Prabhash Wisidagama Email & Phone Number

Colombo, Western Province, Sri Lanka

• Review Enterprise, IT and Operations related compliance requirements to ensure the systems conforms to the statutory, national and international regulations and standards.
• Identify Enterprise, IT and Operations related risk factors and make recommendations to ensure the company operations continue without lapses.
• Review and propose enhancements to compliance and risk mitigating policies, procedures and guidelines with the respective department.
• Develop and review risk management policies and governance controls to ensure consistent application of the same across the organization.
• Conduct Risk Management related annual awareness for necessary staff members.
• Challenge and enhance the departmental Risk Worksheets and timely follow up the mitigation actions for identified key risk items.

Colombo, Western Province, Sri Lanka

• Review and update the IT security Policy periodically. Review existing policies and procedures and identify any gaps and ensure such gaps are addressed by liaising with the respective stakeholders.
• Ensure compliance with the existing policies and procedures.
• Ensure compliance with the payment methods with standards / best practices and other regulatory institute guidelines (Ex: PA DSS, PCI DSS or other CBSL regulations).
• Coordinate Vulnerability Assessment and Penetration Testing for web applications/servers.
• Review applications used by the company for any Information Security issues.
• Educating employees about Information Security Policy and best practices for information security.

- Developing Annual IT Audit Plan and execute the audits accordingly.- Plan specific audits/ investigations to determine whether Information System is protected.- Evaluate change, configuration and release Management practices to determine whether scheduled and nonscheduled changes made to the organization’s production environment are adequately controlled.

Sri Lanka

► Evaluate the IT General controls (manage change, manage access and IT operations) for clients as part of the Information Systems audit engagements in connection with statutory financial audit engagements.► Reviews typically encompass the detailed assessment of the information security architecture, evaluation of the system development methodology and.

Colombo, Western Province, Sri Lanka

Colombo, Western Province, Sri Lanka

Colombo, Western Province, Sri Lanka

Colombo, Western Province, Sri Lanka

HR, Marketing, Operation, IS, Finance Departments

Bachelor'S Degree, Information Technology

Bachelor Of Science (Bsc), Business Management, Second Lower

Business Management

Diploma, Computer System Design

Advance Level, Commerce