Manager | Business Consulting - Technology Risk

Assistant Manager | Business Consulting - Technology Risk

FINCSIRT - Financial Sector Computer Security Incident Response Team : Sri Lanka

•	Heading IT  Responsible for the maintenance and operationalization of the Incident Management System (IMS)Plan 
•	Owns all incidents and service requests throughout the incident lifecycle 
•	Record and classify received incidents and undertake an immediate effort in order to restore the services as quickly as possible 
•	Log all incident/service request details, allocating categorization and prioritization codes 
•	Keep users informed about their incidents’ status at agreed intervals 
•	Associate incidents with other records (i.e. Incidents, Changes, Problems, Knowledge articles, Known error, etc.)
•	Provide first – line investigation and diagnosis of all incidents and service requests 
•	Verify resolutions with users and resolve incidents in IMS  portal 
•	Escalate major incidents to the Manager Information Security 
•	Escalate incidents at risk of breaching service level agreement to the Manager or Senior Manager 
•	General Information, Advisory and Vulnerable alerts for Sri Lanka Financial sector and disseminate through IMS portal 
•	Perform external security reviews as required 
•	Perform research and development in IMS domain

Assistant Manager

-	Heading IT Risk and Assurance team of EY Maldives exploiting knowledge and expertise in various
industries such as Banking and Finance, Manufacturing Insurance etc. 
-	Evaluating application system controls in the fields of Banking & Finance, Revenue Assurance, 
Hospitality, Stock Brokering and Manufacturing by providing adequacy controls in information 
systems including IT Governance.
-	Ensuring processes and procedures are performed in compliance with organizations Information 
Security Policies and procedures.
-	Conducting information systems audit engagements for various organizations analysis against the
industry accepted standards (ISO 27001) and providing recommendations.
o	Core Management Functions;
Planning and Managing IS Audit engagements
Presentations for Audit Committees
Staff Performance Evaluations
Project Management
Training

Manager - IT Risk & Assurance

Assistant Manager - IT Risk & Assurance

Goodhope Asia Holdings Ltd

•	Development of Internal audit strategy and audit plan for IT segment of the group
•	Governance and Management of IT
•	Provide assurance that the processes for information systems operations, maintenance and support meet the organization’s strategies and objectives.
•	Provide assurance that the organization’s security policies, standards, procedures and controls ensure the confidentiality, integrity and availability of information assets
•	Liaise with External Auditors
	Assist audit management to review the efficiency of utilizing the IT assets and resources owned by the group. (Efficient utilization of assets, adequacy of maintenance programs. This to include usage of IT assets, conditions of IT assets, policies of replacement cycles of IT assets and reviews of costs against budget etc.)
	Review the control mechanisms in place with regard to IT assets recording, transfers, adequacy of insurance cover and controls at the point of disposal.
	Assist the team members to provide high quality performances on a consistent basis so that the division becomes a preferred choice for value addition.

Senior Executive  - Control Assurance | ICT

KPMG Sri Lanka

	Perform information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
	Recommend improvement of management and internal controls designed to safeguard Company resources and ensure compliance with ISO/ IEC 27001, TIA requirements.
	Provide necessary recommendations by evaluating controls and contents related to information security, change management, information systems operations, business continuity planning & disaster recovery planning.
	Perform reviews of internal control procedures and security for systems under development and/or enhancements to current systems.
	Review of the previous audit reports, work papers and implementation status of the findings and recommendations.
	Compilation of reports regarding audit findings and working papers in a concise, understandable manner that assists in the resolution of problems and highlights matters requiring immediate attention.
	Assist in assessing confidentiality, integrity and availability of information processing environment and assets.
	Conduct operational, compliance, financial and investigative audits, as assigned.

Information System Auditor

6 months internship in Information system Auditing to have industrial experience in order to magnify the academic knowledge, and starting the career at KPMG IRMa...

Trainee Information System Auditor

Innodata Inc.

Converting eBooks to use in Ipads and Itabs using XML and HTML

Production Associate

I am a Manager in EY Qatar-based Business Consulting, Technology Risk team with 10 years of cybersecurity, IT / IS internal and external control audit experience, catering to more than 100+ clients operating across multiple industries such as banking and finance, insurance etc, 

Prior to joining EY, I was an Assistant Manager in Sri Lankan financial sector computer security incident response team (FinCSIRT), which supports individual financial institutions, and the regulator in driving cybersecurity initiatives aimed at strengthening Sri Lankan financial sector cybersecurity resilience capabilities

I have also worked as a Manager- Business Consulting, Technology Risk in EY Maldives/Sri Lanka prior joining to FinCSIRT

Taplio

Malka Rathnayake's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Malka Rathnayake's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Malka Rathnayake's Linkedin Analytics