Dubai · Berlin Est. 2023 Boutique Advisory

Technology, cybersecurity & delivery advisory
for investment, banking, and payments across GCC, EU, CIS.

Led by a career CIO and CISO with twenty years building, securing, and delivering technology inside investment banks, trading platforms, payment networks, and international holdings. We sit on the buyer's side of the table — not the vendor's.

01 / Perspective
Buy-side, not sell-side.
Twenty years inside the client organisation — as Group CIO, CISO, and Head of Division. We know what good vendor management and honest advice actually look like.
02 / Focus
Financial services, end to end.
From HFT and algorithmic trading to core banking, payments, and rating agencies. Direct operating experience in DIFC, ADGM, EU, UK, and CIS regulatory environments.
03 / Integration
Strategy and delivery, unified.
Architecture, security, and execution are one engagement — not three vendors coordinating badly. Built and run every layer of the stack we now advise on.
04 / Accountability
Senior-led. Always.
The person you meet is the person who does the work. No staffing pyramids. No bait-and-switch to junior consultants after the contract is signed.

Three pillars, built around the outcomes regulated firms actually need.

Each engagement is scoped to a defined outcome with clear deliverables, not open-ended retainers. Engagement can be project-based, interim leadership, or ongoing advisory.

01 CIO Advisory

Technology Advisory

Senior technology leadership for firms that need the judgement of a CIO without a full-time hire. We own the strategy, the vendors, and the roadmap.

  • →Fractional / Interim CIO. Monthly retainer. Board reporting, IT strategy ownership, vendor governance.
  • →Technology Due Diligence. Pre-deal tech assessment for investors and acquirers. Stack, debt, scalability, team.
  • →IT Strategy & Roadmap. Three-year plan. Capability model. Prioritised investment sequencing.
  • →Architecture Review. Current-state assessment, target-state design, migration plan.
  • →Vendor & Contract Advisory. RFPs, selection, contract negotiation, SLA design, renewal strategy.
02 CISO Advisory

Cybersecurity & Risk

Security leadership and compliance expertise for UAE-regulated entities. Aligned to DFSA, FSRA, UAE IA, and international standards.

  • →Virtual CISO. Ongoing security leadership. Board-level risk reporting. Policy and governance ownership.
  • →Security Posture Assessment. Gap analysis against ISO 27001, NIST CSF, CIS. Prioritised remediation roadmap.
  • →Regulatory Compliance Advisory. UAE IA, DFSA / FSRA cyber, UAE PDPL, ADGM DPR, NESA, PCI-DSS.
  • →Third-Party Risk Management. Supplier due diligence. Ongoing vendor risk programme.
  • →Incident Response & Tabletops. IR playbooks. Crisis simulations for exec teams and boards.
  • →Security Awareness Programmes. Phishing simulations. Role-based training. Board briefings.
03 Programme Delivery

Project & Programme

When advice isn't enough. Execution for cross-functional technology initiatives where failure isn't an option and the board is watching.

  • →Programme Management. ERP rollouts. Cloud migrations. Security transformations. M&A IT integration.
  • →PMO Setup & Uplift. Standing up a PMO function. Governance. Portfolio reporting.
  • →Project Recovery. Intervention on stalled or failing initiatives. Honest diagnosis, decisive action.
  • →Cloud Migration Oversight. Microsoft 365 / Azure. AWS. Hybrid. Client-side advisory, not integrator.
  • →Core System Implementation. ERP, portfolio management, CRM. As the buyer's advocate.

How we actually work.

There is a reason boutique advisory is different from the Big Four. We structure every engagement around four principles — and we say no to work that doesn't fit them.

"

The job of an advisor is to make the client smarter, not more dependent. If we're still on retainer in year three doing the same work as year one, we've failed.

I
Fixed scope, named deliverable.
Every engagement has a defined outcome, a timeline, and a document we hand over. No ambiguous retainers that bill forever and produce nothing.
II
Senior-led, always.
The principal you engage is the principal who does the work. No staffing pyramids. No junior consultants reading a playbook back to you at senior rates.
III
Independent by construction.
We do not take commission from vendors, integrators, or software licensors. If we recommend a product, it is because it is right for you — not because of a referral fee.
IV
Confidentiality as default.
Our client list is private by policy. Case studies are anonymised. NDAs are signed before, not after, the first substantive conversation.

Built for firms where technology decisions carry regulatory, commercial, and fiduciary weight.

We focus on the sectors we've actually operated in. That depth is what lets us go further than generalist consultancies — and faster than firms that have to learn your business before they can help it.

Investment & Trading
Asset managers, brokers, HFT and algorithmic trading platforms, custody & clearing.
Banking & Core Systems
Core banking assessment and implementation, private banking, treasury systems.
Payments & Fintech
Payment networks, card platforms, fintechs in DIFC Innovation Hub and ADGM RegLab.
Family Offices
Single- and multi-family offices managing generational wealth, plus rating agencies and NBFIs.
International Holdings
Group-level CIO advisory for multi-jurisdiction holdings with operations across EU, UK, GCC, and Asia.
Frameworks & regulatory fluency
ISO 27001
ISMS
NIST CSF
Cybersecurity
DFSA
DIFC
FSRA
ADGM
UAE IA
Nat. Assurance
COBIT
IT Governance

Three ways to start.

Every client begins with a scoping call. Below are the typical engagement shapes — pricing is proposed after scope, never before.

Fixed-scope Assessment
4 – 8 weeks

A defined diagnostic with a named deliverable. Ideal for a board that needs an independent view before committing budget.

  • —Technology due diligence
  • —Security posture assessment
  • —Vendor or architecture review
  • —Written report + executive readout
Programme Delivery
3 – 18 months

Execution leadership on a defined technology initiative. Milestone-based commercial structure with clear acceptance criteria.

  • —Fixed-price or time-and-materials
  • —Weekly steering committee
  • —Named delivery milestones
  • —Independent QA gates

Twenty years on the buy-side of enterprise technology.

The Multiverse is led by a career technology executive with two decades of hands-on experience building, running, and transforming IT organisations inside investment banking, trading, payments, and regulated financial services — across the UAE, Europe, and the GCC.

The practice is built on senior operating experience at Group CIO, CIO, and CISO level. Engagements to date have spanned core banking assessment and implementation, enterprise architecture, cloud adoption, group-level IT governance, digital transformation, and the delivery of trading, payments, and data platforms in production.

The advisory approach is informed by direct experience of what actually works: selecting vendors, negotiating contracts, surviving audits, responding to incidents, migrating core systems under regulatory deadlines, and recovering programmes that went sideways.

Academic background includes a Master's in IT, a Bachelor's in Economics, a Civil Law diploma, and an Executive MBA from IMD Lausanne (2025). Working languages: English, German, Russian.

The short version — most consultancies sell what they've read about. We advise on what we've built, run, and survived.

Full biography, references, and named engagement history provided after NDA.

Schedule a consultation.

Every engagement begins with a 30-minute scoping call. No obligation, no sales pressure. If we're not the right fit, we'll tell you — and where useful, we'll point you to someone who is.