Chief Information Security Officer (CISO)

About the Company Ajaia is a rapidly growing AI consultancy and product studio dedicated to helping organizations move from experimentation to real results. We operate across four core pillars: AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development. In addition to client services, Ajaia builds proprietary AI products, copilots, and vertical solutions that solve high-value industry problems. This dual model allows us to translate hands-on implementation experience into scalable products while continuously refining our approach through real-world deployment. Our operating model combines deep technical execution with practical change management, enabling enterprises to deploy secure, compliant, and high-impact solutions that drive measurable operational value. From executive roadmapping to production-ready systems and workforce upskilling, Ajaia embeds intelligent tools directly into the workflows that matter most. Mission: Help organizations win the AI moment. Position Overview Ajaia is hiring a Chief Information Security Officer to lead information security, IT operations, and compliance for a fast-growing AI consultancy operating across regulated industries. You will define and execute the company's security strategy, own compliance programs (HIPAA, SOC 2), manage multi-cloud infrastructure security (GCP and Azure), and build the policies and systems that protect client and company data. This is a hands-on CISO role. You are not managing a large security team. You are the security function, with the potential to hire as the company grows. You will configure systems, write policies, run audits, respond to incidents, and manage vendors directly. We expect candidates to use AI in daily workflows across research, ideation, drafting, design iteration, quality checks, and delivery acceleration. AI fluency is a core execution requirement, not optional tooling. Bachelor's degree in Information Security, Computer Science, Cybersecurity, or equivalent experience 7+ years of experience in one or more of the following areas: Information security leadership and strategy Security architecture and operations Cloud security across multi-cloud environments (GCP, Azure, or AWS) Compliance program ownership (HIPAA, SOC 2, ISO 27001, or similar frameworks) IT operations and infrastructure management Hands-on experience with cloud security in multi-cloud environments (GCP and Azure required) Direct experience owning or leading HIPAA and/or SOC 2 compliance programs end-to-end Strong background in security architecture, incident response, and risk management Experience with identity and access management (SSO, MFA, RBAC), endpoint security, network security, and security monitoring tools Ability to define security strategy and execute it hands-on in a lean organization Proficiency with AI tools and automation in security operations Strong communication skills with the ability to translate security concepts for non-technical leadership and stakeholders Comfortable working autonomously in a fast-paced, fully remote, distributed environment Preferred Requirements: Relevant certifications: CISSP, CISM, CCSP, CRISC, or equivalent Experience in healthcare, financial services, or other regulated industries Background in DevSecOps, application security, or secure software development lifecycle (SSDLC) Experience with GRC platforms such as Vanta, Drata, or similar tools Experience building security programs from the ground up at a startup or growth-stage company Familiarity with GDPR, DPDPA, or other regional data protection frameworks Experience with SIEM implementation, penetration testing coordination, or vulnerability management programs Background in vendor risk management and third-party security assessments Base salary: Approximately $35,000 USD per year (calibrated for target regions). Performance bonus: Opportunity to earn up to 100% of base salary in performance-based bonuses. Salary and total compensation depend on experience, location, and demonstrated performance during the hiring process.