• Cloud Infrastructure & Platform Engineering Audit (SME): Deep, hands-on expertise auditing cloud platforms (Alibaba Cloud, AWS), containerization and orchestration (Docker, Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, Helm).
• AI Use, Adoption & Governance: Two dimensions, both required.
  • Auditing AI: Assessing how AI/ML systems are built, deployed, and monitored — model and data lineage, training-data provenance and quality, access to models and prompts, human-in-the-loop and approval controls, evaluation and drift monitoring, and alignment to emerging AI governance and regulatory expectations.
  • Auditing with AI: A demonstrated bias toward using AI in your own audit work — scoping, evidence review, control testing, script generation, and reporting — and an interest in helping the function build reusable AI-enabled audit tooling.

• Crypto & Blockchain Acumen: Prior experience at a crypto exchange or with a crypto product is preferred.
• Critical Thinking for Complex Environments: A proven capacity to analyze novel technical and control environments unique to crypto, identify intricate root causes, and propose effective, context-specific remediation that engineering teams will actually adopt.
• Breadth Across Adjacent Platform Domains: Demonstrable experience auditing control design and operating effectiveness in several of the following:
  • Cloud security and identity — IAM, network segmentation, secrets management, encryption and key management
  • Site reliability and resilience — observability, incident and problem management, capacity, backup and disaster recovery
  • Software development lifecycle — code review, branch protection, artifact integrity, secure SDLC, third-party and open-source dependency risk
  • Data engineering and analytics — integrity and quality of data pipelines and ETL processes
  • AI/ML platform and MLOps — model registries, feature stores, inference infrastructure, and the data feeding them

Nice to Haves