ALPHASEC / EXPLORE

Executive management

Meet the people leading our business and specialist practices.

Executive leadership & Principals

Meet the people leading our business and specialist practices.

Organisation structure
Nipon Nachin, Ph.D.

Chief Executive Officer (CEO)

Nipon Nachin, Ph.D.

QSA · CISSP · AAIA · AIGP · CISM · CISA · GPEN · CIPP/E · CIPM · FIP · CCISOView professional credentials
Education, credentials & experience

D.Sc. in Technopreneurship and Innovation Management and M.Sc. in Business Software Development, Chulalongkorn University; B.Sc. in Computer Science, Khon Kaen University. His published profile lists C|CISO, AAIA, AIGP, CIPM, CIPT, CEPAS DPO, CIPP/E, CISSP, CISA, PCI QSA, CISM, CSSLP and CDMP. Experience includes leadership of ALPHASEC and ACIS Professional Center, professional privacy association leadership, board roles and academic and public-sector advisory work.

Chatchavin Pipatchotitham

Executive Vice President

Chatchavin Pipatchotitham

Education & professional training
  • Master of Business Administration, Chulalongkorn University
  • Bachelor of Accounting, Thammasat University
  • Director Certification Program (DCP 288/2020), Thai Institute of Directors
Nisudthaya Atchadaphimuc

Chief Marketing Officer

Nisudthaya Atchadaphimuc

Professional credentials 1
  • ISO/IEC 27001:2022 ISMS Lead AuditorIRCA
Nichapat Boonnuddar

Chief Technology Officer & Principal

Nichapat Boonnuddar

Security Operations & Incident Response

Professional credentials 5
  • CompTIA Cybersecurity Analyst (CySA+)CompTIA
  • Certified in CybersecurityISC2
  • Certified Threat Hunting and Incident Response IRed Team Leaders
  • Certified Red Team Operations ManagementRed Team Leaders
  • Certified Cybersecurity Educator ProfessionalRed Team Leaders
Chayandej Preeyawatthanakul

Chief Financial Officer

Chayandej Preeyawatthanakul

Suriya Nachin

Chief Operating Officer & Principal

Suriya Nachin

Data Protection

Professional credentials 2
  • Certified Information Privacy Professional/EuropeIAPP
  • Data Protection OfficerCEPAS
Education & professional training
  • Master of Laws, Duke University
  • Bachelor of Laws, Thammasat University — First-class honours, Gold Medal
  • ISO/IEC 42001:2023 Lead Auditor Training Course
Supiruk Sangarunsiri

Principal

Supiruk Sangarunsiri

Compliance and Advisory

Professional credentials 4
  • Certified Information Privacy Professional/EuropeIAPP
  • Certified Information Privacy ManagerIAPP
  • Certified Data Management ProfessionalDAMA International
  • Certified Data Protection OfficerACIS Professional Center
Education & professional training
  • ISO/IEC 27001:2022 ISMS Lead Auditor Training Course — BSI, CQI and IRCA certified course
  • ISO 22301:2019 BCMS Lead Auditor Training Course — BSI, CQI and IRCA certified course
  • ISO/IEC 27701:2025 Lead Auditor Training Course — BSI
PROFESSIONAL QUALIFICATIONS

Professional credentials

Nipon Nachin, Ph.D.

Qualifications in cybersecurity leadership, security assessment, information systems audit, privacy management and AI governance.

  • QSA
    QSAQualified Security AssessorPCI Security Standards Council
  • CISSP
    CISSPCertified Information Systems Security ProfessionalISC2
  • AAIA
    AAIAAdvanced in AI AuditISACA
  • AIGP
    AIGPArtificial Intelligence Governance ProfessionalIAPP
  • CISM
    CISMCertified Information Security ManagerISACA
  • CISA
    CISACertified Information Systems AuditorISACA
  • GPEN
    GPENGIAC Penetration TesterGIAC
  • CIPP/E
    CIPP/ECertified Information Privacy Professional/EuropeIAPP
  • CIPM
    CIPMCertified Information Privacy ManagerIAPP
  • FIP
    FIPFellow of Information PrivacyIAPP
  • CCISO
    CCISOCertified Chief Information Security OfficerEC-Council

How our teams work together

We begin with the business context and information scope, plan with your internal owners, work to the agreed engagement and transfer knowledge to support ongoing operations.

Cybersecurity & IT Audit

Risk assessment, security testing, control assurance, and prevention and incident response processes.

Privacy & Legal

Connecting data protection responsibilities, legal requirements, operational processes and evidence.

Platforms & Enablement

Using technology and training to support practical risk management and continuous readiness.