Information System & Cyber Security

Home

People

ID : 1243

Education level : Bachelor's degree

Work experience level : Expert- (more than year 7)

Work experience in total : Years

Job type : Online

Job time : Maandelijks

Last date of registration :

2022-12-09

To progress as a professional, working in a challenging environment would enable me to enhance & utilize my skills and innovative abilities in the professional & corporate sector successfully.

Executive, Information Systems Security - National Savings Bank - (March 2019 - Present)

Implementing Information Security Management System (ISMS) (ISO 27001:2013), PCI-DSS, SWIFT CSCF and Baseline Security Standard (Central Bank- SL) standards across the bank.
Develop plans and strategies for on boarding new security technologies to the existing infrastructure of the bank ensuring zero-service downtime and key security features on.
Perform Business Impact Analysis (BIA) and Risk Assessments in periodic basis to ensure the up- to-datedness of the recovery strategies in Business Continuity Management regime.
Perform the Data Scanning and Classification exercises in periodic basis and responding to the alerts triggered by the Data Leakage Prevention (DLP) tool.
- Perform the role of Tier 2 Analyst in Bank’s Security Operations Center (SOC).
Conduct technology reviews such as firewall reviews, SIEM reviews, WAF and DLP policy reviews etc. in periodic basis.
Conduct information security awareness sessions, phishing simulation exercises and induction programs related to security for the bank’s staff in planned intervals.

Consultant - Cyber Security Services - Trustvauli Ltd (Pvt) - (July 2018 - Present)

Performing the supervisory role for an OpenVAS vulnerability and remediation project conducted for a US company.
Acting as a team member in the project of Sri Lankan Government Website Vulnerability and Penetration Testing initiated by Sri Lanka CERT.
Implementing Information Security Management System (ISMS) (ISO 27001:2013) framework and audits to a wide range of local and international clients.
Developing ICT strategic plans for clients in the Banking & Finance sector.

Associate Consultant, Cyber Security Services -Trustvauli Ltd (Pvt) - (July 2017 - June 2018)

Implementation of Information Security Management System (ISMS) (ISO 27001:2013) for clients in the Banking & Finance, Manufacturing, Insurance and Payroll sectors.
Conducting ISMS internal reviews and security audits for clients in Telecommunication and Manufacturing streams.
Performing vulnerability assessments and penetration testing to scan designated hosts.

Analyst, Information Risk Management - KPMG Sri Lanka - (May 2015 - July 2017)

Development of Division budgets for each engagement under each portfolio and ensure that the team members maintain their allocated time within the budget.
Coordinate and conduct kick-off meetings and Review report discussion meetings with the clients, as well as other required engagement progress meetings with the client officials so as to achieve the project deadlines.
Be responsible for the timely completion of time sheets of staff while ensuring 100% utilization of budgeted hours for each engagement.
Train team members on the performance of the review activities or identify training needs which can be fulfilled by other team members /Managers within division during knowledge sharing sessions.
Evaluating application system controls in the fields of tele- communication, Banking & Finance, Revenue Assurance, Hospitality, Stock Brokering and Manufacturing by providing adequacy controls in information systems including IT Governance.
Ensuring processes and procedures are performed in compliance with organizations Information Security Policies and procedures.
Conducting information systems audit engagements for various organizations analysis against the industry accepted standards (ISO 27001) and providing recommendations.

Performance oriented & hard work.
A good team player and ability to work with different kinds of people.
Quick learner.

Certified Information Systems Security Professional (CISSP) – (License No: 784332).
Certified Information Security Manager (CISM) – (License No: 2049443).
Certified Ethical Hacker v9 (EC-Council).
ISO/ IEC 27001:2013 Lead Implementer.
Comptia Network +

Implementing Information Security Management System, Perform Business Impact Analysis, Risk Assessments, Data Scanning and Classification exercises, firewall reviews, SIEM reviews, WAF and DLP policy reviews, Conduct information security awareness sessions, phishing simulation exercises and induction programs related to security