CV Profile No.74625

Experience in the following industries :

• Banking, insurance, finance
• Call centers, hotlines
• Consumer goods
• Food-processing industry
• IT, software engineering, Internet

Professional experience

• Founder/Director
• Level8 IT GRC & Information Security
• Since 01.2014
• Level8 is an independent multidiscipline IT consulting. We provide services in IT Digital Trasnformation, Design Thinking, Governance, Risk and Compliance (IT GRC) and Information Security delivers value by helping organizations optimize their information assets and digital infrastructure risk management through the provision of a range of specialized corporate services. We currently operate the infrastructure services of a Subsidiary of Global Online Travel operator. These services include migrating the hosting to Infrastructure as a service, Desktop Support, Infrastructure management, Incident management. Financial management, Audit management, PCI DSS, Information Security Management and Financial management. It was recently extended to us consulting in IT Strategy, building business confidence and budgeting and financial control. Level8 is a fully black owned, proudly South African and BEE accredited privately held company headquartered in Cape Town, South Africa

• Project Management
• Madina Institute
• 01.2019 - 12.2019
• lementation of the full Administration of the institute, IT Support and Strategy development.

• Chief Information Officer
• DirectAxis
• 01.2014 - 08.2017
• Responsible for the overall delivery of Information Technology services for DirectAxis. This includes Application Development, BI, Data Governance, Enterprise Project Office (EPO), Infrastructure, and Enterprise Architecture. Significant achievements: o Formulate and approval of IT Strategy o Formalized the budgeting processes for all IT service functions o Major supplier contract agreed o Formulate the Enterprise Architecture Roadmap o Transform the application development capability to Lean Agile resulting in more rapid releases taking place with significant improvement in quality o Re-engineering of Back-end infrastructure to support Agile DevOps o Formulation and implementation of automated testing practices o Information Security significantly matured o Establishment of the Enterprise Project Office (EPO) o Reduction of Change failure rates by a factor of 3 o Recovery rate from failure improved by a factor of 10 – all within SLA. o Stabilization of the Call Center Services – Major reductions in P1 outages and all P1 now resolved within SLA. o Significant Reduction in First Rand open IT Audit Items with no repeat findings. o Partner with WesBank and FirstRand in terms of group procurement and group practices o Achieve a 5% IT Cost savings for two years in succession o Significant improve in stability of infrastructure and a 95% reduction in Severity 1 issues experienced.

• Sabbatical – Working for a Non-profit organization to operationalize an educational Institute.
• Madina Institute
• 10.2013 - 12.2013
• This experience has afforded me the opportunity to implement many aspects of my MBA training that was not exercised in the corporate world. It has also allowed me to take charge in the creation of an organization from the ground up. The most challenging aspect of this role and the area that I learnt most was in the financial management. Due to the fact that the organization is defendant on donor funding, one has to ensure that you get more than you “bang for your buck” and that one has to constantly look at ways of sourcing funding. This has been very different to my career experience and has changed me in a number of ways to be much more frugal with expenses and to constantly look for efficiencies in what one does. Marketing was one of the areas that I did not have any prior experience in but had some knowledge of. Applying the principles of marketing to attract students and funding for the institute was a huge learning for me.

• Head of IT Governance Risk Compliance, Information Security & Procurement
• Woolworths Pty LTD
• 07.2009 - 09.2013
• Overview of Role I was responsible for developing a strategy for the Governance, Risk and Compliance for IT. Assessing the maturity of the Information Security standard and implementing remediation actions both short term and long term. I managed all the internal and external audit activities on behalf of IT from planning and engagement to final reporting. Key projects that I have been involved in during this time were: • KING III IT Governance • Protection of Personal Information (PoPI) • Payment Card Industry Data Security Standard (PCI DSS). Accountabilities • IT Enterprise risk management • Lead the Information Security compliance • Mature the Governance of IT • Lead Major Incident Management • IT Contract and Supplier management • PCI DSS project sponsor • IT Governance and assurance • Woolworth Champion for PCI and PoPI Achievements • Consolidation of service providers and contracts • ~R5m saving in printing costs over 3 years • Significant process improvement in tender process (RFI/RFP) with extensive due diligence on selection process • Implemented a loss review process as an outcome of the tender process • Improved the overall IT Governance reporting to Board • PCI compliance • Information security framework • Significant contribution to • Woolworth Champion for PCI and PoPI•

• Africa IT Operations Manager
• BP Southern Africa
• 09.2008 - 03.2009
• Overview of Role I held the most senior leadership role within IT operations in Southern Africa that managed all the sites in sub-Sahara Africa for BP. It includes 10 countries in total and served both the upstream and downstream businesses of BP. Accountabilities Optimum delivery of all IT operational service across the region • Regional Telecommunication • Helpdesk services • Desktop Service • Back office Services • Data Center and Hosting Services • IT Governance and assurance Overall regional financial management of budgets (~$17m) Cost and Saving management in line with business objectives Governance, Assurance and compliance on SOX accreditations Implementation and compliance to ITIL practices Serve as key interface into business streams Capability management and people development

• Head of IT Operations
• BP Angola
• 05.2007 - 08.2008
• Overview of Role During the period it was estimated that more than 10% of BP’s income came from the exploration and production business in Angola. I held the full accountability of the IT operations in Angola, providing IT operations to both the onshore and offshore teams. One of the key challenges that I faced was to stabilize the operation of IT in Angola and to ensure a smooth transition of the operating environment into operations. I managed a significant budget and set a high standard for the operations team. We provided all the required platforms for significant project delivery into operation. Accountabilities Project delivery and integration into operations (value ~$60m) • Interface and manage the key application project delivery • Manage and maintain projects dashboard for systems & application being delivered to IT in Angola(from various site around the world) • Commence project engagement process with different project teams • Negotiate and sign-off operation handover checklist • Ensure financial delegation of budget for first year of operations Developed strategy to integrate all IT operational service • Regional Telecommunication infrastructure • Helpdesk services • Desktop Service • Back office Services • Data Center and Hosting Services • IT Governance and assurance • Applications delivery Financial accountabilities for the department ($10,3m)

• IT Governance & Planning and performance manager
• BP Africa
• 10.2001 - 04.2007
• Overview of Role This position was created in Oct 2001 primarily to provide governance and assurance duties across all sections of IT service provision. The incident at 9/11 highlighted the duties that I was performing and my role and responsibilities grew. In 2003, my role included the overall planning and performance management for the region with emphasis on financial control – from planning to forecasting and managing actuals. From 2005, a significant part of my time was spent on the Sarbanes Oxley project. I was involved in the Business Continuity Processes (BCP) for Africa and provided the assurances for the IT Disaster Recovery Process (DRP) capability. I lead some of the disaster simulations for the region. Accountabilities Project manage Sarbanes Oxley Accreditation for South Africa and Angola • Understand COBIT framework for the control assessments • Main interface with global team • Develop project plans for the accreditation o • Execute the assessment process an provide evidence Project manage the implementation of ITIL process across the region specifically incident and problem management IT Governance, Information Security and Assurance • Manage External IT Auditing • Perform Annual Regional Sarbanes Oxley (SOX) Accreditation • Manage Digital Security and Standards • Provide assurance on regional performance contract

• Various roles
• BP South Africa
• 01.1988 - 09.2001
• Including a Secondment to BP Singapore from Oct 1997 Dec 1999.