Theshan Wijesinghe
@theshanwijesinghe
I conduct ISO 27001 and ISO 22301 assessments, strengthening client cybersecurity governance and compliance.
Sri LankaWhat I'm looking for
At Deloitte Sri Lanka, I contribute to cybersecurity governance, risk, and compliance assessments for client organizations. I conduct ISO 27001 internal assessments and implementation activities, including opening meetings, stakeholder gap interviews, and compliance reviews.
I've prepared gap and risk assessment reports, identified control weaknesses, and developed ISMS documentation such as policies, procedures, Statements of Applicability, KPIs, and asset inventories. I also support ISO 22301 BCMS assessments and ISO 31000 enterprise risk management framework reviews.
I deliver awareness sessions and internal presentations on topics including ransomware awareness and AI in cybersecurity. My work combines client engagement, documentation, and practical alignment with ISO standards.
Alongside my cybersecurity degree, I developed a Raspberry Pi-based machine learning device that detects electromagnetic side-channel attacks during encryption and displays real-time vulnerability status.
Experience
Work history, roles, and key accomplishments
Associate Analyst – Governance, Risk & Compliance | Cyber Security
Sep 2025 - Present (11 months)
Conducts ISO 27001 (ISMS) and ISO 22301 (BCMS) internal assessments, including gap interviews, documentation review, and report preparation. Supports ISO 31000 framework reviews and delivers awareness sessions on cybersecurity topics.
Intern – Governance, Risk & Compliance | Cyber Security
Sep 2024 - Sep 2025 (1 year)
Assisted in ISO 27001 and ISO 22301 internal assessments, including gap assessments, documentation review, and client interactions. Supported senior team members in ISO 31000 framework reviews and contributed to awareness initiatives.
Education
Degrees, certifications, and relevant coursework
Sri Lanka Institute of Information Technology (SLIIT)
Bachelor of Science, Information Technology
2021 - 2025
Pursued a Bachelor of Science Honours in Information Technology specializing in Cyber Security, with coursework in information security, network security, and cryptography.
St. Anthony's College, Kandy
G.C.E. Advanced Level, Science
Completed G.C.E. Advanced Level in the science stream with subjects including Combined Mathematics, Physics, and Information Technology.
St. Anthony's College, Kandy
G.C.E. Ordinary Level, General Education
Completed G.C.E. Ordinary Level with 8 A's and 1 C.
Tech stack
Software and tools used professionally
Availability
Location
Sri LankaAuthorized to work in
Job categories
Skills
Interested in hiring Theshan?
You can contact Theshan and 90k+ other talented remote workers on Himalayas.
Message TheshanGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
