Looking for a job

Rohith User

@rohithuser7

GRC analyst at iMerit Technology assessing SaaS and cloud compliance, with remediation tracking aligned to ISO 27001:2022 and NIST CSF 2.0.

United Kingdom

Message

At iMerit Technology, I assess compliance across client environments using Microsoft Compliance Manager and Purview, and conduct third-party vendor security assessments. I maintain audit-ready risk registers and control records, then report security KPIs to client stakeholders.

As a self-directed AI Security Researcher, I’m developing ClinRAG-Guard, an open-source compliance and assurance framework for clinical AI systems. I’ve also assessed ICS/OT risks with Nemesys Insights LLC (AI Safety Fund) and configured Microsoft Sentinel to support compliance reporting.

At Hactify Cyber Security, I conducted vendor security assessments and SaaS governance reviews across client M365 environments, and built Python assessment tooling that reduced recurring analyst assessment time by 40%. I’m ISO 27001:2022 Lead Implementer certified and hold an MSc in Cyber Security, Privacy and Trust from the University of Edinburgh.

Experience

Work history, roles, and key accomplishments

Current

AI Training Consultant

Current

iMerit Technology

Feb 2026 - Present (9 months)

Assessed compliance posture across client environments using Microsoft Compliance Manager and Purview, conducted third-party vendor security assessments, and delivered security awareness campaigns including phishing simulations.

Microsoft Compliance Manager Microsoft Purview DLP Data Classification ISO 27001 NIST CSF Risk Assessment Vendor Security Assessment Security Awareness Phishing Simulations OWASP LLM Top 10 Incident Management KPI Reporting

Current

AI Security Researcher

Current

Self-directed

Nov 2025 - Present (1 year)

Developing ClinRAG-Guard, an open-source compliance and assurance framework for clinical AI systems, and configuring Microsoft Sentinel SIEM for compliance reporting and security posture measurement.

EU AI Act MHRA Risk Assessment ICS OT Security Microsoft Sentinel SIEM KQL Microsoft Defender Microsoft 365 Unified Audit Log Security Baselines NCSC KPI Dashboards

Security Research Analyst

University of Edinburgh

Sep 2025 - Jan 2026 (4 months)

Built supervised ML classification system for Tor Browser traffic fingerprinting achieving 81-88% accuracy across 4 models, and analyzed 50,000+ records through TLS-level feature extraction.

Machine Learning Random Forest SVM XGBoost Deep Learning TLS Feature Extraction Statistical Analysis Python

SOC Analyst (Managed Services)

Hactify Cyber Security

Feb 2025 - Jul 2025 (5 months)

Conducted third-party vendor security assessments and SaaS governance reviews across 80+ client M365 environments, and built automated assessment tooling in Python cutting analyst assessment time by 40%.

Microsoft Purview DLP Vulnerability Assessment Entra ID Conditional Access Python Streamlit APIs Incident Tracking remediation GRC

Security Automation Engineer

AICTE / IBM

Nov 2024 - Jan 2025 (2 months)

Developed ML-based anomaly detection processing 3,000+ security records using TensorFlow and Scikit-learn, and built Python automation pipelines for log ingestion cutting manual reporting effort by 60%.

Machine Learning TensorFlow scikit learn Python Automation Data Ingestion Anomaly Detection