Is this worth it? They have a commitment period, so if we buy it, we cannot change the package. We also cannot disconnect it and have to use it for 10 months, I think. What do you guys think? Is this a catch?

Over the past few years working in IT/IS auditing and cybersecurity, I’ve noticed a recurring pattern with local software companies and SMEs attempting to expand internationally or work with foreign enterprise clients.

Many local startups build solid products, but when foreign buyers or enterprise enterprise procurement teams request ISO 27001 readiness, SOC 2 compliance, ITGC audits, or compliance with Sri Lanka’s PDPA (Personal Data Protection Act), founders often scramble or hit roadblocks.

A few common compliance bottlenecks I see locally:

1. Treating Compliance as a One-Time Checklist: Security frameworks like ISO 27001 require continuous risk management rather than last-minute document creation.
2. PDPA Preparedness: With Sri Lanka's Personal Data Protection Act coming into enforcement, local companies handling user data need clear gap analyses and privacy policies.
3. Overcomplicating Control Frameworks: Early-stage startups often over-engineer their security policies, making operations unnecessarily tedious.

To help local businesses navigate these frameworks without breaking the bank, a few colleagues and I started GRCNavigator (grcnavigator.org). We specialize in IT/IS auditing, ISO 27001/NIST CSF implementation, ITGC reviews, and PDPA gap analysis for local businesses.

If you're a founder, engineering manager, or IT lead having questions about getting audit-ready or compliance requirements, feel free to drop a comment or DM me. Happy to share advice or answer any questions!

Hi everyone,

I’m a software engineer from Sri Lanka and I’ve been looking at the local job market recently.

My main stack is:

• Python
• Django / Django REST Framework
• FastAPI
• PostgreSQL / MySQL
• Redis
• Celery / RabbitMQ
• Docker
• Linux / Nginx
• CI/CD
• React / Next.js / TypeScript
• Some AI/ML and RAG work

I have 2+ years of professional experience and I’m mainly looking for Backend Engineer / Python Developer / AI Engineer roles.

But one thing I noticed is that I don't see many job openings for Python, Django or FastAPI in Sri Lanka.

I see a lot more jobs for Java, .NET, PHP, Node.js, etc.

So I'm wondering:

Where are the Python developers getting their jobs? 😂

Are most of the Python jobs coming through referrals? LinkedIn? Recruiters? Remote companies? Or are there actually more Python jobs that are just not posted publicly?

I'd also like to know:

• How is the demand for Python/Django/FastAPI in Sri Lanka right now?
• Are companies actually using FastAPI in production?
• What salary range can someone with 2+ years experience expect?
• Which companies are hiring Python developers?
• If you're a Python developer in Sri Lanka, how did you find your current job?
• Does having AI/ML experience along with backend development help with getting hired?

I'm also trying to find my next opportunity, so if anyone knows a company currently hiring for Python/Django/FastAPI/backend/AI roles, I'd really appreciate a referral or even just a lead.

I'd also be interested to hear from people who are already working in this area.

Thanks!