Yasiru Jathunarachchi

Junior Associate - Technology Consulting Services

EY Consulting

Supported information security, GRC, IT audit, and cybersecurity assurance engagements for enterprise and regulated-sector organizations. Conducted ISO/IEC 27001:2022 assessments, risk assessments, control testing, evidence validation, and remediation tracking.

ISO 27001ISO 27002ISMSRisk AssessmentControl TestingEvidence ValidationAudit Remediation TrackingThird Party Risk ManagementVendor Due Diligence (SIG CAIQ)Vulnerability AssessmentWeb Application Penetration Testing (WAPT)

Information Security Analyst Intern

Supported the ISO/IEC 27001:2022-aligned ISMS under the Information Security Officer. Conducted risk assessments, vulnerability assessments, and penetration tests, and integrated security controls into CI/CD pipelines.

ISO 27001ISMSRisk AssessmentVulnerability AssessmentPenetration TestingDevSecOpsSecure SDLCSonarQubeTrivyOWASP Dependency CheckELKSecurity Awareness

Service Desk Analyst

Managed L1/L2 incident resolution and service restoration, monitored enterprise systems using Zabbix and Grafana, and handled critical incidents while maintaining operational documentation.

Incident ManagementL1 L2 SupportZabbixGrafanaMonitoringDocumentation