PNYX HILL GRC ADVISORS
Licensing and Regulatory Authorisations
We lead financial-services licence applications, variations and regulatory approvals across the FSRA, DFSA, VARA, CMA and CBUAE regimes, and advise on authorisation programmes across the wider GCC. Our clients include banks and financial institutions, fund and asset managers, family offices, investment firms, insurers, captives, VASPs, payment businesses and fintechs.
We manage authorisation as an institutional-readiness programme rather than a document-production exercise. The business model, regulatory business plan, financial projections, governance, key individuals, policies, systems and operating evidence are developed against one consistent case and carried through regulator engagement to launch.

When Clients Engage Us
Clients engage us when growth has slowed and the underlying cause is unclear; when a new market, business or investment requires a rigorous strategic case; when capital and management attention must be reallocated; or when the current strategy no longer reflects the realities of the market.
We are also engaged when structural, technological or regulatory change has challenged the assumptions behind the strategy; when performance has diverged materially from the strategic plan; when a change in ownership or leadership requires the organisation’s direction to be reset; or when a board needs independent challenge before making a consequential and difficult-to-reverse decision.
Regulatory Application Strategy and Readiness
We establish the application route, evidence standard, decision timetable and critical dependencies before drafting begins. The initial assessment tests the business model, ownership, financial capacity, governance, people, systems and control environment against the expectations of the relevant authority.
We identify gaps early, assign accountable owners and define the submission sequence. This gives the applicant a controlled programme and prevents avoidable contradictions between the application, financial model, policies and operating plan.
Our work covers:
· Application forms, schedules and supporting-document management
· Regulatory business plan and activity descriptions
· Ownership, controller and source-of-funds documentation
· Governance, organisation and regulated-function submissions
· Policy, framework and operating-evidence coordination
· Regulatory questions, revisions and application tracking
Regulatory Strategy and Advisory>>>
New Licence and Authorisation Applications
We lead new applications from initial preparation through submission, regulatory review and operational approval. Scope is calibrated to the relevant process, including FSRA FSP applications, DFSA authorisations, VARA ATI and VASP licensing, CMA financial-activity applications and CBUAE licensing.
We maintain a single application case across the business plan, financial model, ownership evidence, governance, policies, key individuals and operating arrangements. Management retains responsibility for the application and all representations made to the regulator.
Our work covers:
· ADGM, DIFC and onshore UAE jurisdiction comparison
· Licence, permission and client-access implications
· Branch, subsidiary, holding-company and regulated-entity options
· Ownership, control, substance and local-presence requirements
· Group structure and shared-service implications
· GCC market sequencing and regulatory dependency mapping
Compliance Advisory and Compliance as a Service>>>
Licence Variations, Changes in Control and Additional Permissions
We advise authorised institutions on variations, new activities, changes in control and other material approvals. We determine how the proposed change affects the existing permission, prudential category, governance, senior management, systems and ongoing regulatory commitments.
The change is structured as a controlled regulatory programme, with the commercial rationale, revised operating model and supporting evidence aligned before engagement. Transaction timetables and completion conditions are integrated with the approval process.
Our work covers:
· Licence and permission variations
· Additional regulated activities and product approvals
· Changes in control, controllers and beneficial ownership
· Board, senior-management and regulated-function changes
· Branch, legal-entity and group-structure changes
· Application updates, regulator engagement and implementation conditions
Regulatory Strategy and Advisory>>>
Regulatory Business Plans and Financial Projections
We develop regulatory business plans that explain how the institution will operate, earn revenue, manage risk and meet its obligations. The narrative is grounded in the proposed activities, target clients, delivery model, governance, staffing, outsourcing, technology and implementation plan.
Financial projections are constructed from the same operating assumptions and tested against capital, liquidity, solvency and cost requirements. Management assumptions, downside cases and funding dependencies remain explicit and traceable.
Our work covers:
· Regulatory business plan structure and drafting
· Market, client, product and revenue-model articulation
· Operating model, staffing, outsourcing and technology assumptions
· Integrated profit and loss, balance-sheet and cash-flow projections
· Capital, liquidity, solvency and break-even analysis
· Base, downside and regulatory stress scenarios
Ownership, Governance and Key-Person Readiness
We prepare the ownership, governance and individual-accountability case required for authorisation. This includes controllers and beneficial owners, board and committee arrangements, senior management, regulated functions and the allocation of decision rights.
Candidates are assessed against the experience, competence, capacity, independence and residency expectations applicable to their role. We prepare individuals for regulatory interviews without scripting or substituting their own judgement.
Our work covers:
· Controller, beneficial-owner and group-structure documentation
· Source-of-wealth and source-of-funds evidence coordination
· Board, committee and senior-management design
· Controlled, authorised, responsible and key-function mapping
· Role profiles, competency evidence and succession arrangements
· Fit-and-proper assessment and regulatory-interview preparation
Corporate Governance and Board Effectiveness>>>
Policies, Controls and Operational Readiness
We design the policies, frameworks and operating controls required to support the licence and the commitments made in the application. Documentation is calibrated to the institution’s actual activities, scale, risks, systems and allocation of responsibilities.
Before launch, we test whether the approved model can operate in practice. The review covers people, premises, capital, systems, outsourcing, governance, customer journeys, records and management information, with deficiencies closed through a controlled readiness plan.
Our work covers:
· Governance, compliance, AML, risk and internal-control frameworks
· Conduct, client-assets, complaints and consumer-protection controls
· Outsourcing, data, technology and operational-resilience arrangements
· Regulatory capital, insurance, premises and substance readiness
· Procedures, registers, evidence standards and management information
· Operational-readiness testing and remediation tracking
Compliance Advisory and Compliance as a Service>>>
Risk Management and Operational Resilience>>>
Regulatory Submissions, Engagement and Launch
We control the submission process, coordinate responses and maintain consistency as the regulator tests the application. Management is prepared for meetings and interviews, while questions, commitments, changes and outstanding evidence are tracked to closure.
Following in-principle or conditional approval, we coordinate the actions required for operational launch. This includes approval conditions, final appointments, capitalisation, systems evidence, policy adoption, first reporting obligations and transition into ongoing compliance.
Our work covers:
· Submission quality control and application governance
· Regulatory correspondence, questions and document revisions
· Management, board and key-person meeting preparation
· Commitment, dependency and approval-condition tracking
· In-principle approval and operational-launch workstreams
· Handover to ongoing compliance, reporting and governance
Compliance Advisory and Compliance as a Service>>>

