Research Associate & Research Assistant (Law, Cyber Security, Policy, GRC) at CNLU Patna (4 Posts, Rs 40,000-60,000/month)

Chanakya National Law University (CNLU), Patna, a university established by Bihar Act No. XXIV of 2006, has issued Advertisement No. 49/2026-27(Appt.) dated 1 August 2026 inviting online applications for four research positions under the CNLU-GIGA Cyber Security and Data Protection Compliance Research Unit (CS-DPCRU).

The engagements are purely contractual and project-based. The place of work is the CNLU campus at Patna and the appointee reports to the Principal Investigator / Director, CS-DPCRU. Expected deliverables include research publications, policy papers, technical reports, project documentation, training modules and capacity-building programmes, along with support for sponsored research and consultancy projects.

• Research Associate (Law): 1 post, Rs 60,000 per month
• Research Associate (Cyber Security): 1 post, Rs 60,000 per month
• Research Assistant (Policy): 1 post, Rs 40,000 per month
• Research Assistant (Governance, Risk & Compliance - GRC): 1 post, Rs 40,000 per month

The consolidated remuneration is inclusive of all allowances and is subject to deduction of tax at source and other applicable statutory deductions. No HRA, medical or other benefits are admissible.

The Research Associate (Law) will undertake legal research on cyber laws, digital governance, data protection, privacy, artificial intelligence, cybercrime investigations, digital evidence and emerging technology regulation, working with legal scholars, cybersecurity professionals, policy experts and government stakeholders.

• Analyse Indian and international legislation including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules, the DPDP Rules, CERT-In Directions and sectoral regulations
• Draft research papers, policy briefs, reports, legal opinions and white papers
• Assist in preparing model policies, compliance frameworks and legal documentation
• Support capacity-building programmes for government departments, the judiciary, law enforcement agencies and industry
• Publish in Scopus-indexed or peer-reviewed journals and assist in organising conferences, workshops, seminars and executive training programmes

Essential qualification: LL.M. with specialisation in Cyber Law, Technology Law, Information Technology Law, or Data Protection and Privacy Law, together with at least one research paper published in a Scopus-indexed or peer-reviewed journal. Proof of publication (DOI or journal link) must be enclosed with the application.

This position contributes to research, development and capacity-building in cybersecurity, digital forensics, cyber threat intelligence and cyber resilience.

• Conduct research in cybersecurity technologies and cyber defence
• Assist in vulnerability assessment and penetration testing (VAPT) research and digital forensics projects
• Develop cybersecurity frameworks, best practices and technical guidelines
• Participate in cyber incident analysis and cyber threat intelligence research
• Prepare technical reports, white papers and publications, develop laboratory exercises and training material, and deliver technical sessions

Essential qualification: M.Tech./M.E./M.Sc. in Cyber Security, Information Security, Computer Science, Digital Forensics or equivalent. Certifications such as CEH, CHFI, Security+, CISSP, CISM, CISA or ISO 27001 Lead Auditor/Implementer are desirable, as are skills in network security, Linux administration, digital forensics, malware analysis, threat intelligence, Python scripting and cloud security.

The Research Assistant (Policy) supports policy research on digital governance, cybersecurity policy, emerging technologies, the digital economy, AI governance and regulatory frameworks.

• Assist in policy research and literature review; collect and analyse national and international policy documents
• Prepare policy briefs, concept notes and reports
• Monitor developments in cybersecurity and technology policy
• Conduct stakeholder consultations and surveys, maintain project documentation and support grant proposals
• Assist in organising workshops and policy dialogues and support publication activities

Essential qualification: Master's degree in Public Policy, Political Science, Economics, International Relations, Law, Public Administration or a related discipline. Analytical ability, report writing, data analysis, presentation skills and MS Office proficiency are desirable.

The Research Assistant (GRC) supports projects on information security governance, risk management, compliance assessment, cybersecurity standards and organisational resilience.

• Assist in developing cybersecurity governance frameworks
• Conduct compliance assessments against ISO 27001, NIST CSF, CIS Controls, the DPDP Act, 2023, CERT-In Directions and sector-specific regulations
• Support cyber risk assessments and gap analysis; draft security policies, SOPs and compliance documentation
• Prepare risk registers and compliance reports and support GRC programme implementation
• Develop awareness and training material, assist in audits and contribute to research publications

Essential qualification: B.Tech./M.Tech./M.Sc. in Cyber Security, Information Security, Computer Science or Information Technology, or MBA (Information Systems / Risk Management) with relevant experience. ISO 27001 Lead Auditor/Implementer, CRISC, CISA, Security+ and NIST CSF knowledge are desirable.

• The engagement is initially for one year, extendable on the basis of project performance and availability of funds
• It is purely temporary and contractual, co-terminus with the project; the appointee has no claim to any permanent post
• The position is full-time and requires presence on the University campus at Patna; the appointee may not take up any other employment or assignment during the contract
• Leave is admissible as per project and University norms
• The contract may be terminated by either side on one month's notice and stands terminated on completion or closure of the project
• All disputes are subject to the jurisdiction of the courts at Patna

Candidates must apply in the prescribed application form only, which is available on the University website along with the advertisement. The filled-in and signed form, with self-attested copies of all supporting documents, must be scanned and uploaded through the Google Form link given in the advertisement, by 5:00 p.m. on Monday, 10 August 2026.

A candidate may apply for one post only; where applications are received for more than one post, only the first application received will be considered. Applications that are incomplete, unsigned or received after the last date will not be considered.

Selection is on the basis of the candidate's previous record and performance in the interview. Shortlisting is done on qualification, publications and relevant experience, and the University may adopt higher shortlisting criteria where the number of applications is large. Original documents must be produced at the interview. The interview date will be communicated to shortlisted candidates by e-mail. No TA/DA is paid for attending the interview.