IT & Compliance Auditor

Ajaia is a rapidly growing AI consultancy and product studio dedicated to AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development. It operates across client services and proprietary AI products, copilots, and vertical solutions to solve high-value industry problems. The company focuses on deploying secure, compliant, and impactful AI solutions enabling enterprises to embed intelligent tools into critical workflows.

• Bachelor's degree in Information Systems, Cybersecurity, Accounting, or equivalent experience
• 3–6 years of experience in IT audit and control testing, compliance program management (HIPAA, SOC 2, ISO 27001 or similar), information security and GRC, and vendor risk management
• Direct experience with HIPAA and SOC 2 compliance programs
• Understanding of cloud security controls; ability to review configurations in GCP and Azure
• Experience preparing for and supporting external audits
• Strong documentation and communication skills with high attention to detail
• Experience conducting vendor security assessments and reviewing data processing agreements
• Comfortable working autonomously in a fast-paced, fully remote environment
• Proficiency with AI tools in daily workflows

Nice to have:

• Relevant certifications such as CISA, CRISC, CISM, HITRUST CCSFP
• Experience with GRC platforms like Vanta, Drata, Tugboat Logic
• Background in healthcare or financial services compliance
• Familiarity with GDPR, DPDPA, or other data protection frameworks
• Experience with vendor risk management platforms or assessment frameworks (SIG, CAIQ)
• Experience conducting or coordinating internal security audits and control testing
• Ability to review IAM configurations (SSO, MFA, RBAC) against compliance requirements
• Experience building automation for compliance tracking and audit preparation

• Own compliance programs, security audits, and risk management across the organization
• Maintain HIPAA and SOC 2 compliance programs, including evidence collection, control documentation, and remediation tracking
• Manage vendor security assessments and review data processing agreements
• Review cloud configurations and test controls in multi-cloud environments (GCP and Azure)
• Prepare and support external audits
• Develop and maintain security policies, procedures, and standards
• Build automation for compliance tracking, evidence collection, and audit preparation