About
- 15+ years across public sector, international development, logistics, and technology-enabled operations.
- UNDP Uganda, February 2009 to May 2012: led a multi-district technology and governance transformation program.
- RL Investments Limited, June 2012 to December 2024: technology and operations leadership.
- DBA in Information Systems, Crestmont University (formerly California Intercontinental University), conferred October 2025.
- MS in Computer Science and Information Systems, University of Michigan-Flint, April 2026.
- MBA, University of Edinburgh Business School, 2001.
- Graduate Research Assistant, Data Analytics, University of Michigan-Flint, August 2025 to August 2026, part-time.
- Founder and Principal Cybersecurity Consultant, Clyvara LLC, from June 2026.
- Member of ISACA and the Project Management Institute (PMI).
Expertise
Technology Transformation and Program Delivery
Leading complex technology programs from mandate through delivery, across public sector, international development, logistics, and enterprise operations.
PMO Governance
Building the governance structures, reporting discipline, and decision forums that keep portfolios visible, accountable, and on track.
Cybersecurity Governance and GRC
Cyber risk and governance advisory: risk assessments, control evaluations, risk registers, compliance readiness, and remediation roadmaps for leadership teams.
ERP and Enterprise Systems
Planning and delivering enterprise systems and ERP programs, aligning business processes, vendors, and stakeholders around a workable implementation.
Credentials
- DBA, Information Systems, Crestmont University (formerly California Intercontinental University), conferred October 2025.
- MS, Computer Science and Information Systems, University of Michigan-Flint, April 2026.
- MBA, University of Edinburgh Business School, 2001.
- PMP, Project Management Professional.
- Member, ISACA.
- Member, Project Management Institute (PMI).
Articles
-
Who Owns the 2 A.M. Security Alert?
An alert that nobody is named to acknowledge is not a control, so ownership has to be assigned before the incident, not during it.
-
When an Employee Leaves, When Does Their Access End?
Access offboarding works as a governance control when it has a named owner and a provable end date for every account.
-
Cyber Due Diligence in M&A: The Risk You Inherit
Buyers inherit the target company's security debt, and the time to surface it is before the deal closes, not after.
-
How Long Should You Keep Data? Making the Case to Leadership
Retention is a business decision with legal and risk consequences, and it lands better with leadership when it is framed that way.
Contact
The best way to reach me is on LinkedIn. Connect with me on LinkedIn.