Amal Ranasinghe Email & Phone Number

Doha, Qa

Doha, Qatar

 Assess the design and effectiveness of IT and Information Security controls and evaluate whether security vulnerabilities are timely identified and mitigated. Review Project Management Life Cycles of various types of projects managed by the Project Management Office Review and validate whether the IT environment is compliant to the internal Policies and Procedures and external requirements including regulatory for confidentiality, integrity and availability of business data and measure the effectiveness of defense-in-depth architecture against known vulnerabilities. Analyze security practices for logical, physical, and operational security. Perform fieldwork and assess the control environment of both 1st and 2nd Lines of Defenses and provide a reasonable assurance to the stakeholders in line with audit objectives defined. Conduct audits on internal controls and cyber security controls, SDLC, IT infrastructure such as servers, networks, systems and technical services, by performing fieldwork to identify business and risks to meet the audit objectives defined. Analyze security practices in logical, physical, and operational security. Review IT General Controls (ITGC) and perform gap assessments to timely identify the deviation from acceptable configurations and IS policies and continues monitoring of risk mitigation plans. Perform IT audits and continuous audit follow ups to add value to the business processes.

Riyadh, Saudi Arabia

 Contribute to streamline and finalize the annual audit plan, engagement planning and budgeting Work cordially with the team and manage them in assessing business risk, reviewing IT General Controls & Application Controls in order to complete missions timely Supervise the audit missions and audit teams by empowering the team and promoting team culture and manage engagement risk Execute IT audits on IT infrastructure, applications and projects Perform IT risk analysis and provide recommendations to the corporate management on business process reengineering Evaluates responses by user departments to findings and suggests follow-up actions Review audit reports for submission and appraise the team member effort Monitors the status of audit/review recommendations Review bank’s Business Continuity Management processes

Bahams & Sri Lanka

 Leading the IT Audits based on COBIT for major commercial banks & Offshore financial services Managing and reviewing the team activities in the evaluation of IT Controls in place at external audits. Further the identified risks associated would be timely reported to the client management  Directing the ITA team in developing IT security policies based on BS 7799-2:2002 Leading and guiding the teams on Business Process Analysis and System Integration Control reviews  Planning, organizing, directing and controlling the process improvement project for the BTC (Bahamas Telco. Company) and telecommunication regulatory authority Evaluating the design, implementation and monitoring of physical and logical controls of clients to ensure the confidentiality, integrity and availability of their information assets Assessing the processes and procedures use to store, retrieve, transport and dispose of information assets Appraising the clients’ business continuity plans to ensure their ability to continue essential business operations during any business interruption

Colombo, Sri Lanka.

Advised on the implementation of Controls in Cheque Imaging & Truncation SystemAssessed the risk management practices to ensure that the organization’s IT risks are managedEvaluated the organization’s IT policies, standards and procedures and the processes for their development, approval, implementation and maintenance to ensure that they support the IT strategy and comply with regulatory and legal requirementsAppraised the business case of proposed system acquisition, to ensure that it meets the entity’s business goals

Colombo Sri Lanka

Visiting branches island wide and remedying software issues and ensure systems meet the business expectation.

General Certificate Of Education Advanced Level, Mathematics

Activities and Societies: United Nations SocietySecondary Education.

Education record

Activities and Societies: Red Cross Society