Who We Are

At OKX, we believe that the future will be reshaped by Crypto, ultimately contributing to every individual's freedom. OKX began as a crypto exchange giving millions of people access to crypto trading and over time becoming among the largest platforms in the world. In recent years, we have developed one of the most connected Web3 wallets used by millions to access decentralized crypto applications (dApps). OKX is a trusted brand by hundreds of large institutions seeking access to crypto markets on a reliable platform that seamlessly connects with global banking and payments. In the last year, OKX has expanded into new markets including Australia, Brazil, Netherlands, Singapore and Turkey, with plans to launch in the US, Belgium and the UAE. We are deeply committed to shaping a fairer, more transparent and accessible society through blockchain technology. This is why we publish proof of reserves monthly, and continue to ship new innovative security features.

About the Team

The Technology Governance team provides security advice and guidance to OKX entities across all coverage areas, including global locations support business growth by working with all teams within the company to help them achieve their goals. This team works closely with compliance and legal teams to interpret global requirements for applying for licensing or any regional requirements, and understanding them.

About the Opportunity

Security breaches are the number one cause of death amongst digital currency companies. Security is the core to our mission and has been a key competitive differentiator for us as we scale

As a Security Engineer on the Technology Governance & Compliance team, you will lead and manage multiple initiatives to mature OKX security programs globally. You’ll also have an opportunity to pitch, lead and participate in cross-functional initiatives that uplevel the security of all OKX products and services. This role works horizontally across the business to provide guidance for the design and implementation of key security controls, tools and technologies.

What You'll Be Doing

Analyze and assess security and compliance gaps identified by internal and external audits.
Develop and execute remediation plans and solutions for audit findings.
Coordinate with relevant departments to implement problem fixes and governance measures.
Conduct IT security and architecture governance to ensure systems and processes comply with relevant standards and regulations.
Track remediation progress and regularly report to management on governance work progress and effectiveness.
Develop and refine IT governance-related policies and procedures (P&P), and provide implementation guidance.
Communicate effectively with external auditors and regulators, coordinating audit work.
Continuously monitor and evaluate the company's security compliance status, proposing improvement suggestions.
Stay up-to-date on industry trends and best practices to drive continuous improvement of the company's security compliance capabilities.

What We Look For In You

At least 8 years of relevant work experience, including IT audit, risk management, compliance, and security governance.
In-depth understanding of various audit standards such as ISO 27001, COBIT, SOC2, SOC1, PCI-DSS, and NIST.
Familiarity with relevant laws and regulations, including industry-specific norms and data protection regulations (e.g., GDPR).
Excellent project management skills, able to manage multiple complex audit finding remediation plans simultaneously.
Outstanding communication and coordination abilities, capable of effectively interacting with stakeholders at all levels and promoting cross-departmental cooperation.
Strong analytical and problem-solving skills, able to handle complex security compliance challenges.
At least 3 years of experience in IT process governance and technology governance projects within large internet enterprises.
Familiarity with specific risks and compliance requirements in large internet enterprises or blockchain companies.
Adaptability and flexibility to work in a rapidly changing technological and regulatory environment.
Knowledge of cyber security / cloud security / coding and related processes, such as change management, incident response processes, tracing processes, computer forensics processes, etc.

Nice to Haves

One or more of the following certifications: CISA, CISSP, CRISC, CISM, or equivalent qualifications
Have knowledge of Alibaba Cloud, AWS, GCP, and their related services.(e.g., SLS/DMS)
Familiarity with risks and compliance challenges brought by emerging technologies (such as AI, blockchain)
Experience in successfully participating in large-scale security compliance remediation projects.
Fluent in both Chinese and English, with excellent oral and written communication skills.

Perks & Benefits

Competitive total compensation package.
L&D programs and Education subsidy for employees' growth and development.
Various team building programs and company events.
Wellness and meal allowances.
Comprehensive healthcare schemes for employees and dependants .
More that we love to tell you along the process!

Staff/Senior Data Security and Governance Engineer(Technology Governance and Compliance)