Looking for a job

Amit Negi

@amitnegi2

Message

Cyber Security Audit and Compliance Engineer at IIIT Hyderabad.

India

Message

I am currently working at IIIT Hyderabad, where I develop and review information and cybersecurity policies and conduct audits against ISO/IEC 27001:2022, NIST CSF 2.0, and CERT-In guidelines. My audit experience includes assessments of several Indian public sector undertakings, including a gap assessment against ISO/IEC 27001:2022 and ISO/IEC 42001.

Previously, at the C3i Center, IIT Kanpur, I conducted cybersecurity audits and gap assessments, including on-site assessments of 12 government-owned major ports across India, and carried out the cyber resilience and readiness assessment for Maha Kumbh 2025, later published as a case study.

I am a BSI-certified ISO/IEC 27001:2022 Lead Auditor, co-author of published research on automating policy compliance using agentic AI, and a member of the OpenSSF Global Cyber Policy Working Group. My professional interests are cybersecurity governance, risk and compliance (GRC), cyber resilience, AI security, and AI governance.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Audit and Compliance Engineer

Current

International Institute of Information Technology Hyderabad

Nov 2025 - Present (11 months)

Develops and reviews Information and Cyber Security Policy (ICSP) and supporting sub-policies. Conducts internal cybersecurity audits and compliance assessments against ISO/IEC 27001:2022, NIST CSF 2.0, and CERT-In guidelines.

ISO 27001 NIST CSF CERT In ISO 42001 Policy Development Audit Compliance Assessments

Project Executive Officer

C3i Center, Indian Institute of Technology Kanpur

Apr 2024 - Apr 2025 (1 year)

Conducted on-site cybersecurity audits and gap assessments at 12 of India's major ports against ISO/IEC 27001:2022. Carried out cyber resilience and readiness assessment for Maha Kumbh 2025 and prepared RFPs and technical documentation.

ISO 27001 Gap Analysis Cyber Resilience RFP CTF Technical Documentation

Senior Project Scientist

C3i Center, Indian Institute of Technology Kanpur

Aug 2023 - Mar 2024 (7 months)

Performed internal ISMS audits against ISO/IEC 27001, covering physical and technological controls. Identified and managed information security risks in line with ISO/IEC 27001 and ISO/IEC 27005, and deployed LMS and DMS applications.

ISO 27001 ISO 27005 ISMS Internal Audit Risk Management LMS DMS Drupal CTF

Project Scientist

C3i Center, Indian Institute of Technology Kanpur

Mar 2022 - Aug 2023 (1 year 5 months)

Performed cybersecurity gap assessments at the Indian Ports Association and NHAI, and drafted SOPs and system usage policies. Designed and developed educational testbeds for industrial automation security.

Gap Analysis SOP流程设计 Policy Testbeds ICS OT Security

Senior Project Associate / Project Associate

C3i Center, Indian Institute of Technology Kanpur

Nov 2018 - Mar 2022 (3 years 4 months)

Designed and commissioned a hydroponics cyber-physical testbed for cybersecurity training and research. Supported SCADA screen design and hosted a Capture-the-Flag competition at Nullcon 2020.

Testbeds SCADA CTF Cybersecurity Training