Our Consultants

Strategy and Cybersecurity Lead

Johan Botha is a highly experienced cybersecurity and IT Governance, Risk and Compliance (GRC) consultant with over 30 years of IT industry experience and more than 20 years of specialised consulting experience across Africa and the Middle East. He holds an MBA from Stellenbosch University and has successfully led cybersecurity, governance, risk management and compliance engagements for more than 100 organisations across the public and private sectors.

His expertise encompasses cybersecurity strategy and governance, IT governance, enterprise risk management, business continuity, regulatory compliance and digital transformation. He has extensive experience applying internationally recognised frameworks, including NIST CSF, CIS Controls, COBIT, ISO/IEC 27001, ISO 22301, COSO ERM and FAIR, to develop practical strategies, governance frameworks, risk management programmes and implementation roadmaps.

As a trusted advisor, facilitator and experienced trainer, Johan works with Boards, executive management and specialist teams to translate complex governance, cybersecurity and compliance requirements into actionable strategies, measurable business value and sustainable organisational improvements.

IT GRC and BCM Lead

Jimmy Hamman is a highly experienced senior management consultant with extensive expertise in IT Governance, Information Security, Business Continuity Management, IT Management, Operating Model Design, Organisational Development, and Digital Transformation. He brings more than 16 years of consulting experience across the Gulf Cooperation Council (GCC) region and has successfully delivered numerous strategic consulting and transformation programmes for government entities, regulators, and large private-sector organisations.

Jimmy has developed a deep understanding of the regulatory, cultural, and operational environment within the Middle East and has been delivering consulting engagements in the Sultanate of Oman on a full-time basis for the past four years. His local presence and extensive regional experience enable him to effectively engage stakeholders, facilitate organisational change, and ensure that international best practices are successfully adapted to local business and regulatory requirements.

Throughout his career, Jimmy has led and supported projects spanning IT governance, ISO 27001 Information Security Management Systems, ISO 22301 Business Continuity Management, operating model development, strategic planning, organisational transformation, and change management. His combination of international best practice expertise and hands-on GCC delivery experience makes him a valuable member of the HOSI team.

Senior EA and IT GRC Lead

Andries van der Walt is a highly experienced IT Governance, Enterprise Architecture and Strategy consultant with over 30 years of cross-industry experience spanning financial services, government, mining, energy and telecommunications. He holds a BEng in Industrial Engineering and an MBA from the University of Pretoria’s Gordon Institute of Business Science (GIBS) and has successfully led IT governance, enterprise architecture, technology strategy and digital transformation engagements for major organisations across Africa, the Middle East, China and the USA.

His expertise encompasses IT governance, enterprise architecture, IT strategy, capability maturity assessments, digital transformation and technology operating models. He holds internationally recognised professional certifications, including CGEIT, COBIT Lead Assessor, COBIT 2019 Designer & Implementer, TOGAF Certified Architect and CMMI Lead Appraiser. His extensive experience enables organisations to apply recognised governance and architecture frameworks to strengthen decision-making, optimise technology investments and improve organisational performance.

As a trusted advisor to executive management and senior leadership teams, Andries combines strategic business insight with deep technical and governance expertise to translate complex technology and transformation challenges into practical, business-aligned strategies, governance frameworks and actionable roadmaps that deliver measurable business value.

IT GRC Expert

Johannes Sengwane is a highly experienced IT Governance, Cybersecurity, Risk and Compliance (GRC) consultant with over 17 years of executive leadership experience in information security, IT governance, regulatory compliance and data privacy. He holds an MBA from Milpark Business School, a Management Development qualification from Manchester University and a Diploma in Accounting and Technology. He previously served as Head of IT Governance, Security & Compliance at South African Airways (SAA) Group, where he led enterprise-wide governance, cybersecurity and regulatory compliance initiatives.

His expertise encompasses IT governance, cybersecurity strategy and risk management, information security management, data privacy, regulatory compliance and enterprise governance frameworks. He has extensive practical experience implementing internationally recognised frameworks and standards, including COBIT 5, ITIL v4, ISO/IEC 27001, NIST CSF, PCI DSS, POPIA and GDPR. His professional credentials include MCSE, MCP, PRINCE2 Foundation and ITIL Foundation certifications.

As a trusted advisor to Boards, executive management and governance committees, Johannes combines strategic leadership with practical implementation expertise to strengthen governance, improve cybersecurity resilience, enhance regulatory compliance and translate complex risk and security requirements into sustainable business value.