Our Team
Who we are → Our Team
Senior from day one.
Every engagement at The Risk Labs is led by a certified practitioner — not handed off to a trainee shadowing someone more senior. The team you meet in the kickoff call is the team that signs the report.
Leadership and practice leads
Engagement Leadership
Our engagement leads hold CISA, CISSP, PCI QSA, and ISO 27001 Lead Auditor credentials, with backgrounds spanning Big Four audit practices, regional banks, and in-house CISO roles across the GCC. Each lead carries a maximum concurrent engagement load designed to protect quality, not utilization targets.
Technical Assurance Practitioners
Our penetration testers and cloud security reviewers hold OSCP, CREST, and cloud-vendor security certifications, and have delivered testing programs for banks, payment processors, and critical infrastructure operators across the region.
AI Governance & Red Teaming
Our AI practice is led by practitioners holding ISO/IEC 42001 Lead Implementer credentials, with hands-on experience red-teaming production LLM and agentic systems — not generalist consultants applying a checklist to a new technology.
How we staff an engagement
We staff to the standard you’re being assessed against, not to a generic consulting bench. A PCI DSS engagement is led by a QSA. An ISO 42001 engagement is led by a Lead Implementer. A penetration test is run by a practitioner holding an offensive security certification, not an audit one. Where additional capacity is required, we draw on a vetted affiliate network under the same engagement lead and the same quality standard — never an anonymous subcontractor.
Where we work
Abu Dhabi (head office) · Dubai · Riyadh · Doha. Delivery across the GCC, with selected engagements in the US and Europe through our affiliate network.
