CertiK is a global leader in Web3 security, dedicated to securing blockchain protocols, smart contracts, and decentralized applications through advanced security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions—including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services—to thousands of Web3 projects globally.

CertiK is backed by top investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by the World Economic Forum and CB Insights for its pioneering work in Web3 security.

Role Summary

CertiK is looking for a hands-on Compliance Engineer to serve as the first-line compliance owner for AI outputs and client deliverables. In this role, you will bridge regulatory requirements and technical execution by turning complex frameworks into actionable guidance and partnering with engineering teams to convert recurring compliance processes into structured AI workflows and reusable knowledge assets.

Key Responsibilities

Regulatory Analysis: Analyze and decompose regulatory frameworks, VASP requirements, and licensing criteria into structured guidance and checklists.
Licensing & Readiness: Support end-to-end licensing projects, gap assessments, policy reviews, evidence mapping, application preparations, and remediation tracking.
AI Output Quality Assurance: Conduct first-line reviews of AI-generated compliance outputs to ensure regulatory accuracy, source traceability, and suitability for enterprise clients.
Cross-Functional Workflow Engineering: Collaborate with engineering teams to build regulatory mappings, review rules, evaluation test cases, and human-in-the-loop AI workflows.
Deliverables & Client Support: Convert unstructured client requests into clear compliance analyses, review reports, and evidence mappings for client-facing and commercial teams.
Risk Escalation: Identify and escalate high-risk regulatory interpretations or complex legal/compliance scenarios to senior leadership.

Requirements & Qualifications

Must-Haves

Experience: 3+ years in compliance, regulatory consulting, digital assets/fintech, compliance auditing, or specialized legal practice.
Licensing Track Record: Hands-on experience with at least one licensing application, regulatory registration, or end-to-end regulatory-readiness initiative.
AI & Technical Literacy: Basic understanding of LLM limitations, hallucination risks, source traceability, and human-in-the-loop review mechanisms.
Communication: Exceptional written and spoken English skills with strong cross-functional project management and client delivery capabilities.
Regional Eligibility: Role must be performed outside the United States.

Nice-to-Haves

Language: Professional fluency in Chinese (written and spoken).
Domain Knowledge: Deep familiarity with digital asset regulations, Virtual Asset Service Provider (VASP) licensing, or equivalent international regulatory frameworks.