AI delivery, security, and governance expertise.

Krisna Parahita

Founder & Principal Consultant

Krisna combines AI and data platform leadership with hands-on technical depth. As Regional BaaS Technology Lead at Maybank Islamic, he works across multi-tier Kubernetes architecture on AWS, vendor integration, and production support, with a platform stack including Prometheus/Grafana, Fluentd, Kyverno, Cert-Manager, and Envoy Gateway. Previously, as VP of Product and Data Platform at LinkAja, he led data and AI platform direction for a payments platform serving 12M+ verified users. As a World Bank consultant advising Indonesia's Ministry of Finance, he designed data architecture and proposed CKAN for fiscal data management. He is pursuing an MSc in Artificial Intelligence at Universität zu Lübeck.

• BaaS & Embedded Finance
• AI/Data Platform Architecture
• Regulated Fintech
• Cloud & Kubernetes Architecture
• Data Architecture Advisory

Aisyah Hilma

Senior Advisor - IT Governance, Cybersecurity & Data Privacy

Technology governance, risk, and cybersecurity professional with over 15 years of experience in the financial services industry. Specializes in IT Governance, IT Audit, Cybersecurity Risk Management, Information Security, Data Privacy, and Regulatory Compliance. Extensive advisory and assurance experience in IT governance framework development, cybersecurity maturity assessments, ISO 27001 implementation and certification readiness, and technology audits covering core banking systems, digital banking platforms, and payment services. Brings expertise in information security and privacy management frameworks, including ISO 27001 and ISO 27701, with a focus on strengthening information protection, privacy governance, risk management, and regulatory compliance. Committed to helping financial institutions enhance cyber resilience, strengthen governance and internal controls, and align technology and privacy risk management with strategic business objectives.

LinkedIn

Farchan Nuary

IT Security Consultant, Cybersecurity Advisor, ISO 27001 Lead Auditor

IT security partner for consulting firms needing information-security expertise and service delivery for their clients. Over 16 years of experience across telecommunications, banking, fintech, and crypto exchange sectors, with capabilities spanning strategy, governance, and technical security implementation.

Expertise

ISMS, ISO 27001, and IT GRC; application and product security; SOC, SIEM, perimeter security, and incident response.

Credentials

ISO 27001:2022 Lead Auditor (2024); ISO 27001:2013 Lead Auditor (2021); experience leading ISO 27001 implementation and recertification, SOC development, and security control modernization.

Approach

Business risk-based, with practical recommendations that weigh control effectiveness, operations, and user experience.

Core services

• ISO 27001 Certification Support: ISMS support from gap assessment, risk assessment and treatment, Statement of Applicability, policies and procedures, through audit readiness and findings follow-up.
• Web, API, and Mobile App Penetration Testing: Security testing of web applications, APIs, and Android/iOS mobile apps, including authentication and authorization, access control, and business logic, with remediation recommendations and retesting.
• Managed Security Device Services: Management and procurement of firewalls, proxies, WAF, IPS, and other security devices, including configuration review, hardening, and monitoring.
• SOC Managed Service: SIEM-based security monitoring, log source integration, use case development, alert triage and investigation, and incident response coordination.

LinkedIn