Devansh Dubey

About Devansh Dubey

I am a Cyber Law & Information Security professional with hands-on experience in GRC audits, data privacy operations, and global regulatory compliance. Currently pursuing my Master’s in Cyber Law & Information Security at NLIU Bhopal, I work at the intersection of law, technology, and cybersecurity — transforming complex privacy and regulatory requirements into clear, actionable frameworks for organizations. My recent work at Payatu includes: • Conducting ISO 27001 internal audits, preparing audit scopes & non-conformity reports • Designing GRC audit checklists mapped to ISO 27001, NIST 800-53, SOC 2, CERT-In, and DPDP Act • Reviewing and improving ISMS-aligned policies and compliance documentation Previously at The Cyber Blog India and Ethically.in, I contributed to: • Authoring research articles on cybersecurity, AI privacy, GDPR, and India’s DPDP Act • Developing DPDP Gap Assessment tools • Drafting privacy notices, DPIAs, and cross-border compliance documentation (India, UAE, Bahrain, Saudi Arabia). At Ikigai Law, I researched GDPR enforcement, cross-border data transfers, AI model protection, and RBI financial compliance — strengthening my understanding of Tech Policy and Digital Regulations. What drives me? Building secure, ethical, and privacy-first digital ecosystems through research-backed legal and technical expertise. Areas I work in: ISO 27001 Audits & ISMS Documentation GDPR, DPDP Act & Global Privacy Frameworks Risk Assessment, DPIA & Privacy Governance Cybersecurity Policy Research Cross-Border Data Compliance AI Ethics & Responsible AI Always open to opportunities in: Data Privacy • GRC • Cybersecurity • Technology Law • Compliance Research

Experience

1. Grc Intern

   Payatu

   Mar 2025 — Present · Pune, IN

   Mapped ISO 27701 controls against DPDP Act and GDPR to surface overlaps and gaps.– Prepared a DPDP Act gap assessment toolkit for in-house implementation, covering consent, data principal rightsand cross-border transfers.– Conducted ISO 27001:2022 internal audits, handling planning, evidence collection and non-conformity tracking.– Ran NIST CSF 2.0 gap assessments and flagged remediation priorities.– Reviewed ISMS policies and drafted compliance reports.

Education

• Nirma University, Ahmedabad

  B.A.LL.B. (Hons.)

• National Law Institute University, Bhopal

  Master of Cyber Law & Information Security (MCLIS)

• Jawahar Lal Nehru School BHEL Bhopal

  PCM + Computer Science (C++)