Paul Pettit

Manager, Digital Asset Risk

• Led controls gap assessment for digital asset companies, identifying gaps in IT and cybersecurity controls and delivering actionable recommendations. Assisted in building and maturing their control environment, addressing significant deficiencies, and remediation of material weaknesses highlighted by regulators.
• Led IT general controls assessment for prominent digital asset companies, identifying key processes, risks, and controls, and provided comprehensive recommendations for enhancing their control environment.
• Managed client relationships with key stakeholders, including CIOs, Heads of Information Security, and Heads of IT Audit & CIA, to ensure effective communication, alignment on project objectives, and overall client satisfaction throughout the engagement lifecycle.

Senior, Digital Asset Specialist

• Executed digital asset security risk reviews and investigated blockchain protocols to identify security and financial risks.
• Served as a digital asset custody subject matter expert on IT processes gap assessments, risks and controls, and IPO readiness projects for digital asset custodians/exchanges, digital asset miners, digital asset broker dealers, and traditional retail and commercial banks operating in the digital asset space.
• Developed thought leadership material for EY's Digital Asset, Fintech, and DevOps programs
• Facilitated various trainings on private key management, MPC and SSS wallets, intro to blockchains, hard forks and airdrops, access management, change management and backup management.

Staff-Senior, Technology Risk Consultant

• Led and executed AICPA (SOC 1 and SOC 2), NIST and COSO security gap assessments with cloud architecture environments
• Designed, assessed, and optimized financial reporting controls for pre-IPO technology companies utilizing proprietary platforms.
  Ensured high-quality standards and client expectations were met by reviewing work prepared by the engagement team.
• Acted as a mentor and coach, contributing to the professional development of junior staff.