Innovation & Success · The Cianaa Team

Meet Our Team

Empowering Excellence: Our Exceptional Team Drives Innovation and Success. A focused leadership core, a credentialed bench of subject matter experts, an established external auditor network, and a tertiary-institute internship pipeline — built for breadth, designed for depth.

QSAC-accredited since 2014 PhD & sector specialists NZ · AU · APAC · EU · NA
Trusted ecosystem
★ Cianaa Team
A credentialed ecosystem
Leadership · SMEs · External auditors · Internies
7 leadership
8 SMEs
5 ISO external
4 internies
14 years accreditation · 6-country footprint
24
Combined specialists, auditors & internies
14 yrs
QSAC accreditation since 2014
3
PCI SSC accreditations (QSAC · QSA · 3DS)
6
Country footprint (NZ · AU · APAC · EU · USA · Canada)
100+
Engagements delivered
Trusted across ANZ & worldwide
Innovation & Success

Empowering Excellence: Our Exceptional Team Drives Innovation and Success

Three pillars define every person on the Cianaa team — what we hire for, what we reward, and what we expect from ourselves.

Highly Educated

Our people come from various fields and are highly educated. We are happy to recruit PhDs specialising in their fields — combining academic depth with practical compliance experience.

Professionalism

Our staff shows excellent ethics, responsiveness to clients, reliability, self-motivation to go the extra mile, and adaptability to the requirements of every engagement.

Integrity

Our success is driven by a dedicated team known for their unwavering integrity, honesty, and objective mindset. Every member adheres to a strict code of ethics and embodies a relentless commitment to excellence.

Leadership

The People Behind Cianaa

Seven leaders steer Cianaa’s compliance, audit, certification and assurance practice across ANZ, the Middle East, and beyond. Each owns a discipline; together they hold the standard.

01
CEO & FounderAuckland, NZ

Dr Rizwan Ahmad

Chief Executive Officer & Founder · PhD

PhD-credentialed Founder of Cianaa Technologies (2014). Drives the firm’s vision of practical, evidence-driven compliance across PCI, ISO and emerging-tech assurance — building a multi-region credentialed bench from Auckland to Dubai.

PhDQSAPCI 3DSISO 27001 LAISO 42001 LA
02
Head of PCI ComplianceAuckland, NZ

Syed Saad Arshad Kazmi

Head of PCI Compliance

Leads Cianaa’s PCI DSS, PCI 3DS and SAQ programmes across ANZ and APAC. Practising QSA — deep expertise in cardholder data environment scoping, segmentation strategy and merchant-level determination.

QSASenior LA ISO 27001ISO 27701
03
Head of Middle EastDubai, UAE

Mehar un Nisa

Head of Middle East

Heads Cianaa’s Middle East operation — engaging with banks, fintechs and government entities across the GCC. Brings deep regional regulatory knowledge and on-the-ground delivery for PCI, ISO and assurance engagements.

ISO 27001 LARegional Lead
04
Certification & Compliance LeadAuckland, NZ

Noor Ul Ain Ali

Certification & Compliance Lead

Leads Cianaa’s in-house ISO certification programme across ISO/IEC 27001, 27701 and 42001 — integrated audits, multi-standard scoping, and chair of the certification decision panel.

ISO 27001 LAISO 17021
05
Quality Assurance & Compliance ManagerAuckland, NZ

Asma Khan

Quality Assurance & Compliance Manager

Owns internal audit, report review and certification decision integrity. Ensures every Cianaa engagement meets ISO/IEC 17021 impartiality and competence requirements before sign-off.

ISO 17021Lead AuditorCQI/IRCA
06
AI & Legal Compliance AssessorAuckland, NZ

Minahil Saad

AI & Legal Compliance Assessor

Specialises in ISO/IEC 42001 AI Management System assessments and the legal-compliance overlay across Privacy Act, GDPR and emerging AI regulation — bridging Cianaa’s technical assessment with regulatory rigour.

ISO 42001 LAPrivacy ActGDPRLegal Compliance
07
Cianaa PioneerAuckland, NZ

Jenny Low

Cianaa Pioneer

Founding contributor to Cianaa’s growth journey — bringing institutional knowledge, sector relationships and continuity across more than a decade of the firm’s evolution from a single-standard QSA practice to a multi-standard assurance ecosystem.

Founding MemberCianaa Pioneer
Subject Matter Expertise

A Credentialed Specialist Bench

Beyond named leadership, Cianaa fields domain specialists across these disciplines — each backed by deep technical credentials and years of practical engagement experience.

12+ yrs
QSA

Senior PCI DSS Assessor

Cardholder data environment scoping, SAQ guidance & merchant-level determination

QSAISO 27001CISA
9+ yrs
3DS

PCI 3DS Specialist

EMV® 3-D Secure — ACS, DS and 3DSS environments

PCI 3DSEMV®CISSP
15+ yrs
ISO

Multi-Standard ISO Lead Auditor

Integrated audits across ISO 27001, 27701 and 42001

CQI/IRCAISO 17021Lead Auditor
10+ yrs
SOC

SOC 1 / 2 / 3 Practitioner

Trust Services Criteria — security, availability, confidentiality

CISATSCCPA
8+ yrs
AI

AI Governance Specialist

ISO/IEC 42001 AI Management System assessments

ISO 42001AI RiskCRISC
11+ yrs
NZ

NZISM & NZ Government Assurance

Public sector compliance & Trusted Authority (TFA) evaluation

NZISMCGRCTFA
14+ yrs
PT

Senior Penetration Tester

Red-team simulation across web, network and cloud environments

OSCPCEHCREST
9+ yrs
CR

Cryptography & Key Management

FIPS-aligned cryptography, HSM and key lifecycle assessment

CISSP-ISSAPCryptoFIPS
External Auditor Network

Independent External ISO Auditors

When impartiality demands it — or scope-coverage requires it — Cianaa engages an established panel of independent ISO lead auditors covering our certification scope: ISO/IEC 27001, 27701 and 42001. All peer-reviewed, accredited, and ISO/IEC 17021 conformant.

27001

Dr Shams Qazi, PhD

PhD Cyber Security · Independent ISO 27001 Lead Auditor

PhD in Cyber Security. Independent ISMS lead auditor combining academic depth with practical information security risk assessment — engaged for complex cyber-security scopes and witnessed assessments.

SOC 2

Dinesh Kumar Aggarwal

ISO/IEC 27001 & SOC 2 Auditor

Independent auditor specialising in ISO/IEC 27001 information security management systems and SOC 2 (Trust Services Criteria) examinations. Engaged for ISMS certification audits, SOC 2 Type I and Type II reporting, and independent control and readiness assessments.

27001+

Ankit Prashar

Lead Auditor — ISO 27001 & SOC 2

Cross-standard lead auditor combining ISO/IEC 27001 ISMS with SOC 2 Trust Services Criteria. Engaged for integrated security & trust assurance scopes spanning ISMS and SOC reporting requirements.

27001

Carew Hatherley

Independent ISO/IEC 27001 Lead Auditor

Independent ISMS lead auditor with broad multi-sector experience. Engaged for accreditation-witnessed audits and high-complexity information security management system assessments.

MSECB

Michal Everis

MSECB Accredited Multi-Standard Auditor

MSECB-accredited certification body auditor engaged across ISO/IEC 27001, 27701 and 42001 — bringing certification-body witnessing rigour to Cianaa’s multi-standard scopes.

ISO

Nick Fagan

Management System Assurance

Independent management-system assurance specialist within Cianaa’s external auditor network, with broad experience across the ISO management-system standards. Engaged to strengthen scope coverage and peer review in support of impartial, independent certification.

Tertiary Institute Internies

The Next Generation of Cianaa Specialists

Cianaa partners with leading tertiary institutions across New Zealand and PakistanUniversity of Auckland · NUST · LUMS · EIT — mentoring doctoral researchers and hosting internies to build tomorrow’s compliance, audit, and AI-governance bench.

PhD

Doctoral Research

PhD Information Security

Doctoral researchers focused on cryptography, AI risk, and cyber-physical systems — co-supervised with Cianaa senior specialists.

🇳🇿
University of AucklandNew Zealand
MSc

Postgraduate

MSc Cyber Security

Postgraduate internies completing thesis work on PCI DSS scope reduction, ISMS automation, and SOC 2 evidence collection.

🇵🇰
NUSTIslamabad, Pakistan
AI

Specialist Track

AI Governance Internship

ISO/IEC 42001-aligned research on AI risk assessment, model governance, and responsible-AI control framework design.

🇵🇰
LUMSLahore, Pakistan
BSc

Undergraduate Pipeline

BSc / BCom Final-Year Projects

Final-year project sponsorships across computer science, accounting and business — a direct pipeline to Cianaa’s graduate intake.

🇳🇿
EITEastern Institute of Technology, NZ
Industry

Our People — Diverse Industry Experience

Deep sector knowledge across eight industries — applied to every engagement.

Payment Card Industry

Financial & Fintech

Government

Telecommunication

AI & Big Data

Cloud & Datacentres

Insurance

Health and Safety

Let’s Talk

Get in Touch! We are Looking Forward to Start a New Project

Tell us about your compliance, audit, or security challenge. A specialist from our team will be in touch within one business day.

Contact Us Now →