Web3 Licensing and Regulatory Compliance Specialist

About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.

About You You are proactive, reliable, and enjoy helping people solve problems. You are highly organized, eager to learn, and comfortable supporting both technical and non-technical teams. You enjoy being hands-on, can adapt quickly in a fast-paced environment, and are willing to take ownership of day-to-day operational tasks to help keep the office and systems running smoothly.

About the Role We are looking for a Web3 Licensing and Regulatory Compliance Specialist to support client delivery and develop our Web3 regulatory services. You will work with our InfoSec and Compliance Lead and CertiK specialists across cybersecurity, AML, product, and engineering to turn regulatory requirements into practical plans, application materials, and controls. The role combines client assignments with regulatory research and internal development for crypto-asset service providers, virtual asset service providers, token issuers, and other digital-asset businesses in the European Union, the United Arab Emirates, and other priority jurisdictions.

Responsibilities Client Delivery

• Deliver Web3 regulatory advisory projects, including licensing and authorisation readiness, gap assessments, compliance reviews, and implementation support for CASPs, VASPs, token issuers, and other digital-asset businesses.

• Help clients translate regulatory requirements into practical governance, AML and CFT, cybersecurity, technology, and operational controls, drawing on CertiK's wider expertise.

• Support application-related work by coordinating key materials, evidence, stakeholders, and responses to regulators, particularly for European Union and United Arab Emirates processes.

• Present clear findings and recommendations in reports and workshops, and manage delivery across agreed scope, timelines, and follow-up actions.

Regulatory Research and Internal Product and Service Development

• Monitor and analyse Web3 regulation and supervisory expectations across priority jurisdictions, with particular attention to the European Union and the United Arab Emirates.

• Turn regulatory research and client experience into reusable methods, templates, control mappings, knowledge materials, and new or updated regulatory service offerings.

• Work with CertiK's cybersecurity, AML, product, and engineering teams to develop and improve compliance tools and workflows, including requirements definition, regulatory content, and testing.

• Use market developments and client feedback to identify opportunities to improve our tools and services and make delivery more consistent and scalable.

Requirements

• Strong match: Hands-on experience supporting a Web3 licensing or authorisation process for a CASP, VASP, token issuer, or similar digital-asset business. Direct application experience under MiCA, VARA, ADGM FSRA, DFSA, or another European Union or United Arab Emirates regime is especially valuable.

• Experience: Two to four years in digital-asset regulatory compliance, financial-services licensing, legal or compliance operations, consulting, or a related role.

• Web3 knowledge: Practical understanding of blockchain networks, wallets, custody, exchanges, transfers, token issuance, stablecoins, and common digital-asset business models.

• Regulatory knowledge: Working knowledge of governance, operational risk, consumer protection, technology, cybersecurity, and/or AML requirements relevant to digital-asset firms.

• Writing and delivery: Ability to interpret regulation, map obligations to controls, produce clear documentation, and coordinate contributors, evidence, dependencies, and deadlines.

• Communication and collaboration: Professional written and spoken English and the ability to work with clients, subject-matter experts, senior management, and regulators in a distributed team with reliable overlap with CET and CEST business hours.

• Additional qualifications: A relevant legal, compliance, risk, accounting, or information-security qualification or certification, or additional European or Middle Eastern language skills, is an advantage.

What We Offer

• Remote work: Work remotely from Europe or a nearby time zone, with regular overlap with European business hours.

• Competitive compensation: A competitive base salary plus equity or token options where applicable.

• Professional growth: Direct exposure to EU, UAE, and global digital-asset authorisation projects, with support to deepen your Web3 regulatory expertise.

This role must be performed outside the United States. We are unable to consider candidates who will work from within the U.S.