GRC Careers: AI Governance, Risk and Compliance JobsConnecting Talent and Trust. Post a Job Log in

JobsHong KongSenior / Staff Software Engineer, Mobile — Core (Account & Risk)

Senior / Staff Software Engineer, Mobile — Core (Account & Risk)

OKX
RiskOn-siteFull-timeHong Kong, Hong Kong SAR

OKX is hiring for the role of Senior / Staff Software Engineer, Mobile — Core (Account & Risk), Hong Kong, Hong Kong SAR (On-site). This is a Risk role in the governance, risk, and compliance field. Review the full details below and apply directly with OKX.

Organization: OKXLocation: Hong Kong, Hong Kong SARWorkplace: On-siteFocus: RiskPosted: Aug 11, 2026
OKX is hiring for this Risk role in Hong Kong, one of the metros GRC Careers tracks for governance, risk, and compliance hiring.

ace-line old-record-id- ace-line old-record-id- OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX s sponsorship of a visa.

ace-line old-record-id-

ace-line old-record-id- Who We Are

ace-line old-record-id- At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual s freedom.

ace-line old-record-id-

ace-line old-record-id- OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.

ace-line old-record-id-

ace-line old-record-id- Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.

ace-line old-record-id-

ace-line old-record-id- OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.

ace-line old-record-id- ace-line old-record-id- About The Team

ace-line old-record-id- Own the account backbone of a CeFi platform trusted by strong millions — login, registration, account security, MFA, Passkey — where a single security regression is measured in real user funds. The more senior you are, the more you set the technical direction others build on.

ace-line old-record-id-

ace-line old-record-id- ace-line old-record-id- What You ll Be Doing

ace-line old-record-id- ace-line old-record-id- Own account-system subsystems end-to-end — authentication, MFA, Passkey/WebAuthn, session and device trust, account registration and recovery — including architecture, tradeoffs, and long-term evolution.

ace-line old-record-id- Design flows that are strong secure and low-friction at millions-of-DAU scale — the hardest tradeoff in this space.

ace-line old-record-id- Partner with risk and security teams to turn threat models into shipped mobile defenses.

ace-line old-record-id- Build our AI-native engineering practice — design automated development workflows and harness systems (agents, evals, guardrails, CI integration) that let AI do real engineering work, while strong safeguarding delivery quality and efficiency.

ace-line old-record-id- Raise the bar through design and code review, and by making the engineers around you better.

ace-line old-record-id-KXzUdZittoXiOdxHVJalRJvZgqh At the Staff level: set technical direction beyond your own subsystem and drive cross-team, cross-timezone decisions that shape the account platform.

ace-line old-record-id- What We Look For In You

ace-line old-record-id- Deep, hands-on experience building strong native iOS and/or Android — you understand the platform, not just a framework on top of it.

ace-line old-record-id- Experience with a strong cross-platform / shared business-logic layer. We build ours in Rust + UniFFI; direct Rust-on-mobile experience is a strong plus, but experience with any shared-logic approach — KMP, Flutter, or React Native — transfers well and is valued.

ace-line old-record-id- Fluent in at least one of: Swift / Kotlin / Rust / Objective-C / Java / JavaScript, with CS fundamentals.

ace-line old-record-id-FbVfdpCNNoOaxVxEFXDlzWthgWe Architecture experience with large-scale mobile apps — you ve applied maintainable design patterns and own solutions from requirements through to production.

ace-line old-record-id- Hands-on with strong mobile authentication and security — OAuth/OIDC, MFA, secure storage (Keychain/Keystore), biometrics. Direct experience with Passkey / WebAuthn / FIDO2 is a strong advantage — it s live in our stack and central to what you ll work on.

ace-line old-record-id- Solid grasp of threat modeling and the mobile attack surface.

ace-line old-record-id- You apply AI deeply in your own engineering — not just code generation. You ve built, or are driven to build, automated development workflows and harnesses that make delivery strong both faster and more reliable. Solid grasp of LLM fundamentals, prompt engineering, RAG, and agent concepts, with hands-on experience taking an AI pipeline from scratch to shipped.

ace-line old-record-id- Comfortable with strong ambiguity and high scale — you ve debugged problems that only appear under real production load.

ace-line old-record-id- Signals we value: you naturally strong raise the standard of teams you join, mentor without being asked, and can grow into a technical anchor for the group.

ace-line old-record-id- Nice-To-Haves

ace-line old-record-id- Fraud strong / risk, cryptography, or regulated-industry (fintech) experience.

ace-line old-record-id- Experience with strong mini-program or dynamic/hot-update frameworks.

ace-line old-record-id- Crypto trading / Web3 experience.

ace-line old-record-id- ace-line old-record-id- Perks and Benefits

ace-line old-record-id- Competitive total compensation package

ace-line old-record-id- L and D programs and Education subsidy for employees growth and development

ace-line old-record-id- Various team building programs and company events

ace-line old-record-id- Wellness and meal allowances

ace-line old-record-id- Comprehensive healthcare schemes for employees and dependants

ace-line old-record-id- More that we love to tell you along the process!

ace-line old-record-id-

ace-line old-record-id- ace-line old-record-id- Please note that Hong Kong is a group-level service hub, and OKX em does not carry on em a business of em operating a virtual asset trading platform in Hong Kong.

span span span Notice:
span span All official span text-with-abbreviation text-with-abbreviation-bottomline OKX span vacancies are published on this website. span span While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. strong span span If in doubt, please apply directly through our official careers website.

span span Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to span text-with-abbreviation text-with-abbreviation-bottomline OKX span s a rich-text-anchor __anchor-intercept-flag__ text-content-link Candidate Privacy Notice span span.

Location and market context

This role is based in Hong Kong on-site. Local candidates benefit from being close to OKX's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About risk management roles

Risk roles own the methodology for identifying, assessing, and escalating enterprise, operational, and technology risk. Second-line teams set risk appetite and challenge the first line. Roles like this one are typically evaluated against frameworks such as enterprise and operational risk frameworks, NIST AI RMF, and risk-appetite and escalation practices.

How to position yourself for this risk management role

Strong candidates emphasize risk assessment methodology, appetite and escalation, cross-functional partnership, and clear reporting to senior leadership and the board. In your resume and outreach, tie your experience to how OKX would apply enterprise and operational risk frameworks, NIST AI RMF, and risk-appetite and escalation practices, and lead with concrete outcomes rather than duties.

Similar GRC roles

Want to be next in a role like this?

Roles like Senior / Staff Software Engineer, Mobile — Core (Account & Risk) in Hong Kong, Hong Kong SAR open regularly. Be first to know — privately. No current employer ever sees you looking.

New Risk roles, the moment they post. Tell us where to send them.

Unsubscribe anytime, one click.

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.