Chamath Malinga Email & Phone Number

Sri Lanka

Colombo, Western, Sri Lanka

Chief Information Security Officer/ Assistant General Manager

Colombo, Western Province, Sri Lanka

Colombo

ISMS Manger for the Bank,Compliance Management for ISMS, PCI-DSS, Local regulations and SWIFT system Security.Review all system-related security plans throughout the organizations network, acting as a liaison to Information Systems and advise the organization with current information about information security technologies and related regulatory issues.Initiate, facilitate, and promote activities to create information security awareness within the organization;Monitor compliance… Show more ISMS Manger for the Bank,Compliance Management for ISMS, PCI-DSS, Local regulations and SWIFT system Security.Review all system-related security plans throughout the organizations network, acting as a liaison to Information Systems and advise the organization with current information about information security technologies and related regulatory issues.Initiate, facilitate, and promote activities to create information security awareness within the organization;Monitor compliance with information security policies and procedures, referring problems to the appropriate department manager;Development and implementation of Organizational Information Security Policies and Procedures;Information Security Incident Management;Keep users/ relevant teams informed about current security threats and steps to mitigate.Head of SoC Operations and SIEM admin team. Show less

Sri Lanka

Colombo

Formulation, Management and Maintenance of the IT Security policy for the project globally;Maintaining the information security standard and strategy to meet client given policies and ISO 27001:2013;Management of infrastructure security for the project;Risk and Incident management for the assigned project;Vulnerability Management of client systems using IP360 solution and weekly follow up/update to client management;Update/consult on incidents and risk assessments to the… Show more Formulation, Management and Maintenance of the IT Security policy for the project globally;Maintaining the information security standard and strategy to meet client given policies and ISO 27001:2013;Management of infrastructure security for the project;Risk and Incident management for the assigned project;Vulnerability Management of client systems using IP360 solution and weekly follow up/update to client management;Update/consult on incidents and risk assessments to the local management team;Maintain and test local BCP for project for 12 Teams of 300 members;Conduct internal audits and manage external audits for the project;Infrastructure consultancy for client/local teams; andDesigning and Conducting user awareness training Show less

Colombo - Sri Lanka

Review of Corporate IT GRC, IT Strategic Planning, IT Processes, Information Security, IT Systems Security, IT Development, SAP ERP System, Billing Systems, CRM systems, ISO 27001:2005, PCI DSS, Mobile Commerce, Digital Money, NFC and e-Wallets, IT Infrastructure and Disaster Recovery, Virtualization.

Colombo

My key areas of expertise include IT Security Control and Governance, IT Security Audits, Application Review (ERP ,Web Application, HR Systems etc.), Database Security Review ( Oracle DB and MSSQL DB ), Vulnerability Assessments and Penetration Testing , ISO 27001 Implementation Consulting , Disaster recovery and Business Continuity Management, , IT systems capacity planning, IT Security Policy development, and Business Development.Some of my Key assignments in PwC include:ISO 27001… Show more My key areas of expertise include IT Security Control and Governance, IT Security Audits, Application Review (ERP ,Web Application, HR Systems etc.), Database Security Review ( Oracle DB and MSSQL DB ), Vulnerability Assessments and Penetration Testing , ISO 27001 Implementation Consulting , Disaster recovery and Business Continuity Management, , IT systems capacity planning, IT Security Policy development, and Business Development.Some of my Key assignments in PwC include:ISO 27001 Certification implementation consulting IT Security reviews, ERP system reviews, and compliance reviews for Certificate Authorities,Business process review Network, web applications and internet based penetration TestsProcurement process evaluation and vendor evaluationApplication Control Review of finance ERP systems and HR systems; andISO27001 and HIPAA Policy Development. Show less

IP Operations & Data NetworksADSLMetro EthernetRouter Installation

Bsc Sp Hons, Computer Systems & Netwoking, 2Nd Upper

CCNA

Physical Sciences

Activities and Societies: Committee member Royal College Radio Club