Director of IT & Security
- Role
- Security
- Experience
- Lead
- Employment
- Full-time
Open to PL, RO, PT, CZ, IN only. Set where you work from to check your eligibility.
No BS summary
Hands-on IT and security leader with 8+ years across IT ops, security, cloud, and compliance. Must manage GCP and Azure, HIPAA/SOC 2, identity/access, incident response, and use AI/automation daily. Fully remote role hiring in target regions including Poland, Romania, Portugal, Czechia, and India.
Core skills
Required skills
Optional skills
About the Company Ajaia is a rapidly growing AI consultancy and product studio dedicated to helping organizations move from experimentation to real results. We operate across four core pillars: AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development. In addition to client services, Ajaia builds proprietary AI products, copilots, and vertical solutions that solve high-value industry problems. This dual model allows us to translate hands-on implementation experience into scalable products while continuously refining our approach through real-world deployment. Our operating model combines deep technical execution with practical change management, enabling enterprises to deploy secure, compliant, and high-impact solutions that drive measurable operational value. From executive roadmapping to production-ready systems and workforce upskilling, Ajaia embeds intelligent tools directly into the workflows that matter most. Mission: Help organizations win the AI moment. Position Overview Ajaia is hiring a Director of IT & Security to own the full scope of internal IT operations, information security, and compliance across a multi-cloud, multi-country organization. This is a hands-on leadership role. You will build and maintain the systems, policies, and infrastructure that keep the company running securely while driving automation wherever possible. You will own internal IT (devices, access, onboarding), security posture (policies, monitoring, incident response), and compliance (HIPAA, SOC 2, vendor risk). The environment is multi-cloud (GCP and Azure), fast-moving, and AI-first. You are expected to use AI tools to automate routine operations, improve monitoring, and accelerate your own output. This role starts as an individual contributor with the potential to build a small team as the company scales. We expect candidates to use AI in daily workflows across research, ideation, drafting, design iteration, quality checks, and delivery acceleration. AI fluency is a core execution requirement, not optional tooling. Requirements Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience 8+ years of experience in one or more of the following areas: IT operations and infrastructure management Information security and security operations Cloud administration and security (GCP, Azure, or multi-cloud environments) Compliance and audit management (HIPAA, SOC 2, or similar frameworks) Hands-on experience managing multi-cloud environments (GCP and Azure required) Working knowledge of HIPAA and SOC 2 compliance, including direct experience preparing for or managing external audits Experience building and enforcing security policies, access controls, and incident response procedures Strong understanding of identity management (SSO, MFA, RBAC), endpoint management, and network security fundamentals Proficiency with AI tools and a working practice of using automation to reduce operational burden Excellent documentation and communication skills with the ability to translate security concepts for non-technical stakeholders Comfortable working autonomously in a fast-paced, fully remote, distributed environment Preferred Requirements: Relevant certifications: CISSP, CISM, CCSP, CompTIA Security+, or equivalent Experience with DevSecOps practices, CI/CD pipeline security, or infrastructure-as-code (Terraform, Pulumi, or similar) Background in vendor risk management and third-party security assessments Experience supporting healthcare or financial services clients with regulated data requirements Familiarity with GDPR, DPDPA, or other regional data protection frameworks Experience with GRC platforms such as Vanta, Drata, or similar tools Experience with SIEM platforms, vulnerability management tools, or penetration testing coordination Benefits Base salary: Approximately $35,000 USD per year (calibrated for target regions). Performance bonus: Opportunity to earn up to 100% of base salary in performance-based bonuses. Salary and total compensation depend on experience, location, and demonstrated performance during the hiring process.
What you'll do
- Own the full scope of internal IT operations, information security, and compliance across a multi-cloud, multi-country organization.
- Build and maintain the systems, policies, and infrastructure that keep the company running securely while driving automation wherever possible.
- Own internal IT, including devices, access, and onboarding.
- Own security posture, including policies, monitoring, and incident response.
- Own compliance, including HIPAA, SOC 2, and vendor risk.
- Use AI tools to automate routine operations, improve monitoring, and accelerate your own output.
- Start as an individual contributor with the potential to build a small team as the company scales.
- Use AI in daily workflows across research, ideation, drafting, design iteration, quality checks, and delivery acceleration.
What they require
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience.
- 8+ years of experience in one or more of the following areas: IT operations and infrastructure management; information security and security operations; cloud administration and security; compliance and audit management.
- Hands-on experience managing multi-cloud environments, with GCP and Azure required.
- Working knowledge of HIPAA and SOC 2 compliance, including direct experience preparing for or managing external audits.
- Experience building and enforcing security policies, access controls, and incident response procedures.
- Strong understanding of identity management, endpoint management, and network security fundamentals.
- Proficiency with AI tools and a working practice of using automation to reduce operational burden.
- Excellent documentation and communication skills with the ability to translate security concepts for non-technical stakeholders.
- Comfortable working autonomously in a fast-paced, fully remote, distributed environment.
- AI fluency is a core execution requirement, not optional tooling.
- Preferred: Relevant certifications: CISSP, CISM, CCSP, CompTIA Security+, or equivalent.
- Preferred: Experience with DevSecOps practices, CI/CD pipeline security, or infrastructure-as-code.
- Preferred: Background in vendor risk management and third-party security assessments.
- Preferred: Experience supporting healthcare or financial services clients with regulated data requirements.
- Preferred: Familiarity with GDPR, DPDPA, or other regional data protection frameworks.
- Preferred: Experience with GRC platforms such as Vanta, Drata, or similar tools.
- Preferred: Experience with SIEM platforms, vulnerability management tools, or penetration testing coordination.
Benefits
- Base salary: Approximately $35,000 USD per year, calibrated for target regions.
- Performance bonus: Opportunity to earn up to 100% of base salary in performance-based bonuses.
Ajaia is a rapidly growing AI consultancy and product studio dedicated to helping organizations move from experimentation to real results. We operate across four core pillars: AI Strategy and Advisory, AI Engineering and Automation, Workforce Training and Enablement, and Custom Product Development.