Mike Maddison

Over his tenure at NCC Group, Mike Maddison and the Executive team transformed the company into a focused and strategically positioned cyber security business through the successful disposal of Escode, the strengthening of the balance sheet and the substantial return of capital to shareholders. During his four and a half years, Maddison delivered the company's planned transformation, including the successful disposal of Escode and the strengthening of the balance sheet and substantial return of capital to shareholders.

Maddison brings almost 30 years of experience in the field of technology risk, cyber and physical security and has delivered significant transformation programs within end-user environments as well as developing cyber risk mitigation strategies and appropriate organizational designs. At EY, where he served from 2017, he successfully delivered strong growth across 97 countries in the EMEA region and reinforced the firm's position as a leading cyber security adviser; previously he led PwC's risk services practice across the Middle East and before that was head of Deloitte's cyber security consultancy in EMEA for 10 years, where he also drove significant growth.

Under Maddison's leadership, NCC Group delivered the successful divestment of Escode, a software testing division. The completion of NCC's transformation into a focused cyber security business included the disposal of Escode in May 2026 and the return of £225m to shareholders. In 2023, Maddison made a strategic pivot, sharpening the company's focus on clients and their strategic problems rather than transactional projects.

Career history

• EY: Head of Cyber Security, Privacy, and Trusted Technology Practice for EMEA (2017–2022)
• PwC: Led Risk Services practice across the Middle East
• Deloitte: Head of Cyber Security Consultancy in EMEA for 10 years

What Maddison could bring to future roles: With nearly three decades of expertise in technology risk and cybersecurity transformation across major consulting firms, Maddison demonstrates a track record of driving organizational growth in complex regulatory environments. His strategic experience in divesting non-core business units while refocusing organizations on core competencies, combined with his ability to execute major shareholder return programs, positions him well for senior leadership roles in transformation-focused technology and advisory sectors.