Nassef & Associates Consultancy Group (NACG) is a boutique governance, risk, and compliance advisory firm headquartered in Dubai, working with boards and institutional clients across the UAE, Saudi Arabia, Oman, and Qatar. We exist because too many growing organisations are stuck between two bad options: hiring a full-time Chief Risk and Compliance Officer before they're ready for that cost, or leaving governance to whoever has time for it. NACG gives you the senior judgment of the first option, at a fraction of the commitment — directly and positively impacting your P&L.
NACG is led by founder and managing partner Marwa Nassef, who brings over 20 years of banking and fintech risk and compliance experience across the EMEA region. She previously served as Head of Risk & Compliance at fintechs, and built her career in risk management with multinational banks and corporates across EMEA.
Her background spans enterprise risk management, regulatory compliance, AML/CTF, and corporate governance, with deep, hands-on experience advising boards and executives as a fractional risk and compliance leader — applying the Three Lines of Defense model in practice rather than just on paper, and improving the overall company's risk awareness and culture. That experience is why every NACG engagement is led personally at C-suite level from day one — never handed off to junior staff still learning the discipline.
We say the uncomfortable thing when it needs saying, rather than burying gaps on page forty of a report.
Our advice is shaped around each client's own risk profile and interests, never a fixed house methodology applied regardless of fit.
Everything we deliver is built to be used the day after we hand it over — not filed away for the next audit.
"Good governance is not about rules. It's about making the right decisions, the right way."
We keep a deliberate, forward-looking focus on the risk areas reshaping the region fastest — cybersecurity regulation, cross-border data residency, and AI governance — so our clients are positioned ahead of where regulation is heading, not scrambling to catch up with it. Governance, at NACG, is built to be lived, not filed.