w
waasharshana

Ayal Harshana

@waasharshana

Cybersecurity Consultant CISO vCISO GRC Cyber Risk

Sri Lanka
Anglais
Certaines informations sont présentées en anglais.
À propos de moi
As an Information Security Officer, I will provide Services for the identification, assessment, and mitigation of information security risks within the bank, ensuring a proactive approach to safeguarding sensitive data to a systematic approach to managing the information security posture. Also Providing strategic guidance on the cybersecurity program, ensuring compliance with security standards including Information security encompasses certain broad policies that control and manage security risk levels, IT governance, IT compliance, and information security processes and procedures.... Plus d’infos

Compétences

w
waasharshana
Ayal Harshana
hors ligne • 
Temps de réponse moyen de 1 heure

Voir mes services

Évaluation des risques
I will provide a professional cybersecurity assessment

Expérience professionnelle

Bank

Chief Information Security Officer (CISO)

Bank • Temps plein

Sep 2022 - Present • 4 yrs

As a Chief Information Security Officer (CISO) with 13+ years of working experience in the IT Engineering & Information Security with hands-on technical experience. As a Chief Information Security Officer (CISO), I provide a systematic approach to managing the information security posture of the Merchant Bank of Sri Lanka & Finance PLC. Information security encompasses certain broad policies that control and manage security risk levels, IT governance, IT compliance, and information security processes and procedures to ensure bank data privacy, integrity, and availability for smooth bank business operations. According to that period, I have achieved outstanding performance in complying with regulatory compliance and Information Security System Implementations. At present, I have achieved the remarkable achievement of achieving a staggering 99% Information Security Compliance with my leadership. Also, I come with the past 09 years of IT Technical background as a Graduate Network Engineer in the Sri Lankan Police. During that period, network design, escalation support, network administration, and systems administration. Skilled in delivering technical support, managing network operations, and maintaining enterprise-wide area networks across multi-platform and high-uptime Data Center environments and it has been most helpful in understanding and analyzing the Information Security Risk and Non-Compliances. Furthermore, I have gained valuable skills in IT Requirements gathering & auditing, Computer Network Engineering, lecturing, Project Management & Government Procurement (tendering), teamwork, cooperation, and Accountability in my job role.

Police

Police

Temps plein • 8 yrs 2 mos

System Network Security Engineer

Sep 2021 - Sep 2022 • 1 yr

As a Network Engineer, I contribute to developing the Sri Lanka Police Core Network (VPN), managing existing VLANS, Traffic Monitoring, System Administrating & troubleshooting, and Enhancing & Developing Cyber Security Policies touching with Next Generation Technology.

IT Contract Administrations

Jul 2015 - Sep 2022 • 7 yrs 2 mos

I provide professional IT Contract Administration and Vendor Management support to help organizations effectively manage technology contracts throughout their lifecycle—from contract review and negotiation support through service delivery, performance monitoring, renewal, and closure. My focus is on ensuring that IT contracts deliver the agreed technical, commercial, security, and service-level requirements while minimizing operational, financial, and technology risks.