Chief Information Security Officer (CISO)

Ajaia is a rapidly growing AI consultancy and product studio dedicated to helping organizations move from experimentation to real results. The company operates across AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development. Ajaia builds proprietary AI products, copilots, and vertical solutions and serves regulated industries with secure, compliant AI deployments.

• Bachelor's degree in Information Security, Computer Science, Cybersecurity, or equivalent experience
• 7+ years experience in one or more areas: information security leadership and strategy, security architecture and operations, cloud security in multi-cloud environments (GCP, Azure, or AWS), compliance program ownership (HIPAA, SOC 2, ISO 27001), IT operations and infrastructure management
• Hands-on experience with cloud security in multi-cloud environments (GCP and Azure required)
• Direct experience owning or leading HIPAA and/or SOC 2 compliance programs end-to-end
• Strong background in security architecture, incident response, and risk management
• Experience with identity and access management (SSO, MFA, RBAC), endpoint security, network security, and security monitoring tools
• Ability to define and execute security strategy hands-on in a lean organization
• Proficiency with AI tools and automation in security operations
• Strong communication skills for non-technical stakeholders
• Comfortable working autonomously in a fast-paced, fully remote environment

Nice to have:

• Relevant certifications: CISSP, CISM, CCSP, CRISC, or equivalent
• Experience in healthcare, financial services, or regulated industries
• Background in DevSecOps, application security, or SSDLC
• Experience with GRC platforms like Vanta or Drata
• Familiarity with GDPR, DPDPA, or other data protection frameworks

• Define and execute the company's security strategy
• Own compliance programs (HIPAA, SOC 2)
• Manage multi-cloud infrastructure security (GCP and Azure)
• Build policies and systems to protect client and company data
• Configure security systems, write policies, run audits
• Respond to incidents and manage vendors directly

Preferred Responsibilities:

• Build security programs from the ground up at a startup or growth-stage company
• Coordinate SIEM implementation, penetration testing, and vulnerability management
• Manage vendor risk and third-party security assessments