Chatura Samith

Group Internal Auditor - Information Systems

McLarens Group Sri Lanka • Full-time

Oct 2014 - Nov 2015 • 1 yr 1 mo

Group Internal Auditor – Information Systems • Development of Internal audit strategy and audit plan for IT segment of the group • Governance and Management of IT • Provide assurance that the processes for information systems operations, maintenance and support meet the organization’s strategies and objectives. • Provide assurance that the organization’s security policies, standards, procedures and controls ensure the confidentiality, integrity and availability of information assets: • Liaise with External Auditors

Analyst - Information Risk Management

KPMG International • Full-time

May 2013 - Oct 2014 • 1 yr 5 mos

Analyst - Information Risk Management – KPMG Sri Lanka • Perform information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance. • Recommend improvement of management and internal controls designed to safeguard Company resources and ensure compliance with ISO/ IEC 27001, TIA requirements. • Provide necessary recommendations by evaluating controls and contents related to information security, change management, information systems operations, business continuity planning & disaster recovery planning. • Perform reviews of internal control procedures and security for systems under development and/or enhancements to current systems. • Review of the previous audit reports, work papers and implementation status of the findings and recommendations. • Compilation of reports regarding audit findings and working papers in a concise, understandable manner that assists in the resolution of problems and highlights matters requiring immediate attention.