Cyber Security undergraduate with hands-on experience in GRC, risk management, and data protection compliance at WSO2
I've built compliance registers across multiple privacy frameworks (UAE PDPL, India DPDP, Australian Privacy Act, Swiss FADP), developed AI governance frameworks, and delivered internal security awareness programs technical security with business strategy.
- 🏢 Security & Compliance Intern at WSO2 — regulatory compliance, risk registers, AI governance, phishing awareness
- 🎓 BSc (Hons) Cyber Security — Curtin University Colombo (Specialization: SOC & GRC · CWA: 72.64)
- 📜 ISO 27001:2022 Internal Auditor
- 🧪 Home SOC Lab — building out threat detection and incident response workflows
- 🌍 Accepted speaker — Social Capital 2026, Heriot-Watt University Dubai
Security & Compliance Intern · WSO2 (2026 – Present)
Regulatory compliance mapping across UAE PDPL, India DPDP, Australian Privacy Act, Swiss FADP, Italian PDPC, and Australian SOCI Act. Built granular compliance registers, developed an AI Bias Testing Framework, authored WSO2's Responsible AI Policy, and delivered company-wide phishing awareness training.
Technical Support Assistant · Codestac Digital Foundries (Jan 2025 – Jan 2026)
Issue analysis, troubleshooting, and documentation. Managed customer account data with strict confidentiality and compliance awareness.
IT Tutor · Cambridge & Edexcel (Freelance) (Feb 2024 – Sep 2025)
Delivered structured IT lessons across Cambridge and Edexcel curricula. Maintained progress records and built strong communication skills.
| Project | Description | Stack |
|---|---|---|
| SSH Log Analysis · Splunk | SOC-style analysis of SSH auth logs — detected brute-force patterns, built real-time alerts and dashboards | Splunk Log Analysis |
| Home SOC Lab | Personal threat detection lab with VMs, monitoring tools, and incident response workflows | Kali Linux SIEM VMs |
| WSO2 Risk Register Automation | Google Apps Script automation for risk notifications — email alerts for new risks, deadlines, and daily change summaries | Apps Script GRC |
| Film Festival DB | Database system with data integrity controls, query-based analysis, and structured reporting | MySQL Python |
| CriticalCare Optimization System | Risk-aware algorithms for critical care process optimization with data validation and performance evaluation | Java DSA |
"The Cyber Footprint of Women: A Global Challenge for Privacy, Security, and Digital Governance in International Relations" BCIS Emerging Scholars' Symposium 2025 · Selected as 1 of 59 emerging scholars
"Empowering Women's Social Capital in Developing Nations Through AI-Enabled Platforms" Social Capital 2026 · Heriot-Watt University Dubai · Accepted oral presentation
Project WHIMSY (Ongoing) Digital trust & safety platform for women — workflow documentation, data coordination, team collaboration
| Certification | Issuer | Date |
|---|---|---|
| ISO 27001:2022 ISMS — Certified Internal Auditor | Independent | Dec 2025 – Present |
| SOC Analyst Level 1 | TryHackMe | Dec 2025 – Present |
| Advent of Cyber 2025 (all 24 challenges) | TryHackMe | Dec 2025 |
| AWS Academy Cloud Foundations | Amazon Web Services | Jun 2025 |
| Cyber Security Bootcamp | STEMLINK | Dec 2025 – Present |
| Foundation Level Threat Intelligence Analyst | — | Dec 2024 |
| Introduction to Cyber Security | CISCO | Dec 2024 |
| Cyber Threat Management | CISCO | Dec 2024 |
| Networking Devices and Initial Configuration | CISCO | Dec 2024 |
| Getting Started with Cyber Security 2.0 | Fortinet | Dec 2024 |
BSc (Hons) Cyber Security · Curtin University Colombo Specialization: Security Operations & GRC · CWA: 72.64
Foundation in IT · Curtin University Colombo / SLIIT (2023–2024)
IGCSE O-Levels · Gateway College Negombo 8 A's, 4 B's · A* in Information Technology · Distinction in LAMDA
