Principal Advisor
Organisations engage us when they need a clear head and an experienced operator, whether that means getting a stalled transformation moving, restructuring an underperforming team, working through an insourcing or outsourcing decision, or taking a step back to conduct a strategic review, develop a roadmap, or provide independent input on organisational design, governance, or policy. We assess quickly, establish what needs to change, and drive the outcome without needing extensive direction.
Our background spans the full technology and transformation lifecycle, covering enterprise transformation, cyber security, cloud, infrastructure, enterprise applications, service management, governance, operational reporting, vendor remediation, and data and AI governance, across regulated, multi-site and commercially complex environments. We have worked across health, disability services, education, engineering, manufacturing, and multi-site enterprise operations in both public sector and commercial organisations.
We have delivered in environments ranging from small owner-operated businesses through to a 30,000-student university across multiple campuses, a $500M multi-entity engineering, construction and asset management group spanning 25 entities across APAC and EMEA, and a globally distributed professional services organisation. Depending on the engagement, we operate across program delivery, stakeholder coordination, governance, operational improvement, and strategic business analysis functions.
We work best in environments where visibility, accountability, reporting confidence, or operational structure require strengthening, and where direction is unclear or ambiguity needs to be resolved before meaningful progress can be made. Our approach focuses on practical governance, commercially grounded execution, meaningful executive reporting, and realistic delivery planning that operates within real-world organisational constraints and budgets.
Our credentials span governance, business, architecture, service management, and information security disciplines, including an MBA, FGIA, TOGAF, and ITIL certifications.
30,000+
Student university environment delivered across multiple campuses
$500M
Multi-entity group across 25 entities, APAC and EMEA
35+
Countries within a globally distributed professional services organisation
70+
Sites supported across a regulated multi-location service environment
Areas of Engagement
Organisations engage us when they need experienced operators with both technical depth and commercial judgment. These are the areas where we are most frequently called in.
01
AI-First & Agentic Architecture
Organisations building AI-enabled operations or integrating agentic workflows engage us to assess readiness, define the architecture, and govern the rollout. We bring both the technical grounding and the governance discipline to ensure AI adoption is structured, auditable, and fit for the organisation's risk appetite.
02
Cyber Security & Zero Trust
When organisations need a cyber security strategy they can actually execute, we work with executive teams and security functions to define the posture, prioritise the roadmap, and implement controls across identity and zero trust architecture. We also bridge the communication gap between security teams and the board, translating technical risk into commercially meaningful reporting and building security roadmaps that earn investment decisions.
03
Governance, Risk & Compliance
We build governance and compliance capability that sticks. We have designed and implemented GRC frameworks across health, education, engineering, and professional services, covering policy, risk management, audit, and regulatory reporting. Our practitioner background means we build for real organisations, not ideal ones.
04
Privacy Advisory
Organisations navigating privacy reform, data governance uplift, or compliance with Australian Privacy Principles engage us for practical advisory that covers obligations, gap analysis, and implementation. We work across data classification, consent frameworks, breach response, and privacy-by-design in enterprise environments.
05
Strategic Discovery & Governance
When direction is unclear, we are brought in to make sense of it. We conduct structured discovery across technology, operations, and organisational design, producing roadmaps, investment cases, and governance frameworks that give leadership a credible basis for decision-making. We work well in environments where ambiguity needs to be resolved before anything else can move.
06
Enterprise Transformation
We lead or rescue transformation programs across cloud migration, enterprise application consolidation, infrastructure uplift, and operational model redesign. We have delivered in complex, multi-entity environments and are experienced in managing vendors, governance bodies, and stakeholder dynamics across long-running programs.
07
Transformation Office & PMO Advisory
Organisations running complex or multi-program transformations engage us to establish or assess a standing transformation capability — not just a reporting layer, but an office with the authority to direct, intervene, and embed change. We work through four stages: stabilise governance and mandate, define the target state and investment case, orchestrate cross-functional delivery, then transfer capability and close with benefits evidenced in results. The office persists across successive transformations until the business owns the capability and the outcomes hold without intervention.
08
Regulatory & Certification Readiness
Organisations preparing for ISO 27001, Right Fit for Risk, Essential Eight, or similar programs engage us to lead the preparation, close gaps in policy and process, and manage the certification lifecycle. Our principal has led three consecutive years of Right Fit for Risk accreditation with no findings, and brings the same rigour to organisations working through their first accreditation or recovering from audit findings.
Core Capabilities
Technology Strategy & Architecture
Independent technology reviews, multi-year roadmaps, investment prioritisation, and TOGAF-aligned architecture
Program & Project Delivery
Program management, TMO and PMO advisory, business case development, stage-gate governance, RAID, and delivery recovery
Governance, Risk & Compliance
GRC frameworks, policy architecture, risk management, audit readiness, and board reporting
Cyber Security & Information Security
Cyber strategy, CISO advisory, zero trust, SIEM implementation, and security uplift in regulated environments
Cloud & Endpoint Transformation
Microsoft 365 migration, SASE architecture, endpoint management, and infrastructure modernisation
Operational Leadership & Turnaround
CIO, COO, and CTO appointments, team build and restructure, operational recovery, and P&L accountability
Vendor Management & Remediation
Vendor consolidation, contract renegotiation, performance accountability, and commercial governance
Privacy & Information Governance
Australian Privacy Principles, data classification, breach response, and privacy compliance frameworks
Regulatory Accreditation & Audit
Right Fit for Risk, ISO 27001, Essential Eight, and regulatory compliance programs with no findings
AI Governance & Agentic Systems
AI governance frameworks, agentic architecture, and responsible deployment in regulated environments
Engagement Types
Fractional & Interim
Experienced technology leadership on a part-time or interim basis. Suitable for organisations that need CIO, CTO, or program leadership without a permanent executive appointment.
Program & Project Delivery
Drop-in program or project leadership for environments where delivery has stalled, accountability is unclear, or a capable operator is needed to take ownership and drive outcomes.
Strategic Advisory
Independent technology reviews, roadmaps, organisational design, and governance assessments for boards, executives, and leadership teams requiring an objective external perspective.
Operational Uplift
Team stabilisation, vendor remediation, process design, and reporting improvement for organisations working through insource or outsource decisions, or rebuilding operational effectiveness.