Head of Non-Financial Risk, Audit

Who We Are

At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.

Across our multiple offices globally, we are united by our core principles:
We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.

The Head of Non-Financial Risk, Audit will report to the Head of Corporate Risk and Finance in Internal Audit. This is a senior leadership role within the audit function with direct line of sight to Senior audit leadership, Risk Management, Business and Product Strategy. The role is one of several foundational roles in building an innovative and strong internal audit function at OKX.

Strategic Audit Leadership: Direct the execution of global audit projects covering non-financial risks across multiple regulatory jurisdictions and versatile product offerings. Ensure holistic coverage of emerging risks, including new regulatory requirements.

Third-Party & Vendor Risk Oversight: Lead the audit strategy for Third-Party Risk Management (TPRM), ensuring comprehensive oversight of vendor life cycles, outsourcing arrangements, and external dependencies to mitigate supply chain and service risks.

ERM & Framework Development: Develop comprehensive Enterprise Risk Management (ERM) coverage strategies that encompass the full risk management lifecycle, including Risk Appetite Frameworks, strategic risk, and reputation risk.

Executive Assurance: Own the communication of risk disposition and provide assessments of aggregate risk management effectiveness to senior management in Audit and Risk.

Stakeholder Partnership: Actively partner with business and risk management stakeholders to promote intelligent risk assessment and mitigation, driving improvements to the control framework.

Resource Orchestration & Agile Deliveryb>
Orchestrate audit execution by leveraging a flexible resource model, utilizing cross-functional internal engagement and staff augmentation to ensure specialized, agile coverage across complex risk landscapes.

Strategic Planning & Quality: Drive the calibration of multi-year risk-based audit plans with insightful recommendations for non-financial risk coverage. Deliver timely, high-quality audit reviews with constructive, value-add remediation actions.

Executive Influence: Demonstrated ability to negotiate and influence at all levels, including senior management, business and product leaders, even in the absence of formal reporting requirements.

Change Agent: A creative and innovative thinker with a proven record of designing solutions to reduce inherently high-risk areas and control breaks.

Talent Developer: A leader with a track record of empowering teams to grow, including coaching and developing colleagues across geographically diverse locations.

Strategic Agility: A self-starter capable of structuring implementation timelines and delivering results under pressure.

Experience: 15+ years of relevant experience in Finance, Crypto or combined in an auditor risk role.

Subject Matter Expertise: Substantial experience in financial services is required, with specific subject-matter expertise in ERM, Risk Appetite Frameworks, Third-Party Risk Management (TPRM), operational risk, and strategic risk.

Regulatory Knowledge: Solid understanding of relevant banking regulations and supervisory expectations for financial institutions; specific crypto experience is a strong plus.

Analytical & Critical Thinking: Strong ability to analyze complex problems, clearly articulate findings, and develop proposed solutions…