Tech Governance - Security Compliance & Governance Engineer
Job description
About the role
The Tech Governance office seeks a Security Compliance & Governance Engineer to own the full lifecycle of governance initiatives for crypto operations. This role is responsible for driving controls from design through execution, translating regulatory expectations into practical workflows for engineering and business teams. The successful candidate will use artificial intelligence tools on a daily basis to analyze risk, draft documentation, and communicate with regulators and auditors. You will close gaps by shipping solutions, navigate ambiguity without hand-holding, and operate with the urgency of a startup while maintaining the rigor of a regulated financial institution. You will serve as the primary link between technical teams and governance frameworks, ensuring that security and compliance are embedded in delivery DNA. The role demands comfort with regulatory scrutiny while enabling innovation through structured yet adaptable processes. You will continuously refine control effectiveness and drive measurable improvements in risk posture across the organization. This position is critical in maintaining trust with users, partners, and regulators in a fast-evolving digital asset landscape.
About OKX and Scope of Work
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). As the Tech Governance
Security Compliance & Governance Engineer, you will be responsible for executing governance initiatives specifically for OKX Wallet and the broader trading platform. Your primary focus will be on implementing and maintaining the control environment required to support crypto operations across Hong Kong and Singapore. You will directly engage in doing the work posted for Tech Governance, ensuring that policies, procedures, and technical configurations meet both internal standards and external expectations. This includes following the defined scope, which centers on the unique risk profile of digital asset platforms and the regulatory landscape governing crypto assets in key jurisdictions.
Key responsibilities
You will orchestrate the intake of regulatory and audit requirements across jurisdictions to define scope and ownership. Building control frameworks and evidence artifacts that align policies with technical implementations in OKX Wallet and trading platforms will be a core responsibility. You will review process effectiveness and control execution, then document gaps and improvement actions for stakeholders. Shipping targeted compliance solutions that address audit findings and regulatory inquiries on schedule is essential. You will partner with Engineering, Legal, Product, and Finance to coordinate cross-functional risk responses. Coordinating external audits and regulator interactions, ensuring timely responses and transparent reporting, is a key duty. You will apply AI tools to automate evidence collection, testing, and narrative drafting for governance tasks. Maintaining up-to-date mapping of controls across frameworks to manage changes in regulation and standards is required. You will translate complex regulatory language into actionable items for technical teams without losing critical nuances. Driving standardization of compliance workflows across products will reduce friction and accelerate time-to-market for new features.
What you'll do
You will orchestrate the intake of regulatory and audit requirements across jurisdictions to define scope and ownership. This involves synthesizing expectations from regulators and auditors, determining how they apply to OKX Wallet and trading infrastructure, and clearly assigning accountability. You will build control frameworks and produce evidence artifacts that demonstrate alignment between policies and technical implementations. A significant portion of your work will involve reviewing process effectiveness and control execution, documenting any gaps, and defining concrete improvement actions for stakeholders. You will ship targeted compliance solutions that directly address audit findings and regulatory inquiries, ensuring delivery on schedule and without compromising security. Collaboration is central, as you will partner with Engineering, Legal, Product, and Finance to coordinate cross-functional risk responses and ensure shared understanding. You will coordinate external audits and regulator interactions, managing timelines, facilitating meetings, and ensuring timely responses with transparent reporting. To increase efficiency, you will apply AI tools to automate evidence collection, testing procedures, and narrative drafting related to governance tasks. You will maintain current mappings of controls across multiple frameworks, updating them as regulations and standards evolve. You will translate complex regulatory language into actionable technical tasks while preserving critical nuances and intent. Finally, you will drive standardization of compliance workflows across products, reducing operational friction and accelerating the time-to-market for new features.
Requirements
You must bring 3-5 years of compliance or GRC experience in technology or finance environments, demonstrating a solid understanding of risk management principles. You must demonstrate hands-on familiarity with security frameworks, controls, and audit processes, including how they map to technical systems. Clear communication in English and Mandarin, both written and verbal, is required for effective interaction with stakeholders and regulators. You must be comfortable operating in a dynamic environment where priorities shift quickly and ambiguity is inherent to the work. You must exhibit strong ownership, taking initiative to identify issues before they escalate into larger problems. You must have the ability to manage multiple workstreams simultaneously while maintaining rigorous attention to detail. You must be capable of interpreting regulations and translating them into operational controls and test procedures that technical teams can implement. You must have a proven track record of working effectively with auditors, including providing clear, factual, and timely responses to inquiries.
Nice to have
Experience working with crypto exchanges, wallets, or decentralized applications is preferred, as it directly aligns with the specific context of OKX Wallet and trading platforms.
Practical notes
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps).