Tironi Ranathunga

Melbourne,Australia

Summary

Quality and compliance professional with 4+ years’ experience in risk assessment, auditing and regulatory compliance in highly regulated environments. Currently completing a Master of Cybersecurity and seeking an internship to apply governance, risk and compliance expertise to cybersecurity challenges.

Overview

years of professional experience

Certification

Work History

Governance & Risk Compliance Coordinator

Highly Regulated Industry (Australian Country Choice)

06.2023 - 11.2024

Directed 44 internal risk and compliance audits across multiple standards (ISO 9001, BRCGS, government regulations), reducing non-conformances by 41% year-over-year.
Developed and implemented new risk-based programs (analogous to threat/vulnerability assessments) within two-week cycles, improving program approval efficiency and regulatory readiness.
Successfully led organisation through external audits from government and independent bodies, achieving an upgrade from B to A+ rating and maintaining it for the following year.
Designed and maintained KPI dashboards in Power BI to track compliance and incident metrics, delivering actionable reports that improved overall quality and security performance by 18%.
Conducted training for 15+ senior stakeholders on risk-based thinking, vulnerability and threat assessment concepts, significantly improving organisational compliance scores.

Quality Compliance Officer

Highly Regulated Industry (Australian Meat Group)

01.2023 - 06.2023

Administered governance and compliance documentation, enhancing audit readiness and improving compliance metrics by 10% in six months.
Conducted internal audits and risk assessments, ensuring alignment with regulatory frameworks and reducing non-conformances.
Performed root cause analysis of incidents and coordinated corrective/remediation actions (analogous to incident response and post-mortem analysis).
Maintained 100% supplier compliance with approved standards through proactive monitoring and documentation controls.

Compliance & Risk Analyst

Highly Regulated Industry (Midfield International)

11.2021 - 01.2023

Maintained compliance management systems, ensuring operations met internal and external audit requirements.
Executed internal audits and facilitated external audit readiness, supporting continuous improvement of compliance posture.
Implemented a corrective and preventive action (CAPA) process that reduced rework by 18% and complaints by 32%, strengthening incident management practices.
Partnered with cross-functional teams to embed governance and compliance principles into day-to-day operations, aligning processes with best practice frameworks.

Education

Master of Cybersecurity - Governance and Leadership

Australasian Academy of Higher Education

Bachelor of Science - Biochemistry, Microbiology & Genetics

Australian National University

Skills

Governance & Compliance: ISO 27001 (familiarity), NIST CSF, Risk Assessment, Policy Development
Audit & Risk Management: Internal Audits, Threat & Vulnerability Assessments, Corrective Actions, KPI Dashboards
Security Tools (basic exposure): Wireshark, Nmap, Splunk, Burp Suite

Data & Systems: Power BI, iLeader, Microsoft Office
Soft Skills: Stakeholder Training, Project Coordination, Cross-Functional Team Leadership

Affiliations

Student Member, Australian Information Security Association (AISA)
Volunteer, Cybersecurity Awareness Week on campus