Compliance Engineer

CertiK; Asia; Hybrid; PEN 238,501 - 374,787; Full time

Job summary

CertiK, a leading Web3 security company, is seeking a hands-on compliance professional to own AI outputs and related client deliverables. You will turn regulatory requirements into clear scopes, support licensing and readiness projects, and collaborate with Engineering to turn recurring work into reusable workflows.

You will interact with client-facing teams and commercial services, ensuring regulatory accuracy, evidence traceability, and high-quality guidance.

Qualifications

• 3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm.
• Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project.
• Strong understanding of regulatory analysis, evidence review, and licensing documentation.
• Ability to produce clear guidance, mappings, presentations, and client reports.
• Strong client communication and cross-functional project-management skills.
• Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality.
• Strong written and spoken English; professional Chinese proficiency is preferred but not required.
• Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred.
• Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review.

Responsibilities

• Analyze and decompose regulatory frameworks and licensing requirements.
• Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking.
• Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability.
• Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports.
• Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables.
• Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows.
• Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal.

Job description

About the Company

Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.

Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.

About You

You are a hands-on compliance professional who understands how regulatory frameworks and licensing applications work from initial scoping through final submission readiness. You can turn complex regulations into clear guidance and client deliverables, manage both structured audit requests and fast-changing BD needs, and know when an issue requires escalation to senior Compliance or Legal.

About the Role

You will be the first-line compliance owner for AI outputs and related client deliverables. You will support stakeholder groups including client-facing teams and commercial services. You will turn the raw AI output into accurate and usable deliverables, and work as/with Engineering to convert recurring compliance work into reusable workflows and knowledge assets.

Responsibilities

• Analyze and decompose regulatory frameworks and licensing requirements.


• Support licensing and regulatory-readiness projects, including scoping, applicability analysis, gap assessment, evidence requests, policy review, application preparation, and remediation tracking.


• Conduct first-line review of AI outputs for regulatory accuracy, evidence support, source traceability, and client suitability.


• Convert unstructured requests into clear scopes and deliverables, including compliance analyses, and review reports.


• Support compliance guidance, evidence checklists, submission-material mapping, and licensing deliverables.


• Work as/with Engineering to build regulatory mappings, templates, review rules, evaluation cases, and structured AI workflows.


• Escalate high-risk regulatory interpretations and final legal or compliance conclusions to senior reviewers or Legal.

Requirements

• 3 or more years of Engineering experience in compliance, regulatory consulting, digital assets, fintech, financial services, compliance audit, or a law firm.


• Hands-on experience with at least 1 licensing application, regulatory registration, or end-to-end regulatory-readiness project.


• Strong understanding of regulatory analysis, evidence review, and licensing documentation.


• Ability to produce clear guidance, mappings, presentations, and client reports.


• Strong client communication and cross-functional project-management skills.


• Ability to manage urgent and ambiguous requests from client-facing team while maintaining quality.


• Strong written and spoken English; professional Chinese proficiency is preferred but not required.


• Familiarity with digital-asset regulation, VASP licensing or similar frameworks is preferred.


• Basic understanding of LLM limitations, hallucination risk, source traceability, and human-in-the-loop review.

This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.