Experienced Information Security Manager with a demonstrated history of working in the oil & energy industry. Skilled in Hardware Hacking, Active Directory, Windows Server, Networking, and Microsoft Exchange. Strong military and protective services professional graduated from Nalanda Central College Minuwangoda. Accountabilities1. Develop the strategic plan for information security and compliance. Define appropriate information security and compliance goals and objectives based on business objectives. 2. Plan, develop and coordinate the formulation, implementation, and monitoring of information security plans, policies, procedures, guidelines, standards, and activities.3. Conduct research related to information security trends, tools, and practices. Provide recommendations based on sound analysis.4. Assess, recommend and develop improvements to overall information security posture driving holistic improvements on behaviors, processes, and technologies. 5. Drive compliance with regulatory requirements including ISO 27001 through proactive planning, communication, coordination, and influence.6. Provide recommendations to key IT projects in order to improve project results, quality of deliverables, risk optimization, security processes and compliance with regulations and auditor expectations. 7. Conduct information technology risk assessments to identify gaps and make sound recommendations for improvement. Identify acceptable levels of residual risk and assist with action plans, policy and procedural changes for risk mitigation. 8. Coordinate with stakeholders and IT staff to assist external auditors on audits. Facilitate management response and remediation efforts. 9. Determine threats, identify risks and vulnerabilities to the organization, research security breaches and recommend corrective actions. 10. Facilitate Disaster Recovery efforts of Infrastructure division. 11. Follow a defined, agreed upon project management methodology