black hats working for an auditing company is like being mad that your dentist cheated on his taxes. your teeth look great either way.
You want former black-hats only, with a reputation of being a white-hat hacker in the present day. Handing tons of sensitive customer information to people actively engaged in black-hat hacking and scams is a terrible idea.