University of the West of England, Bristol - 2026

Master of Business Administration (MBA)

University of Gloucestershire - 2025

BSc (Hons) in Cyber Security

Better Cyber Career 2024 - Present

Consultant - GRC

Led GRC advisory and compliance programs for 200+ professionals across 5+ global frameworks. Spearheaded GRC capability programs across 10+ international client organizations. Upskilled 200+ professionals in ISO 27001, SOC 2, PCI DSS, and HIPAA, accelerating enterprise GRC readiness globally. Built 10+ GRC toolkits including risk registers, gap analyses, and audit documentation adopted across international organizations. Strengthened GDPR, SOC 2, and PDPA compliance alignment across US, EU, and APAC operational environments.

Deloitte 2022 - 2024

Senior Associate - Cyber Strategy

Delivered end-to-end GRC consulting engagements across 5+ banking and manufacturing clients. Translated 40+ cyber risk findings into executive-level governance strategies and roadmaps. Led NIST CSF assessments for 5+ clients, identifying 40+ control gaps and driving prioritized C- suite remediation adoption. Cut cybersecurity vulnerabilities by 25% via ISO 27001-aligned Risk Control Matrices, strengthening ERP audit traceability and control maturity. Executed GDPR, CCPA, HIPAA, and PDPA programs for 3+ clients through PIAs and data flow mapping. Assessed 20+ third-party vendors via TPRM due diligence, strengthening supply chain security and governance decisions.

Digital Research Solutions, Colombo, Sri Lanka 2021 - 2022

Analyst - Information Security & Risk

Executed IS risk assessments across cloud and enterprise environments for 6+ clients. Identified 30+ IAM and data protection control weaknesses via CIS Controls assessments. Reduced compliance gaps by 25% across 5+ clients by implementing ISMS-aligned controls and governance documentation. Produced NIST RMF-aligned remediation roadmaps for enterprise systems, prioritizing 30+ findings by risk severity.

Soul Hive, Colombo, Sri Lanka 2018 - 2022

Administrator

Collaborated with cross-functional teams to enhance procedure compliance with international standards, demonstrating a thorough importance on following industry methodologies across multiple domains. • Successfully organized and launched various digital projects, leveraging a combination of information security regulations to resolve project conflicts via a streamlined process for change and latest trends. • Orchestrated resources for effective planning, implementation and execution of projects by accelerating with templates that are designed for engagements, whilst managing continuous monitoring and assessment reporting with a deep understanding of technologies across the functions for project governance.