enhance the security posture of the organization.

AppsBitcoinBlockchainCryptocurrencyFinanceFinancial ServicesFinTechInformation TechnologyInternetWeb3

Comp. & Benefits

Responsibilities

Serve as the subject matter expert for auditing the company’s end-to-end Information Security program, including the enterprise-wide cybersecurity strategy, governance framework, policies, and operational capabilities (e.g., security operations, incident response, threat and vulnerability management)

Leverage your deep expertise in cybersecurity governance and operations to lead strategic, end-to-end audits of our Information Security program and contribute to a wide range of audits across other Digital Trust domains

Contribute to the annual risk-based audit plan by identifying emerging cybersecurity risks and scoping potential audit projects

Collaborate effectively with security, technology, and business stakeholders to communicate audit findings, provide value-add recommendations, and monitor remediation plans

Develop and maintain expert knowledge of the evolving crypto threat landscape and global regulatory requirements to ensure audit approaches remain current and effective

Qualification

Cybersecurity GovernanceSecurity OperationsIncident ManagementThreat ManagementCrypto & Blockchain AcumenData Analysis & SQLBroad Expertise in Digital TrustCritical Thinking

Required

Candidates must reside within a reasonable driving distance of our San Jose, California office

Cybersecurity Governance and Operations (SME): Deep expertise in auditing the end-to-end effectiveness of a modern cyber defense program, from overarching strategy, policies, and standards down to operational capabilities

Security Operations/SecOps (Detection and Response, SOC, SIEM, SOAR)

Incident Management and Response (IR)

Threat and Vulnerability Management

Identity and Access Management (AuthN, AuthZ)

Application Security (secure SDLC)

Network Security

Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific solutions

Broad Expertise Across Digital Trust Domains: Demonstrable experience auditing the design and effectiveness of controls in the following areas

Cybersecurity Governance: Auditing an information security program, strategy, and policies

Data Security: Auditing controls protecting data (e.g., encryption, key management)

IT General Controls (ITGCs): Auditing core ITGCs like Change Management and Access Management

AI Governance & Risk: Assessing AI strategy, ethical guidelines, and risk management frameworks

Data Analysis & SQL: Experience using SQL for data analysis is highly desired. The ability to achieve proficiency in performing data analytics with SQL within the first 90 days will be required