Pubudu Binduhewa Email & Phone Number

Colombo, Wp, Lk

Al Khobar, Eastern, Saudi Arabia

Colombo, Western Province, Sri Lanka

Key Accountabilities:• Manage implementing of Information Security System, policies, procedures, and guidelines aligning with ISO2700X, PCI-DSS, SWIFT Customer Security Controls Framework, NIST, and Regulatory requirements such as CBSL guidelines and Data privacy requirements.• Lead & manage vulnerability assessment & penetration testing (VAPT) assessments, social engineering assessments, conduct GRC gap assessments and coordinate independent third-party assessments to evaluate the effectiveness of existing security measures, recommendations & timely follow-ups. • Lead and manage the completion of IT related issues/gaps in controls, identified by internal & external audit findings and submit audit reports with recommendations/corrective actions taken.• Contribute to Information Security Strategy development of the bank that is in line with Information Security Risk Management strategy & ensure adherence to CBSL (Central Bank of Sri Lanka) baseline security standard guideline by the bank.• Implementation/alterations of IT Operational Risk tools (Incident Management, RCSA, and KRI) to the IT department and other IT related units.• Ensure maintain a quality security posture by developing Information Security baselines that are aligned with international best practices and standards for software, hardware, network, SOC and cloud environments (Dark trace, Crowd Strike (EDR), Google Cloud Platform (GCP), Google Chronicle (SIEM), GTB (DLP), Cyber Ark (PAM))• Review and follow up for completion/mitigation of incidents/risk events, system downtimes, flash reports, IT alerts reported by IT/Risk and IT related incidents/risk events reported by other business segments. Review breaches, identify root causes and follow up for elimination. • Review Polices /Operational guidelines of the IT department and related business lines and ensure appropriate controls are in place to mitigate operational risk elements.

Kuwait City, Al Asimah, Kuwait

Key Accountabilities:• Act as the key person behind alignment of IT Infrastructure in compliance to information/cyber security policies and guidelines, participating in designing, enhancing and implementation of processes internally.• Work closely with stakeholders in technology and business groups on Infrastructure Security related matters.• Perform technical security assessments, Gap Analysis and IT Audits on agreed timelines.• Develop solutions to neutralize security vulnerabilities.• Identify and take actions to mitigate security issues, misconfigurations, system hardening, and vulnerabilities in business operations. • Identify and take actions to drive the implementation of Infrastructure Security related technical and process improvements.• Develop, execute, and track the performance of security measures to protect information, network infrastructure and information systems (Internal & Third-Party Integrations).• Identify and take actions on security requirements for the assigned products, tasks, or systems.• Provide Security guidance on a constant stream of new Infrastructure and technologies implementations.• Work with external and internal stakeholders to ensure vulnerability remediation efforts are adhere to organization Security Standards and Procedures.• Troubleshoot and maintain security infrastructure software and hardware as required.• Engage to resolve any system security patch problems, working with other technical teams and other stakeholders.• Maintain and develop security specific documentation and standard operational procedures.• Ensure compliance of the Organization IT security standards, policies, and procedures as per the Global Technology Risk Management (GTRM) recommendations.• Building up an Incident Response Management Process and maintain.• Continuous improvement of User awareness on Information/Cyber Security best practices.

Colombo, Western Province, Sri Lanka

Key Accountabilities:• Responsible for all aspects of the Information Security and Infrastructure in the organization. • Drive information security governance through developing, maintaining and publishing up-to-date information security policies, standards and guidelines.• Responsible for driving compliance and best practices (Industry compliance & Yum compliance) • Independent assessments and monitoring external and internal threat environment, vulnerabilities, review logs and monitor the alerts, ongoing basis to take the appropriate course of action. • Initiate, facilitate and promote activities to create security awareness within the organization and related entities. • Stay in touch on the latest information security threats/vulnerabilities, regulatory/advisories and alerts to the business and make recommendations for continuous improvements to maintain the security posture of the organization. • Maintain the Corporate BCP at all times in terms of facilitating the infrastructure

Colombo, Western Province, Sri Lanka

Heading the Cyber Security division of CICRA Consultancies’ Private Limited, leading, day to day operations and cyber security/IT governance consulting from end to end delivery and quality assurance of projects to many industrial sectors such as Banking (Local & Foreign), Finance, Telecom, Insurance, Healthcare, Apparel, Software development, Government law enforcement, and many other leading companies.Key Accountabilities: • Broad understanding of Cyber protection, information security principles, the relevant standards, processes & technologies;• Experienced in the production of the high-quality deliverable, working alone & as part of a team and taking responsibility for the overall output of client engagements;• Responsibility for scoping, financial management, managing delivery risk, production & review of client deliverable;• Responsible for reviewing tender submissions, addressing RFPs' for Cyber Security solutions & services;• Perform in the client cyber security Risk Assessment based on industry cybersecurity frameworks & standards, such as NIST, COBIT, CIS Critical Security Controls, ISO 27001 & various regulatory frameworks;• Perform in the client cyber security requirements; o Web Application, Internal & external Vulnerability Assessment & Penetration testing; o Secure network architecture review & Configuration review; o Mobile security assessment & code review in Mobile Apps (iOS & Android);• Perform and manage Cyber Security & Information security risk management assessments; including risk identification, assessment, monitoring, remediation, and acceptance;• Manage the development and gap assessment in cyber/information security publication and maintenance of Risk framework, Policies & Standards;

Jeddah, Makkah, Saudi Arabia

Key Accountabilities:- Work out priorities for systems developments, maintenance, operations and Control the security aspects of IT systems.- Work out current and future IT needs by consulting with people at all levels about the current work systems and deciding how improvements could be made.- Analyze the information needs of an organization and develop technological solutions to satisfy those needs.- Implement and manage organizations’ effectiveness and efficiency by defining, delivering and supporting strategic plans for implementing information technologies.- Leads and oversees the IT Compliance Assessment on the design and effectiveness of controls- Coordinates the execution of control assessments, reviews assessment results and performs risk rating of control deficiencies- Monitors control effectiveness and health- Develops and maintains corporate guidance materials- Defines processes for monitoring, tracking, and spot checks of control effectiveness- Interfaces with Internal Audit, Corporate Compliance, and Financial Control functions as needed.- Initiates and completes projects by managing resources in timely manner with user departments and data center.- Verifying application results by conducting system audits of technologies implemented. - Preserves assets by implementing disaster recovery and back-up procedures, information security and control structures.- Develop and implements information technology strategies, IT security policies and procedures by evaluating organization outcomes; identifying problems; evaluating trends; anticipating requirements. - Accomplishes financial objectives by forecasting requirements; preparing an annual budget; scheduling expenditures; analyzing variances; initiating corrective action.- Provide advice to other senior managers and boards on IT issues and planning.- Maintains quality service by establishing and enforcing organization standards.

Sri Lanka

The primary responsibilities of the role are to support and maintain the Data service and ISP related infrastructure. - Responsible for customization of PCRF as per the business requirement - Participate on site deploying/upgrade of new systems- Participate in customer acceptance testing of newly implemented services, implementation of new features, customizations those new features in PCRF. - On site to investigate problems that occur in data services, communicate/support to Experts in Comverse to identify issues and respond to emergency situations as per the requests- Network Troubleshooting and monitoring - Initiate, Implement and Support Problem/Change Requests - Actively participate in planning and allocating tasks - Interface with Stakeholders and with escalation teams - Suggesting Design Improvements - Manage and Support escalations - Providing technical consultancy to business units and other IT/non IT teams - Providing technical inputs for Service Improvements- Mentor junior members of the teamSkilled in: - Installing Network Devices. Handling upgrades - Skills to troubleshoot and Monitor LAN, WAN and Wireless networks - WAN optimization - Load balancing appliances - Ability to consider Compatibility, Scalability, Performance and Integration issues in the design. - Capacity planning - Experience in using Remedy and Network Management tools effectively. - A strong team player with an experience working in multi-cultural environment. Sensitive to different roles and responsibilities. - Ability to work in a global, collaborative environment with teams spread out in different geographies - Align with Organization's strategic and cultural objectives. - Stretch beyond working hours

Sri Lanka

- Planning and implementation of business information systems/Infrastructure changes in the company.- Drive the strategic IT agenda in (including IT budgets and IT strategy within the Support services and corporately).- Develop appropriate IT systems to meet the needs of the company & its staff with the IT strategy of company.- Manage and deliver IT infrastructure related projects on time to support the strategic business initiatives in line with the corporate IT Strategy.- Practices/processes to support the whole business in the technology field (All sites and operations).- Support & advice managers and all related people in the company in the implementation of IT systems and infrastructure based modifications. - Conducting IT Training to IT/Non-IT staff to improve the understanding and apply the product knowledge in their working environment. - Establish & maintain all necessary IT Policies & Procedures in coordination with support services parties.- Makes decisions on IT purchases & user resources appropriately regarding make vs. buy IT services and skills.- Establishes strategic relationships with key IT suppliers and vendors to be updated and aware of the new technologies, and new mechanism of managing IT operation in the business.- Explores new technologies for future planning and potential implementation which lead the company to improve the operation of business.- Design and implement appropriate Disaster Recovery infrastructure, and supervise the backup process.- Performing other duties as assigned by the management.Skilled in:- Configured and managed CISCO, Nortel and HP Telecom/IT network equipments- Working knowledge of advanced routing protocols. - Configured and maintained Windows 2000/2003/2008 Servers, IIS, Exchange 2000/2003, Windows Active Directory, Proxy, Certificate Server, SSL, implementing FTP Server, implementing and maintaining WSUS, clustering, MS Server virtualization with Hyper-V. - ICT assets management

Sri Lanka

- Maintain high standards of Information Management System of “Southern Transport Development Project”. - Design, develop and manage the network infrastructure of the project including AD on windows 2003 server environment. Handling user accounts, network permissions, group policy security policy administration and file server management. - Network an security peripherals and communication equipment set up as per the project requirement. - Maintain the system databases up to date. Ensure critical software updates and security patches are rolled out to servers and clients with WSUS and Virus guard updates. - Managed entire data backup IT systems and Project related data.

Sri Lanka

- General IT work.- Technical Writing.