A Kuala Lumpur GRC practice, led from the front

Malaysian-registered and Malaysian-led, with the depth of the Think Risk group behind every engagement.

The firm

Independent assurance for organisations that have to show their controls work.

Think Risk International Sdn Bhd is a governance, risk and compliance consultancy based in Kuala Lumpur. We work with private-sector organisations that are regulated, certified or contractually obliged to demonstrate control — and that would rather have a small, senior team do the work than carry the cost of a large in-house function.

We are part of the Think Risk group, with offices in Australia, Malaysia and the Philippines. Engagements here are led locally, supported by the group’s audit and compliance team where the work calls for it.

Company facts

Registered name
Think Risk International Sdn Bhd
Registration No.
202501024430 (1625843V)
Incorporated
30 May 2025 · Companies Commission of Malaysia (SSM)
Directors
Nicole Lee Suresh (Malaysia)
Mathew Peter Jones (Australia)
Michael John Hannam (Australia)
Group offices
Australia · Malaysia · Philippines
  • 7service lines
  • 9standards & frameworks
  • 11+years' GRC experience leading engagements
  • 3countries in the Think Risk group

Leadership

The people behind the work.

Nicole Lee Suresh, Director, Think Risk International Sdn Bhd

Nicole Lee Suresh

Director, Think Risk International Sdn Bhd

  • CERM · IERP
  • CBCP · DRI
  • BBus (Accounting) Hons

Nicole has spent more than 11 years in governance, risk and compliance. She began in consulting, delivering risk-based internal audit to government-linked and public listed companies across a dozen industries, then moved in-house with two Malaysian listed groups — building their enterprise risk and business continuity frameworks, and investigating the whistleblowing cases that came through them.

Before establishing the Malaysian practice, she spent a year with Think Risk Australia as Manager of the Audit and Compliance Department, leading risk management and management system development engagements and managing a delivery team based in the Philippines. She heads the Malaysian practice and its team.

Mick Hannam, Managing Director, Think Risk International

Mick Hannam

Managing Director, Think Risk International

  • 35+ years’ experience
  • Australia & international

Mick Hannam is Managing Director of Think Risk International, bringing more than 35 years’ experience in risk management, governance and assurance across Australia and internationally. His work spans mining, oil and gas, manufacturing, marine and logistics, and government, helping organisations develop compliance programs, strengthen management systems and manage operational risk.

His experience includes leading audits and assurance reviews, developing risk and contractor management frameworks, and supporting crisis preparedness and business continuity. He combines strategic oversight with practical implementation, helping boards, executives and operational teams turn complex requirements into clear responsibilities and effective controls.

Mick supports Think Risk’s Malaysian practice with international expertise in risk, audit and compliance, working alongside local specialists to help Malaysian organisations strengthen governance, build resilience and meet regulatory and business expectations.

How engagements are run

Three things that do not change.

Independent

We report what the evidence shows, to the people who need to hear it — including when that is the board.

Evidence-led

Findings are rated on a defensible risk basis, with root cause separated from symptom.

Senior-led

Senior practitioners scope, lead and sign off the work. You are not handed to a junior team after the pitch.

See the five-step method and engagement models

Book a consultation

Let's make every control proven, together.

Tell us what needs to be audited, certified, investigated or made to work. Our team will reply personally with the right next step — or tell you honestly if we're not the right fit.

  • Senior specialists from the first call
  • Written proposal with a fixed scope
  • Independent of certification bodies

Request a consultation

Personal reply from our team · no obligation

Talk to a GRC specialist Book a consultation