w
waasharshana

Ayal Harshana

@waasharshana

Cybersecurity Consultant CISO vCISO GRC Cyber Risk

Sri Lanka
Inglese
Alcune informazioni sono riportate in lingua inglese.
Chi sono
As an Information Security Officer, I will provide Services for the identification, assessment, and mitigation of information security risks within the bank, ensuring a proactive approach to safeguarding sensitive data to a systematic approach to managing the information security posture. Also Providing strategic guidance on the cybersecurity program, ensuring compliance with security standards including Information security encompasses certain broad policies that control and manage security risk levels, IT governance, IT compliance, and information security processes and procedures.... Continua a leggere

Competenze

w
waasharshana
Ayal Harshana
offline • 
Tempo di risposta medio: 1 ora

Consulta i miei servizi

Gestione del rischio
I will provide a professional cybersecurity assessment

Esperienza lavorativa

Bank

Chief Information Security Officer (CISO)

Bank • Full time

Sep 2022 - Present • 4 yrs

As a Chief Information Security Officer (CISO) with 13+ years of working experience in the IT Engineering & Information Security with hands-on technical experience. As a Chief Information Security Officer (CISO), I provide a systematic approach to managing the information security posture of the Merchant Bank of Sri Lanka & Finance PLC. Information security encompasses certain broad policies that control and manage security risk levels, IT governance, IT compliance, and information security processes and procedures to ensure bank data privacy, integrity, and availability for smooth bank business operations. According to that period, I have achieved outstanding performance in complying with regulatory compliance and Information Security System Implementations. At present, I have achieved the remarkable achievement of achieving a staggering 99% Information Security Compliance with my leadership. Also, I come with the past 09 years of IT Technical background as a Graduate Network Engineer in the Sri Lankan Police. During that period, network design, escalation support, network administration, and systems administration. Skilled in delivering technical support, managing network operations, and maintaining enterprise-wide area networks across multi-platform and high-uptime Data Center environments and it has been most helpful in understanding and analyzing the Information Security Risk and Non-Compliances. Furthermore, I have gained valuable skills in IT Requirements gathering & auditing, Computer Network Engineering, lecturing, Project Management & Government Procurement (tendering), teamwork, cooperation, and Accountability in my job role.

Police

Police

Full time • 8 yrs 2 mos

System Network Security Engineer

Sep 2021 - Sep 2022 • 1 yr

As a Network Engineer, I contribute to developing the Sri Lanka Police Core Network (VPN), managing existing VLANS, Traffic Monitoring, System Administrating & troubleshooting, and Enhancing & Developing Cyber Security Policies touching with Next Generation Technology.

IT Contract Administrations

Jul 2015 - Sep 2022 • 7 yrs 2 mos

I provide professional IT Contract Administration and Vendor Management support to help organizations effectively manage technology contracts throughout their lifecycle—from contract review and negotiation support through service delivery, performance monitoring, renewal, and closure. My focus is on ensuring that IT contracts deliver the agreed technical, commercial, security, and service-level requirements while minimizing operational, financial, and technology risks.