IT & Compliance Auditor

About the Company

Ajaia is a rapidly growing AI consultancy and product studio dedicated to helping organizations move from experimentation to real results. We operate across four core pillars: AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development.

In addition to client services, Ajaia builds proprietary AI products, copilots, and vertical solutions that solve high-value industry problems. This dual model allows us to translate hands-on implementation experience into scalable products while continuously refining our approach through real-world deployment.

Our operating model combines deep technical execution with practical change management, enabling enterprises to deploy secure, compliant, and high-impact solutions that drive measurable operational value. From executive roadmapping to production-ready systems and workforce upskilling, Ajaia embeds intelligent tools directly into the workflows that matter most.

Mission: Help organizations win the AI moment.

Position Overview

Ajaia is hiring an IT & Compliance Auditor to own compliance programs, security audits, and risk management across the organization. This role sits at the intersection of IT operations and regulatory compliance. You will maintain HIPAA and SOC 2 programs, manage vendor security assessments, prepare audit evidence, and ensure the company meets its compliance obligations as it scales across regulated industries.

This is not a passive documentation role. You will be hands-on: reviewing cloud configurations, testing controls, assessing vendors, and building automation that makes compliance faster and more reliable. The company runs a multi-cloud environment (GCP and Azure) and you need to be comfortable validating technical controls, not just writing about them.

We expect candidates to use AI in daily workflows across research, ideation, drafting, design iteration, quality checks, and delivery acceleration. AI fluency is a core execution requirement, not optional tooling.

• Bachelor's degree in Information Systems, Cybersecurity, Accounting, or equivalent experience
• 3–6 years of experience in one or more of the following areas:
• IT audit and control testing
• Compliance program management (HIPAA, SOC 2, ISO 27001, or similar frameworks)
• Information security and governance, risk, and compliance (GRC)
• Vendor risk management and third-party security assessments
• Direct experience with HIPAA and SOC 2 compliance programs, including evidence collection, control documentation, and remediation tracking
• Understanding of cloud security controls with the ability to review configurations in GCP and Azure
• Experience preparing for and supporting external audits
• Ability to develop and maintain security policies, procedures, and standards
• Strong documentation and communication skills with high attention to detail
• Experience conducting vendor security assessments and reviewing data processing agreements
• Comfortable working autonomously in a fast-paced, fully remote, distributed environment
• Proficiency with AI tools in daily work

Preferred Requirements:

• Relevant certifications: CISA, CRISC, CISM, HITRUST CCSFP, or equivalent
• Experience with GRC platforms such as Vanta, Drata, Tugboat Logic, or similar tools
• Background in healthcare or financial services compliance
• Familiarity with GDPR, DPDPA, or other regional data protection frameworks
• Experience with vendor risk management platforms or assessment frameworks (SIG, CAIQ)
• Experience conducting or coordinating internal security audits and control testing
• Ability to review IAM configurations (SSO, MFA, RBAC) against compliance requirements
• Experience building automation for compliance tracking, evidence collection, or audit preparation