Senior Compliance Manager

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Team: The Compliance function at OKX is responsible for the overall compliance culture at the company. We’re a team of risk-minded problem solvers who advise the business on the company’s regulatory obligations and enterprise risk. What You'll Be Doing: The Compliance Manager serves as the critical link between the Issue Management lifecycle and the Firm’s Control Framework. This role is designed to ensure that remediation efforts are not just administrative exercises, but lead to the development of robust, sustainable controls. You will act as a "translator" between the Compliance teams who identify risks and the Product/Engineering teams who build the systems. Your primary objective is to ensure that every compliance issue results in a strengthened control environment, preventing recurrence through better organizational design and technical automation. You are responsible for ensuring the firm has a robust library of controls and that when things break, the resulting fix is built into the permanent infrastructure of the company. You bridge the gap between Compliance Monitoring (finding gaps) and Business Operations (building the business). Key Responsibilities: Remediation Design & Advisory: Partner with business units to move beyond "quick fixes." You will help stakeholders design long-term controls (automated or manual) that directly address the root causes identified during the issue management process. Control Mapping & Integration: Ensure every remediation action plan is mapped back to the Global Compliance Control Library. You will verify that new controls are properly documented, assigned owners, and integrated into the firm’s risk assessment tools. Root Cause Analysis (RCA): Lead deep-dive RCA sessions for complex or recurring issues. You will provide the analytical "bridge" that explains why a control failed and what specific engineering or process change is required to fix it. Organizational Alignment: Work closely with the Issue Management team to ensure that "Issue Closure" only happens once a control has been validated as effective, not just "implemented." Optimization: Manage the technical linkage between Issue Management tickets and the Governance, Risk, and Compliance (GRC) platform. You will ensure data flows seamlessly between "Issues" and "Controls." Control Validation Testing: Design the testing scripts used to validate that a newly developed control is working as intended before an issue is officially marked as remediated. Thematic Reporting: Identify trends across multiple issues to suggest "horizontal" control improvements that could benefit multiple departments simultaneously. Control Design & Consulting: Partnering with the business to build "Key Compliance Controls" (KCCs). You ensure that every control has a clear Objective (what are we stopping?), a Frequency (how often does it run?), and an Owner (who is responsible?). Control Library Maintenance: Managing the "Source of Truth" (often a GRC tool or master spreadsheet) that lists every compliance control across the firm. Design Effectiveness (DE) Assessment: Reviewing a control before it is even turned on to see if it is logically capable of stopping the risk. (e.g., "If this is a manual check, is the person actually qualified to spot the error?") Operating Effectiveness (OE) Testing: Performing "sample testing" to see if the control actually worked over a period of time. What We Look For in You AML Control Master: 7+ years of experience in Anti-Money Laundering (AML), Sanctions, or Financial Crime compliance, with a specific focus on Control Design and Mapping . You should have a proven ability to translate complex AML regulations (e.g., BSA/USA PATRIOT Act, 5AMLD) into functional technical requirements for engineering teams. Root Cause Mastery: Expert-level ability to perform Root Cause Analysis (RCA) on AML system failures. You don't just fix a flagged transaction; you identify whether the failure lived in the fuzzy logic of the screening engine, the data ingestion layer, or the manual disposition process. Decisive Accountability: A track record of "holding the line" on Issue Closure . GRC & Systems Fluency: Hands-on experience managing a Global Compliance Control Library within GRC platforms (e.g., ServiceNow, Archer, or MetricStream). You understand how to link disparate "Issues" to a centralized risk framework to ensure horizontal visibility. Analytical Rigor: Proficiency in designing Operating Effectiveness (OE) testing scripts that use data-driven samples to prove a control is working. You are comfortable moving beyond "check-the-box" compliance to ensure controls are logically capable of stopping illicit activity. Cross-Functional Collaboration: A natural ability to multitask between Issue Management and Business Advisory . You thrive in a matrixed environment where you must influence stakeholders across Legal, Product, and Operations without direct authority. Education & Certification: Bachelor’s degree in a related field is required. CAMS (Certified Anti-Money Laundering Specialist) or CRCM certification is highly preferred, as is experience in high-growth FinTech or complex global banking. Nice to Haves Emerging Tech & Crypto Expertise: Direct experience designing AML controls for Digital Assets, DeFi protocols, or Blockchain-based financial services , including familiarity with on-chain monitoring tools (e.g., Chainalysis, Elliptic, or TRM Labs). SQL & Data Visualization Fluency: Ability to write basic SQL queries to pull data for control validation or the ability to build compliance dashboards in Tableau or Looker to track remediation progress in real-time. Regulatory Liaison Experience: Prior experience directly managing examinations or responding to inquiries from regulators (e.g., FINRA, FinCEN, or the FCA ), specifically regarding the remediation of "Matters Requiring Attention" (MRAs). Automation Enthusiast: Familiarity with Robotic Process Automation (RPA) or AI-driven "Low-Code" tools that can be used to automate manual AML checks, reducing the firm's reliance on human intervention for repetitive tasks. Perks & Benefits Competitive total compensation package Hybrid role – 3 days a week in our downtown San Jose office Comprehensive healthcare schemes for employees and dependents Wellness programs, team events, and employee engagement initiatives L&D opportunities and professional development support More that we love to tell you along the process! #LI-JC4 #LI-HYBRID OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. The salary range for this position is $107,000 - $200,000 (in CA) The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .