Leadership Team — nCrypt Malaysia
Offensive-security operators, ISO 27001 lead implementers and incident-response veterans. The people accountable for every engagement we run.
Built for regulated Malaysian enterprises
Our leadership team is structured to mirror how Malaysian regulators evaluate cybersecurity vendors: independent technical authority, evidenced credentials, traceable engagement governance and clear accountability for every deliverable. Each function is held by a senior operator with on-the-ground experience inside Malaysian banks, GLCs, telcos and NCII operators — not consultants who have only read the policy documents.
Every penetration test is signed off by a senior technical lead whose named credentials are confirmed in the proposal. Every compliance engagement identifies its accountable lead, and every incident-response retainer has a documented escalation path with senior technical leadership on the on-call rota.
Leadership team
Chief Executive Officer
nCrypt Malaysia
Sets the strategic direction of nCrypt Malaysia, owns regulator relationships with BNM, NACSA and PDP, and chairs the engagement governance board. Twenty-plus years in financial-services security leadership across ASEAN, with prior roles spanning Big-4 advisory, GLC CISO and capital-market regulator engagements.
Certifications
Chief Technology Officer
nCrypt Malaysia
Owns the technical platform, the offensive R&D programme and the toolchain our consultants use. Drives proprietary methodologies for cloud, OT/ICS and AI/LLM penetration testing. Background in offensive security research, exploit development and cloud-native architecture for regulated workloads.
Certifications
Head of Penetration Testing
nCrypt Malaysia
Oversees all CREST-aligned penetration testing delivery — web, mobile, API, network, cloud, red team and intelligence-led engagements. Acts as technical authority on RMiT 10.49 intelligence-led tests for Malaysian financial institutions and ensures every report meets CREST quality standards.
Certifications
Head of Compliance & GRC
nCrypt Malaysia
Leads the GRC and audit advisory practice: ISO 27001 implementations, PCI DSS assessments, BNM RMiT gap analyses, PDPA 2024 advisory and Cyber Security Act 2024 readiness. Bridges technical findings into board-ready risk language and remediation roadmaps that pass external audit.
Certifications
How our leaders engage on your work
We deliberately keep the leadership team close to delivery. The Head of Penetration Testing personally scopes every CREST-aligned engagement above a defined complexity threshold and signs off the final report before client release. The Head of Compliance & GRC leads every Bank Negara Malaysia RMiT gap assessment and presents findings directly to the board risk committee where requested.
The CTO is the technical authority on cloud, OT/ICS and AI/LLM red-team work — the engagements where most providers reach the edge of their methodology. The CEO holds the regulator and account-governance relationship for our top accounts, ensuring continuity across multi-year retainers.
Want to meet the team?
Scoping calls are run by the consultant who will lead your engagement. No SDR layer, no junior account managers — direct access to the people who will sign the report.
Not sure what you need?
Tell us what needs testing and we come back with a fixed fee within 48 hours — no hourly estimates.