About

I taught ICT and Computer Science for twenty years, twelve of them as a head of department. In 2018 I joined a nine-person B2B software company as its support engineer, moved into business development, and then took on information security. I built the company's ISMS from nothing, took it to an ISO 27001:2022 Stage 2 audit in five months, and then ran it.

Since then I have worked on AI governance: risk assessments for AI deployments, vendor evaluation for third-party AI APIs, and a mapping of ISO/IEC 42001 against the NIST AI RMF and the EU AI Act. I build small tools with the same systems I assess, which is how I know what they actually do.

Work

Tools

Small programs written for my own use, published as they are.

• next-task Python, 2026.

  A local, dependency-free task tracker built around a dependency graph, with atomic writes and tests. It exposes a narrow MCP interface to Claude, which is how I give an AI agent a bounded, inspectable surface rather than open access.

• study-drill HTML and JSON, 2026.

  A static flashcard and multiple-choice drill app with plain-JSON question banks; nothing leaves the browser. I built it to revise for certification exams.

• cairoX Python, 2025.

  A small helper library for pycairo. The drawing at the top of this page comes from the same practice.

• vqganclip Jupyter notebook, 2021.

  A text-to-image experiment with VQGAN+CLIP from before image generation was a product. Useful background when assessing what these systems actually do.

Background

• Exprodo Software, 2018 to present. Support Engineer, then Business Development Manager; Chief Information Security Officer and ISMS Manager from April 2025 to February 2026.
• ISO/IEC 42001:2023 Foundation, PECB, 2026.
• ICT and Computer Science teacher in South Africa and the UK, 1998 to 2018, twelve years of it as a head of department.
• MA in ICT and Education, University of Leeds, 2012. BEd in Primary Education, University of Cape Town, 1997.